, 0x4}, 0xc) sendmsg$nl_crypto(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@upd={0xf0, 0x12, 0x81a, 0x10000, 0x25dfdbfb, {{'morus1280-generic\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x40}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) getpeername$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000480)={@remote, 0x5f, r6}) tee(r2, r5, 0x8, 0x2) [ 270.917506] binder: 18769:18777 BC_ACQUIRE_DONE u0000000000000000 no match [ 270.924593] binder: 18769:18777 BC_INCREFS_DONE u0000000000000000 no match 03:33:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x3e4d28249136c2e9, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast2}], 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200200, 0x0) sendmmsg$alg(r1, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="04fd66767ad0f407b38bdb007cdf9fd10e86407dc8335d18c74b06287d007a0cb6e0373b7c23612e487c750f400f6ad60ccb2676c34bb1067229751291e6e901836c88aabb77953dbf6ea917b4e8daa74f131606293f198f3fa89cbace57c7063c5dfcf9a5e426a6e0d55f11b00763a1dbde7ef354500c00f6814379c283601757a9724e694ec2acff6fb031d73089aeaaae57d94cac1f13a2b06943282d633abb3d5b85cc5a9efd42ed0f7321974b357be083154e60f26f6a63471b3dfb984755af87a8ece927adfa0f6678b3dcc94ce5", 0xd1}], 0x2, &(0x7f0000000200)=[@iv={0xa0, 0x117, 0x2, 0x8b, "7522d2ce2a6ded2fb9aa292fee021c56741f1fe547461092fe011a924474d738fc6fde5568c6719201d69dc808a340a912a7238f2c4762a66dbf4f0b3225278a66879112e037990f10b9332f5bd666402dcae66e8c324cfd742026a509b38305645dc096527e22ecfd7281544e48e37eac7633f67c10b3cff845c359248c65fe75b98ea4ce7fffbed34c14"}], 0xa0, 0x80}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="514d888ee66882b7713551c18abc88058b4fec1b3beedc80167d738d434e6f5ca98c2ec52ba68047fc33e6e5d57a27f043767889760a46888df1993e7a459c729e1ff1c5482cbfc8307bc008bea40aad3847aafe9164cda88e36311e2f0d97cf2672c82965781da33d5756c7a0bf054b16af16a8d703d4502919547e3b050e24b1e92a62bcc297073bb82eb650e6a4", 0x8f}, {&(0x7f0000000380)="79563c5daa2b06b5c81421560fcbfe741410372ec1fb1e271c5e41e080312a61241040862651232431885a36eb9a14d9e5a9ebc7c614f88b89c50e90f9c4c89f467246d3f40c9253c6303d339953", 0x4e}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="500000000000000017010000020000003c0000009ab5361497868f48596c7dc86d0567d5975022a1fd4229cf9f5d5905294469a54a5e9f8fe2d354a979d72d47569c53b00be7e28f6d526c8d3dae1db7"], 0x50, 0x14}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="8de2a4ea508eff75cfd2024156119081cb69bb90a04c1064b0b220903e5ee4eed7a0079f67b95e2cb146bbac93a0f4c5048d78baaea3cab18d0ea7bcaf98c86f836cb52572801a98c5a8b642ece8d934fae7caa430ee82b14a855f487f078c82fad7702ecae82522c661536e8bea26d1c37814b483aa84a1cc3b88ca5df5f56082954b296fb6013a68d75c2c7429594274d6a3072dc9a8de25708b88f462f09e08235c3483c261bde6a70f16d9f77fbf22ba78", 0xb3}, {&(0x7f0000000580)="e76de3e8858db95666f30eace50aa4156b95c3ac58c001ad2db70cb25f8f3388037f24ecfc32af373ebd", 0x2a}], 0x2, 0x0, 0x0, 0x48015}], 0x3, 0x40) read$FUSE(r1, &(0x7f00000006c0), 0x1000) [ 270.987544] IPv4: Oversized IP packet from 127.0.0.1 [ 270.992811] IPv4: Oversized IP packet from 127.0.0.1 [ 271.002091] binder: release 18769:18777 transaction 142 out, still active [ 271.009152] binder: undelivered TRANSACTION_COMPLETE [ 271.013931] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 271.034192] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 271.062504] binder: send failed reply for transaction 142, target dead 03:33:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1, 0x7, 0xffffffffffffffff}, 0x14}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x1, 0xbf24, 0x2, 0x6, 0x18}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x1ff, 0x10}, &(0x7f0000000240)=0xc) 03:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:42 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000200)={{0x0, 0x1, 0x6000, 0x0, 0x40}}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='(]\x00') 03:33:42 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000380)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)="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", 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="9648af7939d4a214165865fa564f037636a856007929e2aa8c19dfedf7faf873e2dcc324f46de1e86c30d668e1cc9f1f58dfc528c30fd653c59019739316eb74675ac341b8279b9b4ab2564d8381d2588e58bde9773a1a2f2b9d8497b3b37b37078528ad3101c1a592cc979acb9d44", 0x6f, 0xfffffffffffffffb) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, r4) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) 03:33:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000002c0)="d63ab2b2bd2d9c73c2293dc7c7c19f8c5cc91df10a96e9db5707f188826077b31554d00110cacdc904795acb2395feff7c41c71e9c7031ac881da63240fde4e65854d269f2d5b642e1f662001773b5ffc681") r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "7ef885a62d8145f331c4aa3b22479ee6ff20f1f6d53980ac54f18ed8fa2cb3b24c53a7448672ec9375cab117dc3efb460c12dbe5fc831c42d31041b3111422"}, 0x19) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696ce93020202070707030656d30207b0a749a7a1d9cede272ec2832b0368b04eb0c6904591160a60cb661fe7d1cb8e3310dcce13d5154b4ca97173e9858c23741ff624740f94bea4c2f4dfe9d1e9392e6a7a0c8aeedcfa524f258060a588f7b8f1a3f0d3efaac8e2caba0082290a54e1d2427c39de19a3813a9a9e1124ee9847334423db90805ce831f7bee598b9d161712b3c0896decff61a336134f4560f09e785c80826b8610e13891acdb1bf0430ab154c9d7de7906d1e966722bb1b0b16934c767e6d29e3bd0664e40b08be4d6f8808e149761eacffeec287ba84d"], 0xe4) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "553569b25e4ad8406c57cb11ee9c389cafe6c4d4e726203a6303f4b15d3e55dc6328e6f08679c60f52c71ab964adc414683a1f70b85cd10496a1b16dca1b6f"}, 0x60) close(r3) 03:33:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20}}, 0x0, 0x0, 0x0, "b3b3c5d9f2c10a01d13d92a1947ae059bdf547397dc7e1c736584fd95ae6320ae8052a4bf4f79828789b71a97aefb4c436b76100c48bf5f23adf98dd0033ef04fb7c8cefe3a38dc3828d969658128cb6"}, 0xfffffffffffffc5f) [ 271.146311] binder: release 18821:18824 transaction 144 out, still active [ 271.164267] FAT-fs (loop3): Unrecognized mount option "gZA'JVMXXw:/+{7(1̗˝D" or missing value 03:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x10000010000, 0x0) write$9p(r1, &(0x7f0000000080)="aa93ea111545d7fc1eed6dcc4beca0e056c3623d6fe4c6323b6670adbfc9524a8831b15d2bbcd61258eeb54f4bf4d4cfa355368eb36d6c3b48c8f2704e4a4d76f0b093c90fddcf4fecb2bd1d1d6739b1fee37fe1fef3460ecf4f3b35cbcd8dd499d5255d385d9ef5db4570c06e88730d392941fc0e6ab7fd1bfb642a5e7ca739a22f45125ffc3e1b9f89f1a2c2350018f8006e4ea546d16b7808d754aa588442ecb847e6c8390e5d3ac3e17e9bbf50dd5f41a89da7a5eae16be1f4cc888f6287f121b4acbf60c6ead515976e4e09b906d9e72fc0c293e9d81a0296192ac5d11bbf6c1c6ee76b43858fa357259a75bc5659885429e7507a", 0xf7) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000001c0)=0x83) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x10000000000031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 03:33:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x4, 0x4) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f000090b000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000775000)) [ 271.192623] binder: send failed reply for transaction 144, target dead 03:33:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000d40)=0x0) io_getevents(r3, 0x4eb, 0xbc, &(0x7f0000000080), &(0x7f0000000480)={0x77359400}) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) close(r1) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000140), 0x700000000000}]) [ 271.260431] binder: release 18842:18849 transaction 148 out, still active [ 271.290354] binder: send failed reply for transaction 148, target dead 03:33:43 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r2, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) sendmsg(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 03:33:43 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$FUSE_DIRENT(r1, &(0x7f0000000340)={0x158, 0x0, 0x8, [{0x3, 0x9, 0xa, 0x10001, '127.0.0.1\x00'}, {0x4, 0x8, 0x4, 0x7, 'port'}, {0x5, 0xfffffffffffffff7, 0x21, 0x3ff, '!mime_typecgroupvmnet1:/security}'}, {0x4, 0x2, 0xa, 0xc132d13, 'trans=tcp,'}, {0x3, 0x1ff, 0xa, 0x2d8, '127.0.0.1\x00'}, {0x2, 0x6060d817, 0xc, 0x0, 'trusted(GPL*'}, {0x5, 0x10001, 0x5, 0x0, 'msize'}, {0x3, 0x1, 0xf, 0xffffffffffff7fff, 'securitycgroup,'}]}, 0x158) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000200), 0x0, 0xffff) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x100000, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@msize={'msize', 0x3d, 0x3ff}}, {@nodevmap='nodevmap'}]}}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000200)) 03:33:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100000001, 0xc30a6c8d07ddb07c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0x7) 03:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000200)={r0, 0x0, 0x8, 0x40000000000000, 0x25c}) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0xffffffffffffffff}, 'port0\x00', 0x50, 0x40, 0xf579, 0x3, 0x1, 0x9, 0x9, 0x0, 0x5, 0xba86}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.ima\x00', &(0x7f00000000c0)='port0\x00', 0x6, 0x2) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x5, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x2}}, 0x18) 03:33:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x200082, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000002c0)={0xfc, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) unshare(0x2000400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x20000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xfffffffffffffff8, @empty, 0x100}}, 0x80000000, 0x0, 0x800, 0x2, 0xd01}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x9}, 0x8) 03:33:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x3, 0x0, 0xda}, 0x2c) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x10001, 0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) accept4(0xffffffffffffffff, &(0x7f0000000180)=@hci={0x1f, 0x0}, &(0x7f0000000200)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) migrate_pages(r7, 0xfffffffffffffffa, &(0x7f00000008c0)=0x3a4, &(0x7f0000000900)=0x3c18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) nanosleep(&(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000040}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2d8, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x480}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xf6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x34b}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xc4, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x3, 0x9, 0x200, 0x80}, {0x0, 0xffffffffffffffff, 0x7, 0x10001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800007100000000ee0000000000000000000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x48) 03:33:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x10, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x1f, 0x5, 0x974e, 0x10, r0, 0x766}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f7061636b6d25f6") bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x10) 03:33:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x3b6}}, 0x0) [ 272.007528] binder: release 18875:18882 transaction 152 out, still active 03:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:43 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x5, 0x7, 0x3ff, 0x8, 'syz0\x00', 0x100000000}) socket$inet6(0xa, 0x6, 0x441) ioctl(r0, 0xb77, &(0x7f0000000500)="0a5cc8071ed339b3a7027f4c0051a7bf6c3782a70513bcde0bd6da68d520367f45d807d9e9d1eb00877718e192d1cdd63cbe818b380ba138344286e5e595223e41c681f294e5e9077e292709144ced87eb846a7f12d39b34f0eb3433e0ef84433a4f930c24fc1853740ed5357377b8c8c58256a77ce6562cb9eac5f46099b212448dc5f40b7aade928a68b2e1f50e00a66e519236d8aee2e098da93b800f0000bcbd6515fc69de19019abf8d2d2184bdee000dc0803f460c0df58eb51addf550eb8fd98fc25080aa8c0576bab71d03ef81ddf903daf365c279ce1984a8fbfabef15499b5273dc60d4843d37543cb271854ca938ad1cb") openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)="63646700d7b50fb392115d4c7cea5e571780537028f8976ed5fca49832835843db81e59ff7016bc82bd03e3ffaa4f673388fb618a54114b0fbe5611c0f1718af8c6167cb81bed4a74ff58304fddd8b6391e6d2f6d38f77eeb4c23a1753712af8cff94ba3c42efb014034f819e48e5179b0befb74e4df6bc271b009cc4175b4d42e225517299f75f84492ee5af63ce237d0ea2acb81346e6975d8ce8ed19820110dd72c9cc2ea9baefaba15d923f9a34e5eca8e0beb0b7197b9bfb26af8afe018b7e2291efb0a854ff30e411fcd329872b9fcf6e9155be4d9e9281a35c02bf16d73c1666ea73eab8b5d18722bf5219a9a08de05", 0x1000000e1) getpeername$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={@mcast1, @empty, @remote, 0x8, 0x26f, 0x9, 0x100, 0x5, 0x340145, r1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x12, 0x0, 0x10000, 0xf5d, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0xd, 0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x500}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)) [ 272.064966] binder: send failed reply for transaction 152, target dead 03:33:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2000000088) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/220, 0xdc}, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000780)=""/4096, &(0x7f0000000000)=0x1000) 03:33:43 executing program 6: bpf$BPF_PROG_QUERY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x20) r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x40, 0x2, 0x0, 0x80000000, 0x3, 0x6, 0x20, 0x34b, 0x38, 0x357, 0x3, 0x7fffffff, 0x20, 0x1, 0x7f, 0x1f, 0x2d72e4af}, [{0x7, 0x0, 0x8, 0x2, 0x1, 0x2, 0x401, 0xc00000000}], "0a0a2f230eda8de927dd3ee106778ab79a7d20311bfcc2ea758b13546a5b252196e7b54d51d16c1ab7178e41b7aeada73d5a60526c8c27bcc4f1c28cbaaa7f47961421832864024571d4d418ea17795c13237d5ed46517", [[], [], [], [], []]}, 0x5af) [ 272.120602] binder: release 18909:18911 transaction 156 out, still active 03:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, &(0x7f0000000140)) r2 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 03:33:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c38f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64fe2858ddb1c656071a15e5d627e581b6d240b73396d3b7704f1cca8ce8031d08378a2e841b5c40af12cb0730e3acbe036ebc3dc88bd4189ecc0621280684d8b40e0ed91fa2b3c715a7399c52547c626158011f069282463701043a4", 0xcb}], 0x1, &(0x7f0000003640)=ANY=[]}, 0x2}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) [ 272.162236] binder: send failed reply for transaction 156, target dead 03:33:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xcdf1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x3) [ 272.227778] binder: release 18929:18933 transaction 160 out, still active [ 272.271241] binder: send failed reply for transaction 160, target dead 03:33:44 executing program 3: unshare(0x8020000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x14, 0xfa00, {0x0, &(0x7f0000000100)}}, 0xffffffffffffffa2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) finit_module(0xffffffffffffffff, &(0x7f0000000280)="2d656d306b657972696e67776c616e30ab00", 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8}, 0x10) syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0x0) semget$private(0x0, 0x6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') semop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1800}], 0x1) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}]}, 0x38}}, 0x0) 03:33:44 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 03:33:44 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)=0x10) 03:33:44 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)=0xfffffffffffffff9, 0x4) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000006540)=[{{&(0x7f0000005200)=@nfc, 0x80, &(0x7f0000006440), 0x0, &(0x7f0000006480)=""/190, 0xbe}}], 0x1, 0x0, &(0x7f0000006680)={0x77359400}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000002c0)=0x3, r5, 0x0, 0x0, 0x1}}, 0x20) sendto$inet(r4, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) keyctl$update(0x2, r3, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./control\x00', 0x40, 0x100) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000180)='./control/file0\x00', &(0x7f0000000240)='./file1\x00') ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1}) chown(&(0x7f0000000000)='./control\x00', 0x0, 0x0) close(r1) 03:33:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setlease(r0, 0x400, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000002c0)=0x4) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) r3 = epoll_create1(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x200, 0x40, 0x3, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r5, 0x4}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)={0x800020000010}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x401, @local, 0x7f}, 0x1c) 03:33:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = open(&(0x7f0000000600)='./control\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x80000) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x8001, 0x10001}) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x0, 0x0) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioprio_get$pid(0x0, r1) [ 273.147627] sctp: [Deprecated]: syz-executor6 (pid 18971) Use of int in maxseg socket option. [ 273.147627] Use struct sctp_assoc_value instead [ 273.154020] binder: release 18964:18975 transaction 164 out, still active [ 273.174211] sctp: [Deprecated]: syz-executor6 (pid 18971) Use of int in maxseg socket option. [ 273.174211] Use struct sctp_assoc_value instead [ 273.187671] binder: send failed reply for transaction 164, target dead 03:33:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) 03:33:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)="8d6d643573756d73797374656d5eb1cbc173074771d8") r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 03:33:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0), 0x1, 0x0, 0xffffffffffffffec}, 0x0) [ 273.230615] binder: 18983:18985 Release 1 refcount change on invalid ref 0 ret -22 [ 273.257587] binder: release 18983:18985 transaction 168 out, still active 03:33:44 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000240)=""/22) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/201, 0xc9}], 0x1) 03:33:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000104000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000284012000c0001006970366772650000180002001400030000000000000000000000000000000001f9116664a2f4f5d8e39ec08ae690cbbcdd1b984a3c09ddb045ed82df95f2a96fffc5907aab22dab828fcb307294cc0f9ee3fc11e6d832a8e551e687e445f4b3609a5f2b19f9fb358ba9f2924aa57c0060cad006c6624dfd6fd8201cab4b1f6974127a2a50c099e053578f0c4f8f686851ab0e0edbefe5cc4d1d494817f5849032ca701b83d6dd7fd8fb1779495ebabe8cd0d41e68cd098e6abce6ca79d50d1e638411eabb2ebf2ca5c7ed75b81735756b81e75"], 0x48}}, 0x0) 03:33:44 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=""/163, &(0x7f00000000c0)=0xa3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") lseek(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x117) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup2(r1, r2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r4}, 0x8) 03:33:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) r1 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x6, @thr={&(0x7f0000000140)="d5fb04c0bee93e19b7a9d9fbd66a89ccceae7f725ff53e26a2dd0e086922fe97fd9fb721ec5c1aec00c7d5501563b6b6aefd", &(0x7f0000000200)="16b33ac8c35784b83b7244d18cea747fc0eea76c50d0a5801fce1b7e2f9a717d7185c11b7447f24bf6e06879040b0946b5101b2d3903720787fc5c2385bd33202e61e60b45bd1ea05bc5e46146ee017ff797346c96e210435ce5"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) write$P9_RAUTH(r2, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x40, 0x4, 0x8}}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x9}, 0x10) 03:33:44 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x3c, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 273.350198] binder: send failed reply for transaction 168, target dead [ 273.365271] netlink: 40 bytes leftover after parsing attributes in process `syz-executor2'. 03:33:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/35, &(0x7f0000000140)=0x23) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000000)=[@fda], &(0x7f0000000040)=[0x0]}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) [ 273.406579] binder: 19015:19020 Release 1 refcount change on invalid ref 0 ret -22 [ 273.441135] binder: release 19015:19020 transaction 172 out, still active [ 273.489753] binder: send failed reply for transaction 172, target dead [ 273.511145] binder: 19031:19033 got transaction with invalid parent offset or type [ 273.535860] binder: 19031:19033 transaction failed 29201/-22, size 32-8 line 3090 [ 273.547521] binder: BINDER_SET_CONTEXT_MGR already set [ 273.553079] binder: 19031:19039 ioctl 40046207 0 returned -16 [ 273.561895] binder_alloc: 19031: binder_alloc_buf, no vma [ 273.567546] binder: 19031:19039 transaction failed 29189/-3, size 32-8 line 2967 [ 273.576564] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.582134] binder: undelivered TRANSACTION_ERROR: 29201 03:33:45 executing program 0: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000240)={{0x10b, 0x8000, 0x2, 0x98, 0x103, 0x3, 0x31a, 0x7}, "e4938af1c95ae7245656560f61a7092b8da4215a602ff941131b3060198455e9af3171b003308681af4165a906068a35a4e3f0d3922c95c2e8dc7abb65dbc1fb6183737826f080bb8eee08b4d4d8c6ee36244a93927a5d09fa2bf97196f0fff88f4c91cec5f8698e2d372997e97a463e64bc184246dcc0d5eda3e151e6a21e68b954d750238662e09548ba7f16551b41348f092c0966b65c1ab0dc37bf47a6517d7ec7963fd475c5585b09aa", [[], [], []]}, 0x3cc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x200000) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000140)) getpeername(r4, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000000)=0x80) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0)={0x2, 0x5, 0xfff, 0x1}, 0x8) 03:33:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000100000001000000e0093e0c0b85d70e0e84df40604ac13a14abefb06a3f5841b7ad80d2c6fce111e62964d726c299b3bc0e9b86dd01a17235828d7e747e2f9f72781d363f9f9455", @ANYRES32=r0, @ANYBLOB="00000400"], 0x18}, 0x0) bind$unix(r0, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") close(r2) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x7) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x420040, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r1, r0, 0x0, 0x4, &(0x7f00000002c0)="a300792134c9c605cca7d3e2c3e97b7391fd49afdad8235aedace8c688cb80f827f8dda6f5ab6e5b1cb43d95546b8a36135bc79b7b21b680a1eb65ab652fea864071b3e797031f8739bf41b802b947796128a65b03ad8ff03f007ca284c5d42a9cce1b77c5980896747d587852eb099ebf9634b8314ba68cbf5e7a7b4b5e83db0bd7281666228b635fe9300910a30d3faf2b805bc72e4661ca2bcbf8b6cf09185f4fee6e83441c3c52ec8d5871d218acc6d07c50b38ff72bda4e3c", 0x9, 0x800, 0x4, 0x20, 0x5, 0xb3, 0x7, "ac4626f38fdbafe7a3c8a2bb987343b8e29a328119db28711748efefa7a52bc47b1899bf05802f5e573bc4112c8b795094e431cf11129ea5293b8f7a40e496254350b3b1d55ec9c00505261e28d1989fd3d0cd2f6a2e277cc562d8664bd6c1778e80cb6f4125d4c3ae09d161447fdc0f96e8b04cea6f6f13276d13fa105bf77899df901a188522403202f363aa8d0ef13d5b514c753a97ef861901784a78e41cc82ba741bd9b7a01ed2dc4a5fbda1157e3e36d14a9033793b49245146c2380b170c702dca990c2c680cbe8bf721f07be88aaec6472d225a3f4e71ad90b6a2ce507c1c5766ddfaf4a868a8c19"}) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000200)={0x0, 0x1}) 03:33:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/28, 0x517) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, &(0x7f0000000140)={{}, 0x0, 0x0, 0x0, {}, 0x200000000000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 03:33:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) sysinfo(&(0x7f0000000080)=""/223) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec11) 03:33:45 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x100) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080)=0x81, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0xc, &(0x7f0000000000), 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) close(r1) close(r0) 03:33:45 executing program 2: r0 = memfd_create(&(0x7f0000000040)=')security{[\x00', 0x3) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000340)={'bridge0\x00', @ifru_map={0x15}}) [ 274.497449] binder: 19048:19050 Release 1 refcount change on invalid ref 0 ret -22 [ 274.511126] binder: release 19048:19050 transaction 179 out, still active 03:33:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:45 executing program 2: init_module(&(0x7f0000000080)='syzkaller\x00', 0xa, &(0x7f00000000c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f0f0000000030e12924ad83aa300fc6228476120f3c18"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000004, 0x718, &(0x7f0000008d40)=""/187, 0x0, 0x0, [], 0x0, 0x8}, 0x48) 03:33:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b287bf4042d1", 0x4c}], 0x1}, 0x0) eventfd(0x37ee) 03:33:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000680)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00005f7ffa), 0x80000, &(0x7f0000000280)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f00000e7000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x101, 0x53ea, 0x9, 0x9, 0xffffffffffffffff, 0x9, 0x4d7, 0x9d7, 0x81, 0xffffffffffffff00, 0x2a13, 0xfff, 0x100000000000}, {0x1, 0x800, 0x5, 0x38b, 0x2, 0x3, 0x5, 0xfff, 0x5, 0x1, 0x0, 0x8, 0x8}, {0xd8a, 0xb8, 0x0, 0x388000, 0x4, 0xa6, 0x100000001, 0x6, 0x326, 0xfa, 0x9fd, 0x1}], 0x6}) mount(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x0, &(0x7f0000000240)) mount(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) [ 274.538471] binder: send failed reply for transaction 179, target dead 03:33:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924b22, 0x0) recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x51, &(0x7f0000000b80)=[{&(0x7f0000000380)=""/253, 0x64}], 0x1, &(0x7f0000000300)=""/99, 0x25}, 0x0) fcntl$setflags(r0, 0x2, 0x1) 03:33:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 274.598773] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 274.613751] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 274.627388] binder: release 19067:19076 transaction 183 out, still active [ 274.650135] binder: send failed reply for transaction 183, target dead [ 274.682795] binder: release 19087:19088 transaction 187 out, still active [ 274.708495] binder: send failed reply for transaction 187, target dead 03:33:47 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000200)=@file={0x1, './file0//ile0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)="7b3e9346c628551b26b3bcb763495890e5e12241952f44e1f37fe531c969b6e882cc3175719417c639595f001ff6ecf32b9ed51fbed172d36a2d571fa75c25fc55a87c7df80aee545ad11255b15069d9b0a4167515ee6e32ea11b1aef7b8b0509b4ca3b20f07acbf03ae0901f1de8d0c2cceb9f2ff87f9c7165fa83f0bb19dcb868cfb053f1f20846f1dab2317bc20d2f2bf163637cf87718045be65a201eb989d13e6972fdcee590e407afdbf21797d54a1baf60ba3edfa5faf1944c1f2ad9aaf98", 0xc2}, {&(0x7f0000000380)="9aafafc3ae4e90beea993f0ee489a91fe36ded812b3b51c9918809c495e05b66958e820e96444a3d69f64544790b610f821f55816933c4c2a6dcb94eae9c81615b338d1dd730b3b97c4b4045fc86efd4d9ad2ade9a9eca6a25c286bfc4614786403d64c3975e038f23209bf334e6", 0x6e}, {&(0x7f0000000480)="3b43ce95b77abd39480db8f1f7147cc19a0690d9d5aef25ed0328db13824b6c946057855c23f6ff019b58569cc7be85b98d80a887ca000ab14a6859d6e11a7ee63e5d9e878188952b5a9c524b427b420700d029422a7b540ae64e473c78a4db9ef7e38d72d4819828da088ee80", 0x6d}, {&(0x7f0000000180)="762c76f6294f8f4d2888a199e8375434d3f34ac9ef21e491906175d7287aa1fbd0aa466cb051e36855b705c33a85241780", 0x31}], 0x4, 0x0, 0x0, 0x40000}, 0x80) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000440)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pwritev(r1, &(0x7f0000000740), 0x100000000000020a, 0x2) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x80000000) ioctl(r0, 0x8912, &(0x7f0000000140)="025c3f0a00145f8f764070") ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x5, 0xdf4, &(0x7f0000000000)=0x413b}) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c0000000000019078ac1414efe73a5b8047a281c31bc1aa80", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7000f900d3fe17256bfa12986e5edf561fb30001000000000000004338f4325a56c5632a0bdbbb187240922bf673caa49df57da7b8853b0ae50407655cbc644b08fd157c588ae9a3025225ce4a645b1b7f31b4f298ad0bfd7c11900b0e67bb75910dc2cb94f399c0c0fd021eccbd2a8f606df96af051674d818d221dd8170c546a67d286e1eafd308ceea927c51d1cb09a8252bc6044b538f372103e64ac055b7cd652087ef44131f717e56aa82aa05c1f6c2b4f7661ec5380982a367915ce9454d2cd4f3f9e99b15bce60f45a408b7de46673e41f595faf704881da541f1abb"], &(0x7f0000000040)={0x1, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) membarrier(0x3, 0x0) 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_gettime(0x0, &(0x7f0000000000)) 03:33:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x100000000) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '\x00'}, &(0x7f0000000180)="73656375726974795c6c6f757365725e3a62643f73102efdba06743e6273ff879cf77da7636d655f7479", 0x2a, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 03:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:47 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) r3 = perf_event_open(&(0x7f0000000180)={0xffffffffffffffff, 0x70, 0x3e5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(r1, r1) r4 = fcntl$dupfd(r0, 0x0, r3) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000040)={0xa0, 0x0, 0x5, {{0x2, 0x0, 0x1d, 0x3, 0x9, 0x800, {0x3, 0x9, 0x0, 0x20, 0xffffffff8ed33e65, 0x1, 0x7, 0x4, 0x8, 0x7, 0x64cb, r1, r2, 0xffffffff, 0x71e7}}, {0x0, 0x1}}}, 0xa0) mlockall(0xfffffffffffffffe) 03:33:47 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3|?\x00\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x7ffff, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) openat(r1, &(0x7f0000000080)='./file0\x00', 0x240, 0x8) 03:33:47 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200000) futex(&(0x7f00000000c0)=0x1, 0x80004, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x100000000, 0xfffffffffffffffd) 03:33:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'syzkaller1\x00'}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003c00)={&(0x7f0000000040), 0xc, &(0x7f0000003bc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="075e00000000000000000100000008000100900032d7e56a78fbe28ee8861f4f6c51f363b80445675a8a3953754f478205684dc12cee2d9583f369878b160bbf753d80f22ad7efbd8332c5bdd4cf4831acbe9de7cb004290a7203706fb84de9be21a425892acb13d61d5bf8ddd9cd5749f774448c3de3d8d185f3b16c91beeebbbe076708dbedc5050daf03174dde6180c0f3af52132075aac0680c8f93d5106b2ce89ab1945cfe5536fd45bb67549394f5f9cc8", @ANYRES32=r2, @ANYBLOB="3600020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000041000300030000000800040000000000"], 0x58}}, 0x0) 03:33:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xfffffcc7) inotify_init1(0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x9) 03:33:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="af0f35"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000140)=""/114, &(0x7f00000000c0)=0x72) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @empty, 0xffc0000000000000}, @in6={0xa, 0x4e21, 0x4, @local, 0x80}, @in6={0xa, 0x4e21, 0x200000000000000, @local, 0x7}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0xf1, @empty, 0x200000000000}, @in6={0xa, 0x4e24, 0x91f, @loopback, 0x3f}, @in={0x2, 0x4e24, @multicast1}], 0xcc) 03:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:47 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$notify(r0, 0x402, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x23de4e66}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x4) 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xf5, &(0x7f0000000240)=0x1ff, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40a00, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e22, 0x5, @empty, 0x1}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x2}, @in6={0xa, 0x4e22, 0x8, @empty, 0x5}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}], 0x94) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet6(r2, &(0x7f0000000140), 0x100000, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 276.491127] binder: release 19107:19118 transaction 191 out, still active [ 276.513943] binder: send failed reply for transaction 191, target dead 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) shmdt(r2) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd160-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0xfa) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="a273aa063abd38dd1bc7e57feef2e2192335f990a1186dd72bdc3079a79b01e3a9778d7fc4319fb2cf6727574368c6a3e55a47b4079c2cb0b7410e2a4360e98e9d936b1d5d4cfb3e942ba70f4af4df0dc9543c73b9b14ee72ee4b4490e6d917c3b31646864af1f707ebba44527462bc5218b70ac4f5ac06dc5ffe0145762e2d37e935d5545bdf6e100e8160b6450df6afcf55bf6c905727019e0659e4ceffebdb883677291110c6153c0d69cf080317190ba1cffac88aeddc2de4714011cfeff40bcd7f33615cbd338", 0xc9) 03:33:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="af7f6e9fa83838fbc983399418353f5cd8219a3a36bffd73d687cb5dd57db26cc4f2d9f8aaf48b2e04ecac5402c6c810741bbecda984b8ab3c913b7bc420b85218679b113c49bde3fdcae9d5c21aba59611ff13a11", 0x55}, {&(0x7f0000000080)="80970501a7b73acaa6cfadcba317431fdda32c9d6559cf84c66253aabd0a2353129dfc23cf5b35565c4a1714f1a11d", 0x2f}, {&(0x7f0000000100)="458dd16c1597d84d8d89ea154482c76566a19a0e9e99666def7231e5fd3391bd2b060fa2b6e99a0d074f588a76c8a4e20aad7ba90e9e1c702a3b9c0a2ebd4bd1107fedfe86a42ab79f73e84763cb54e3b01fdbd211dbd85eb9fa77aa33a79983e569286b0735f4f273c039d787e505", 0x6f}, {&(0x7f0000000180)="af31af7e7dc60265759e794106652b8f4226827790f7f67b671d0f1a2c42bf23238f479bc74469", 0x27}, {&(0x7f00000001c0)="af430a295ee80b81dd1f72f4ea39c04c632aa68f8696a7c4300cc7bc001ddd55686f2bd8cee11e90b376d6cb2a3bc7c748d89e4fddb2af3e7020c8b5fad2bb4df13a3be8fe81aac82c3759ac903f0b499a8e49f455b15009f07d74c69ce3630d8835937a4240a11c07801073cd7aed4b4aecd60b963f52d476578b65032a41f142ef5babdc529eba17ea56219fcebab19e1f1392b7", 0x95}], 0x5, &(0x7f0000000340)=[{0x40, 0x10b, 0x9, "7a344bd6a8c8824bf23f4bdb0e11079d4dbe646b08167a71dc218744faf80594f9a12c29a23dfc77a7857b4fa302be97"}, {0x98, 0x102, 0x3, "d150e2dd2ea1af4714a4e10b788922e1f35bac1b7184d86e62396c853c48a74a71cd49fc2e35a6bb347212a4769363a2523c8da351f44b0b5db2bb4e8a55f878bee8f34c9d4d02880c3e3e30c9133c71b2aab40a227600ef2144426f793d0785f821dabb3667f011d74ba736e9d288550711d3f4558827f9385cd509752601b40c"}, {0xe8, 0x11d, 0x5a7c12c7, "10fe22da32b94b257fd1dd97cba0c8c6e5e2885c873694ef940a3caa387246be644a322c54668a2b7457a061ce2420c76f7c8554b66233705ab1c418ebf5bff7f51938b88353cd47e8d2cc98dd80489c95f32303a8bb912eaaf9da829008b56f15cee50d4917c00693cb3d4b9b100ef36ac2d4e8bbcbbad2d1dd1fa07f4c1cde583136b91877ecf7ae8f872298c0fd6486e7b87cb295b93349ec733acf4c74286dbce57699720f1722317f48a53f7bb0f6881afb28f3a5e0972576f55d2d6cb05cb48574d4e78ec665ed627992ba38b50f29a89bb706"}, {0x90, 0x10f, 0x8, "ef9d41d846811d53966ecbc5306d509a711368a499925157216856e69599f59e46d9a1950fe7d4096bca1dce0a25af435ab3666791060a872c440f84536e97cb048dad2a61fbd613479ed27a5c72ed6d187ab23b6c673c650cd63d84d7ba7ab55fd3b816139eabb7e5c064a1418cb191a25b03a26d4bfe960ee805da"}], 0x250}, 0x6}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)="51d1807e6f310df50cdfb10610d469f5f412a54de227a2bdb0ddae1c61f3fb4e823ff9846f45dbb0e0e36c53aa66344dc3c29f7711d214d80bd97397ef55c971fa243c5f66e417f0d3b92265c27a6f3a9f39ba602ef6f02bbacb53f846b2243e997df195eeda772e7e4f8d8a5534bce88b6fd1dd77845a8515e4d181ae8109193fc1d210cd3c462665c6ebcb767f01b58f653ae55e28d3bf8d2814655df0a5f0031370f2acdf0d57de929277ee9798f412479c93", 0xb4}, {&(0x7f0000000680)="7cd859f865d6dc6781274f", 0xb}, {&(0x7f00000006c0)="bd4c8bd867b8a5bfc4141a72d321ba7d88a503b27aff400dd03a6365a0993a154c63858cc6940991b9fa5a9673ce1182bdc29584c988a2a17dded426972316dfc59ca6ed711832a5113dc4466ea3e6dbbd29a7a454b47029e333643bf320696a45afb04bc2851f59337117562fbeddf0be9c5b3a9aa8d6fca40b2eb90294ac956b0fef525d74a1cc969b97105b9fa51d16e1f7edcc5fe98707730b92", 0x9c}, {&(0x7f0000000780)="3304f7acc907fe1e258d28e0017edf106a5a10356e27940dd680c3446eaca9df3afe58ff104458ea9bcc89fe6017c24d88ad454a9c88ba4ed283d14110f111cdb296b92e04684f7083b02e6185e34ad19b38e6e8090d7a073a4617ecc27f26ba7735fe0cc3c5b48e69210d71936ed573234d31b90223555656e7980a9638c669908643b913534dec13a8b16accb4bdc20191fce1fd7b2b0d6eab27c8e22ea0de982e51c7e844c8233c08080fe4dfaec4682564190a3eb875a6e0cf73399b5ab642b9561a9c95116c2f2265509aa1a000f6a6ee1d6a2b012258d76f470fc20e147f4192ff290dcc3d04d99f12572c50107cb170b8b7419f20fd820aa6754b622c20248d48efecf9ac11f097dbdc018741e680e71e4e86b8dbcd41ef1cdc50011e0aeeca56111f07777a2a2b2978bb706b7fb1102b14e850315d33bbdfc8d112e789e8132a628c5c747038454cb14b914b8812c4b01f2f221ac47bf6e186c37cc7c23127c060388bc995c59c4ca9ab0b968c55ad826748db985febcf8f7badad9645331a6eff28881c41215d170b4cc82ca476e46c8cd2e075007805a10fbdb8d032f43ddbee545abd9fe599bf61d641e87a2c5f5c43c09ec08812e46f900b2e78602672f0f171f75e356af5eae60cbd1533ca5e59cc1695517aff5cc9b63b3ada15420974aa31c00bb411d2cade82911f973d042784f2956ede81b87438ef5066f0424e16a52859d2c50fc0cfede4ef4908dd4d34ec43a16ad6f423fb16d021f0ab2c30986a100bd73500b207720c0ede0ec88b2591abc8dd741f355ae37a4f1c01ebc1ff7d715cf1fdf3ce53f02371b7059fc90a172eec45fb78ab51dee08cc44f7fbe8eb81d4e47a8ec5cf85f65d4e722d36796e7f446624a590a0af9528a4695e555bdc6bf327765e8e930a73dfa36448b7eb7f7ba765b9f13636e091d1a7ac35ea4e8d4dc4364252fd98b855a8e540918dd47e8695c9504b7d25b3e8791b91d79392222f84e07e2968478dd667e52c691e0741447c74d45cd748b23ac764d9b768371ad1902a8fa2c69297e73fd3b6c122407f0d63e2eb6dbdab5f97f60294de904ec6b4d16d276e6919c53e7b3b98c555b59545e9effb39582fa6a479a31025ff7e9cafdb0d08c3c45bd9cb7d018969a4a9ac46b3264afa448c2c980218d20a0c8b4325de8ccb713318d87348bcbce71a378401d915a74079a449f525091dc92e7b9f711dbfd369254875266227345379e0c1570f91b89970838486083ded5ec2978b5ef6cc08c768383c569be0af7a51069a517f090aa21c7b102b925831e58b5e043532ee793e55f14b99a68a28d880fc318f6f607e01b105f4e0122508531d93d7f7432f25ba0047b064a1e1d0ecafba06bfd90adf3b226ff258bfdc486e100df9c9c63096fa3e580d8ebd91ac380e210448e8e032000ce79e637442f30a9ed135b4a94dd134f9a3b8b3a67db55ac4548ad0a0e9fe45a5622a7825f13dffe454cca4bbdd369a8806906275dcefc61b8c4005f4f2bd0e905fbf8d792e55ba00ef5cb8476e676816f27445ba0b8ca24c84ca7c7cbc74e6f876a7cd89b7b0e1c8848a199ef576935d688288e9c596e29c6d4fd987bb2f2598e6b577456ce9f75cf081d21482f1c3b9e7b45573f92a66112ba237ecde0dfc2d167fd1586c0f5b8a58ddb0208ee837974b7d574712a23e863cd0f3099295f3e363ef5455fb8224c17c7e1663d9ff43c1470c522e84424ecc7c132c6d77d4b65abfdce9190b4026488c25f9e75f696dce3cd3d1fc2414f0498f79a13f7031dd211ee9df2659c796869b7ec88f2b432fa8c53d3758b4e480df0d67cb8df9895e6aad9c31cf385548ecf6840fb11f13668d3348826d425a5bf735994929902a1dd33a3157d75f8457fd365dd02084a573913846ff613fef77fa7fecb09b22cc2503668a6a584eda1cf11339abe9942aedf0cdb512f9127d06975dda73f98a3ecec2f41d0c2c09eb8661391d2ae6908ee37172b22278ced68ea0f94745086f7d465fd68fb66e45f336f1544180c4a84f41150589b89e155319831e5ab6c5c7df61ebd130a25054dbc0ba25adeea2dcfbcb3c689a417b8a4efc1582c38db82c737fc755cd04801be314d647db09e8663f4cfe871678c9b885a12ce2ed94f2e20175e8ee68662a3e09904e5db4bc8fa8ae87ce7cb890695f325882c81ade38fd2d0435ada54f5c5117f214a704bafab3a399961b123e1390250502e3a65d1a904a35d68f8c086eb5a07a59f10f6f79c08a6875d0c8eef983979289018f36c05284b25b2f9bbb42543a7e59203495fe7c67b5d8cc2a30e80da9ae718be3da85d7e9d0502b45db143712616b640296413024b6d5536692d91bc00712a13f122d939f1f4330f02b40de78d76dfda18ea37fc79438c42c39c1faf84fbbcbd0ce4d398f47c7bcc313704ef71bae1d27f9bc3c6b3cda6e6a2a67f747783e09ff35a9c1f294b1e1efdfbe55819bfc9764e800a9e02d577bab310dba81f430888fb7d7f6626c536e686ee4c9141ffa0a930e23db2998c16635af88dc7c9fcd1f40be5f25ac91fbbdd11e8beb73f3c500ee8eb82830fe4b31ffd3d3ae9fd47e37d36222df6a0e5972f43b4963c67d8138ed8dbc840e1872aa51882c73a5f9f9d3923eefab9dab875fbfef48c11a2e2df7ca0e6213823d778866e46026e5198bc0ebc29f77cac26364fdf9793d5696a5059ba4f9994e770398bdb32d7e8319a704ad3c267b4e07f106bb3df26d63bd4d70816f96c30730478a20615b305673575aae4ca17f94cb0ac33e7488ac17f962f567ba62682780157cdfcc25ed458e7978811183eb0b3e20e77a8624538da8a14b24d5c628b57407641468ae84e4229533ec6d477de04003e732198700f173588219546027477761ed26f67437e2972e54b168c6034d0579f2089604549d36b57b0df39b5af0d8fa860f5ca8cae78976889e96ab2b98085408468fffb6b3762c5931bbd8521c68856febcdf3cf04e3506ecdd06fbdf9e6f6db108bc63613f447be8021e78e236c283ff0193e7b19ace648c602fb9f17b7db2cd7b345782909b0807be676331150ed85a311999e32697a4b52b63543df14f68fa11c68cde8dd1aa664270ca0d3b3d8b9e5b4b189ffeccecca751c22b85626fe33572b595bebf939be09cb919356d8724f41682224a898546dffd825c3877ab5b47e3f3485eb0f28c1ec241a891d081878a4391e45a9049e06d42696547f8a5079f5547176c522046c29fdd0f1229043020f4048f50ad3f2940569def7f0f3424f097356b5380b4564e6da531301773d42c708d4bccdb30a4a0a7c59defa2caea65bdb22a66e420eb609f409b58ff740f49443a71baf40ebc1119b23ace6fc6edced09707defefdf36cf1bb8956bb4d3c7a995832c5e113887cdf5784201f1a095e7c04b26edebdc4c78e3b3c9d52f9cb00ab51e55ca73183f2aeb5e0416ad3e1b0ec75501bb39267d91f3a336c41cf5807dd901ec7d2a0bce543c29a5c5b1398a92e75dba82dd488db19654458fceac6d795a99aaf3a808f5e701483eba8d2852e7d53e8c8ff8f20ebd986d0c33c10690e65528661f5b59fb8353d9fa082e74cc57ca105a1a800db4ff41570959f72d568ea959d8ac3acce83740f71da1cec42a4b9901c78b3a2a6e3b2beb57f847c03f126748af9dd094577d248b06f50feee6a40c41af47e16658a76d07b01e706df430442965cfc281d58b81d30db5ce6b618c0552be5137628007140f9b2204cede4430879af0d43af6c32f4f89ec0bd55c28efde5698b5c118c083a586d2aa52955f746fc4be5674c6b72a9c334e16b404af062156b78f0734fcb00c248c6cabfafb4bb7a436c22603838cd341a532cdfd3ce03a4030f8130eedcd1f606849b03b1d7a98f889e66aa9bc6a87d0c3419c27a2d1dd2a46fcb0c65d4b335e4c92e7596b81b8652433ae1d7112d65e5c9cbb17567333b637cac19b6b4d61153894cccf186f6a0e26064b82d021f9ad2f582a8482e70445d2e5f8d6b4c8d44df6141e06936ebeaa60dfa7294660ef73d2adfc3f7f46ed34bec591807c98ada80e0e879320c352eab4e5e83b7e3dc1863b6fe96348a1bbee88d32eaad25b73f59ef8d17ba1d4fa5d9244cb67eae60b008f6553d7529be6c0a6363920d0164350002a4d9c65fcabab0aa200cc9419619fb38050ad70821bdd07cc0d7ebac0df2c2b8e0a49485622d097a35019d01f5cf221fb4998036bc8a79316f8f61f3c213ff678fa7793c00d9852697fe103660f215208de98fb69a085e36533e28c70335d0060f2a7ddc126a79d5f3bdab1bb4f4a0b8aaef620c182749e4ab03f1115489b7a521d38f0585fb1e1429815d895f227c6721e5fb7752aecec6f93fc182567897cdbc6a4de1c92f8eddadae0d8fd068edb1e6605dbd1fa4da352ed65c2b46d2334d83ee394a8ac0c8f18c015d45593b6d783dbdf5e301d6c6ac199e77cd6471a7e68c5780ca27a672854bc65ebca7814c463231c15a39c8597bcb20693d63d04474fa4663f9b4a83913a8db7455b1c3960ef11f2a9a6abf28d70faa8399bca8010207480f299e8eaa088a198008ece95fa97f0974e9b157407f924582de0bb7ef7f0da8dc98b06b97cce0cbc266fc60e4bcbd522667117a54e13824064a9ede1cba49d3e0d6b2e5edb582bea0d29a48274b565a1adff18de37a493388abee0dcb7b785a941d865b836c54d34cce557eecd48505a192b9890a9f45086e3f8f55b7177ad3cda4f6db3d356195067a0f62acb18036876bb46d8f49da1382b0c5b5320c278d28694361e8151705f779813c9bfeff09556c85ee3d750b42c62366bcc4ba453f34ec83f4473b6436a0976837673a9ed476011e74c4c212b702ebf186f29e369b68bd44dfc643fe6f96782490fb2438f24ac2ccf094823bb0950f3042b47e88232b5fb905fd775ab79e5fb2205effa84bd22ad8870bece3374f373846c8ecc12926c48f8a7b8d3610e3e39e04ae34bc72c28b04bacefb6eedcd269c0c73998683a1e121d21484ee0165ac548a0611c520dc02849352be9d6e6abec55cf117ffeadf7d0d0af8188bd6457e6b101d700508915097ff8cf2fbc6d71ed244e67c7bfe31a26c3eafa29d554ecf21947635010a9a57ad551190639a5c19bfef78abdbfe12a9d63e337307753f37b5667ddcfb899930909d56832918175c0338d1cdc28e0edb6793f2670668cc1555e323e69040a6979b52bb406b25b9070000052394dcc63f209d5272701046e344df38d90e945888522f04f52a5a8add4a57de8f02624cc59395e210938905fe3aadbaf23c7e163d368fb20715d28502d16a16eb473915f9d14b0c57a331e3e6c8848cfb2e9273508ce90646bdaf4e57b3d279a88b107c77333dde67c6d3438efa220b64a8b11e1ca04ab9243f61ab2244659c1d69c44a7a812e9becc81d6757a82506701164d480d44d7a9a5e0eb441365a8f1b18e19151bc3fbc6dbece2dc37fc70193cea265532cc11fe7c6a3afdd9d4e5ec008e1d14d3d8b1a945f146ce651d72acef5e6de0427b9a88cb680211d4570d1e6378f971f8c23f9bb6665e67ccae01d66c37410c8647233476f64984b7b0cfaaeba5de5ad62d8882cd571afc869bcb1955a2c488a9cafd72c85f2d10c9876eb5056270d9bea3a342bfb21c41c09e656dd8857dec2a3d10afd5359ac6cbb0f57f021616a9a218dbb164dc669fd3a3894a5bfcd3a247e961d2f0eb62de57dbb12b396874fc820532d04b6441772e8bef6b29ad5e34977c7c", 0x1000}, {&(0x7f0000001780)="86bd273c1bea09397d410d712adc213dbddc15d52a35544594bff12f19d1b8f1417549f9e7111c7994839541b5fdab0ab41e24255d49f4b9deb7c961c8b2b1b5b8bf4c9cfe35098276083872531460df92c400467936013e0e4f465d09039a7f2b9d3323352ef2aa9d563eb0f1fd23452fc0e9c2d62f0d6eed8e03f1f1916f5723d74c8c1a15c8964f5168cf71414d0acbe23c9eff141fba954a582f27468fbc72", 0xa1}, {&(0x7f0000001840)="fa7d2689d836cc61eb8d022dea1c53a86631653d6e9ef679e2940cd5d44128dc744eba4196b97334666a63801662f7f024fdee5e830d7f905fcecce264c06cd6a0d4f6c298275fc6ab1c1188d4f559962b4a6941147ef0f91e73558575f312151dac73e0924d7ab86ef69e853831e6a1d218ca0dd11ae014766d4b4e7e660d092c7698e9c7d6f35c06e0de4beb1080e1d142b7c305a1c98c63d2196886ff999a624cf7d2a5c1a62bfd3eae2f1feaf1aeeebdb48094", 0xb5}, {&(0x7f0000001900)="d33d1ee55756f945e9469f3b0d9e83b6f75947c7d01b56a118b5749c3008f7e66382889ba3033174d34e6bc8e19c8802a9c7ecb86d5b3a000e48fc3451b2bca48334e16fbeb744c8bc1183eb15aed8a91e31e0d08b810241", 0x58}], 0x7, &(0x7f0000001a00)=[{0xe0, 0x108, 0xa, "96ec2d2800734fc9b56810ef3b2230c23b32a8f58b76252679d7c5f97b8a9eda7760e6aea1f3a7da03616756bde8519a3a7ebcf3726ced4b645caf0991a98fdae80205231e9a006ea48458af9dc1b514389234d3b382194b66103aa5f57fa574bbd3f8b151c798cd24e7c4832d521eaf2ae506e1adb5c0f4e59b783a4667b2cf364eeed7bd836df02b7a9d4c9296a364ccc776c82552b8217f04f63da8793e50b6dc122dc9d9c7eefdd5a2cafe1a402315330f1a147bf380a15d74e5112affb91190a09affc69115c48c8d2818"}], 0xe0, 0x4}, 0x9}, {{&(0x7f0000001b00)=@ax25={0x3, {"6372799e6e261a"}, 0x1}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001b80)="bbf417d749414f507c440e3647852a23fd1e0727357a50b71e3664b3025fd4b33e84c700daa95bfd56d6f0fe2f81bdb6436c01e0cc9287e6137e3510a03ebb76ca40956abdd8a8a5599c85adb513616f4eba967e03770d0c5334b77198f5c68230be9b9693d779f63caa6b5484d76f0d9bfe3b44aa978956606fa9226ec4af04d944a10f59ffbcd6b2c41cae3f251bdaa3772352f935837097bca6b5a377591b4561245757f087c490e41a2126c5826f1c73bbbfe71c1858dfdd937498324b6ff9bc643346fe7782", 0xc8}, {&(0x7f0000001c80)="e44694e69809deea18374968be8a223c3b91ad65bb5694b97bc5ef75ebca917272dcb68996b78e18f1fa32e8baa4f1bcb8e6296a0543657f4fa120a9bd5817c9755ac1fe994b208f3136bda1984896668aad715423addaf5774fef0695a65836ebd94f3268cc9aa207509b7ead8c722a245cc6101e45b9ed33ee993aedc2", 0x7e}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="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", 0xff}, {&(0x7f0000002e00)="ce433243a1cf5dac49b7e795a30d1044faffb658b4d5786030f0c99bd7f2235b07f9ae9c7de48fb8ff4c4fda3d01eebbf9ed1d479fccd6d44b304152985a7854140a19c8ee0d940444ec6a9b4fc787162fc618fed828f685fdddd333666fb2d324c6a302e92abc9aabad4619a29b91e4b6e5833d6fa1b0f4c88188e0bf8a1324d871347aa6d6e513e50231af315011da00ce099301f00113b59a394da7925947bd239e9e580c9098ca65b4e988fdc8170e0eb7d324203fc500f5082e3617101bdb740c3011730d694d17954578fbcdf26a06154ff09bc8f1e3bb6a4ba8e6648a90197d", 0xe3}, {&(0x7f0000002f00)="b4c6e381acf7d3fa5dc71164957a6471659daf3a03446b18d79fb24250a7bedfe16428bcd9e7367671eb1245c4f8108affba458ebcaf1804ec26c57cf64ca4a970239c5b409eff3d8b9bf301c7c04f558cfd7959f265278d9e68eb1760d90e07f4ce71a8d9c336a0b371d6c36bb02116e9e535ee01", 0x75}], 0x6, 0x0, 0x0, 0x400c044}, 0x5}], 0x3, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz1'}, 0x4) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000003ff8)=0x40000) [ 276.559179] netlink: 60 bytes leftover after parsing attributes in process `syz-executor1'. [ 276.581208] binder: release 19134:19139 transaction 195 out, still active 03:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 276.612541] binder: send failed reply for transaction 195, target dead [ 276.638196] binder: release 19150:19151 transaction 199 out, still active 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0xe, 0x3fc0000000000) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [0xc0000101, 0x0, 0xc0010015], [0x0, 0xd004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086607, 0x400020) 03:33:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8001, 0x4080) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvfrom$packet(r1, &(0x7f0000000080)=""/87, 0x57, 0x100, &(0x7f0000000240)={0x11, 0x6, r2, 0x1, 0x1f}, 0x14) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x488]}) ioctl$RTC_UIE_OFF(r1, 0x7004) [ 276.657243] binder: send failed reply for transaction 199, target dead [ 276.681918] binder: release 19160:19162 transaction 203 out, still active [ 276.700362] binder: send failed reply for transaction 203, target dead 03:33:48 executing program 5 (fault-call:6 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 276.738898] binder: release 19165:19166 transaction 207 out, still active [ 276.762772] binder: send failed reply for transaction 207, target dead [ 276.763752] EXT4-fs warning (device sda1): ext4_group_extend:1761: can't shrink FS - resize aborted [ 276.823608] EXT4-fs warning (device sda1): ext4_group_extend:1761: can't shrink FS - resize aborted [ 276.842961] binder: release 19177:19178 transaction 211 out, still active [ 276.856307] binder: send failed reply for transaction 211, target dead 03:33:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x8280) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004340)=""/229, 0xe5}], 0x1, &(0x7f00000044c0)=""/19, 0x13}}], 0xe000, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 03:33:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x505000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x2, 0x30}, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$ASHMEM_GET_SIZE(r4, 0x80487436, 0x709000) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x400000001ff, &(0x7f0000000300)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x240800, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x4, &(0x7f00000003c0)=[{}, {}, {}, {}]}) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.ima\x00') ioctl$void(r0, 0xc0045878) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000240)=0x5, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) write$evdev(r4, &(0x7f0000000080)=[{{}, 0x2, 0x7fffffff}], 0x18) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000200)={0xe, 0x2, 0xded4}) getsockopt$inet6_buf(r6, 0x29, 0x2f, &(0x7f0000000000)=""/40, &(0x7f00000000c0)=0x28) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="660f38803568890000b9800000c00f3235000800000f300fc71b66470f3882935d0000000f323e67440f380583000001000f015944f3420f01dfb93d0b00000f3266ba410066b8c6a066ef", 0x4b}], 0xaaaabf0, 0x5d, &(0x7f0000000000), 0x32) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000002c0)=0x2000, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:33:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_nanosleep(0xfffffffffffffff9, 0x1, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x300000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000019) 03:33:48 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/75, 0x4b}, {&(0x7f0000001180)=""/121, 0x79}], 0x3) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1400}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e40)}}], 0x2, 0x40) 03:33:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x600210) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @remote}, &(0x7f0000000080)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) fstat(r1, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r4, 0xe, 0x6, @local}, 0x10) r5 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x100, 0x40f, 0x2, 0x0, 0x0, 0x10000, 0x4180, 0x4, 0x6, 0x3, 0x1, 0xffce, 0xfff, 0x3, 0x401, 0x35, 0x6, 0x4, 0xc22, 0x9, 0xd873, 0x1, 0x0, 0x7d6e0bc2, 0x3, 0x5, 0x4, 0x2, 0x7, 0x9, 0x7ff, 0x9, 0x1, 0xffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x9, 0x6}, 0x10020, 0x5, 0x8001, 0x7, 0x67, 0x81, 0x2}, r5, 0xc, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00000ddff8), 0x102002700) fsync(r3) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:48 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x3, 0x501000) setsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000500)=0xe2, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000380)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x7, 0x5, @mcast1, 0xfffffffffffffffe}, @in={0x2, 0x4e22, @rand_addr=0x80000000}], 0x4c) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x62}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000480)=0x0) r6 = perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x4, 0xffffffff80000000, 0x4, 0x7, 0x0, 0x9, 0x88000, 0x2, 0xfffffffffffff694, 0x20, 0x2, 0x800, 0x1ff, 0xe455, 0x7, 0x2, 0x8000, 0x80000000, 0x7301, 0xbf5, 0x0, 0x0, 0x5, 0x5, 0x7, 0x8, 0x2, 0xffff, 0x8001, 0xffff, 0x5, 0x3, 0x3f, 0x6, 0x5, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x7, 0x3}, 0x100, 0xffffffff, 0x1, 0x7, 0x5, 0x4, 0x3}, r5, 0x9, r3, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x4, 0x9, 0x0, 0x2, 0x3, 0x2, 0x5e, 0x3, 0x3, 0x0, 0x2, 0x400, 0x7f, 0x7, 0x2, 0x800, 0x40, 0x78b, 0x40, 0x6, 0x1, 0x9, 0x2, 0x6, 0x0, 0x100000000, 0x81, 0x6, 0x6d7, 0x400, 0x0, 0x7fff, 0x1, @perf_config_ext={0x2, 0x20}, 0x402, 0x9, 0x800, 0x7, 0x1f, 0x3}) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={r1}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r10 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x400, 0x2c0200) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000000140)) shutdown(r1, 0x0) getpeername$llc(r9, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000005c0)=0x10) [ 277.521557] binder: release 19197:19200 transaction 215 out, still active [ 277.547479] binder: send failed reply for transaction 215, target dead 03:33:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1cf2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @rand_addr}}, 0x8, 0x101}, &(0x7f0000000140)=0x90) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x200) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000001c0)={0x3, 0xde1}) prctl$seccomp(0x35, 0x0, &(0x7f0000000440)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000200)) [ 277.619322] QAT: Invalid ioctl [ 277.624116] QAT: Invalid ioctl [ 277.626393] binder_alloc: binder_alloc_mmap_handler: 19205 20001000-20004000 already mapped failed -16 [ 277.645951] binder: BINDER_SET_CONTEXT_MGR already set 03:33:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000028000100000000000000000001000000080000000741000007e87855aef6354ea33170e2a089c62625ff19184d16a8ecb8bfe5ce16fe8377776e8f895d86030b32733bf97d9305f87d4e20648a77676ad646f5a491052ed3ad7070cff38594c5412aa3425bdfd9e317fbad04e62b542039b17ed8fbb16b63130fcb9d42b20568a314f912b8b29a070cdec3e511d57c6f0c1ad6a940f18bcfdb31c02a72765aac72f2bf79485415d706d47a9fe1b671991afb36ccbd6084aceb760238d547d693531ab8f1bee3a1855576a1f8101163ec3a7585b8d268e72ef4ca56d2a9f0203a5484e4d580c2b2bbeae71bb330e6a0cfc77a1899741de9ad2b77cfa00b5eac32ebfb"], 0x1c}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8024}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@upd={0x108, 0x12, 0x4, 0x70bd2b, 0x25dfdbfc, {{'pcbc(aes-aesni)\x00'}}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x829a}]}, 0x108}}, 0x80) 03:33:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x109000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 03:33:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x20, 0xfff, 0xa, 0x5, 0x3, 0x7fff, 0x9, 0x40, r2}, 0x20) [ 277.665780] binder: 19205:19212 ioctl 40046207 0 returned -16 [ 277.673149] binder_alloc: 19205: binder_alloc_buf, no vma [ 277.678787] binder: 19205:19217 transaction failed 29189/-3, size 24-8 line 2967 [ 277.679515] binder: 19205:19223 Release 1 refcount change on invalid ref 1 ret -22 [ 277.692491] QAT: Invalid ioctl [ 277.697779] QAT: Invalid ioctl 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) mount$fuse(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) r3 = openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0x400000, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xb0, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 03:33:49 executing program 6: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x800) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000440)={0x0, 0x5000, 0x3ff, 0x80, 0x4}) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0xfffffffffffffffb}}, 0x1c) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x20000, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x0, 0x4) r5 = socket$inet(0x2, 0x0, 0x7fff) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f00000000c0)=0x35f) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x5, 0xf9e, 0x1, 0x0, [0x0]}}, 0x29) setsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f00000002c0)={@loopback, @multicast1, r6}, 0xc) accept4$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x80000) r7 = dup(r3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000300)=0x10, 0x4) gettid() r8 = creat(&(0x7f0000000000)='./file0\x00', 0x8c) write$FUSE_NOTIFY_STORE(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="2f0000000400000000001000000000060000000000000007000043a8e6a240403366c24de016ef00000000000700007d1a972b396dd0828783337565c84efdeb6bda3a13caec6b29c7c2aa3572a14de7045b1b5b8704c21c7b6e3f"], 0x2f) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x10001, @dev, 0x1}, 0xe3) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000004c0)=0x53) writev(r3, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 277.741230] binder: send failed reply for transaction 219 to 19205:19212 [ 277.769135] binder: undelivered TRANSACTION_ERROR: 29189 03:33:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x9, 0x5, 0x100000001) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffffffffffff7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x1, 0x8}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r7, 0x7}}, 0x10) getsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r5) dup3(r3, r4, 0x0) [ 277.838676] binder_alloc: binder_alloc_mmap_handler: 19241 20001000-20004000 already mapped failed -16 [ 277.849307] binder: BINDER_SET_CONTEXT_MGR already set [ 277.854874] binder: 19241:19245 ioctl 40046207 0 returned -16 [ 277.862514] binder_alloc: 19241: binder_alloc_buf, no vma [ 277.868138] binder: 19241:19256 transaction failed 29189/-3, size 24-8 line 2967 03:33:49 executing program 1: r0 = socket(0x11, 0xa, 0x0) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "525f5f029fbc0866480ee85cf32785a5a490e96063471baabf8e593a77ade8d3b80c10de4e0aead9db4fb69b9e38b65b3327620c6dd54d945c5956c763855b"}, 0x58) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:33:49 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7fb0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) write$binfmt_elf32(r2, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES64=r2], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYPTR, @ANYPTR, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES32=r2], @ANYBLOB="0b30a238cad181394d39d375a317a1baa5e1cbfb645bf1e83c5d9fd6eba4b176d9642dca88d27009bafb8c5340e5d832d415427a375463e0a906c14a445a79bc0a9647d3090b15cbb9be1579d790487d86c43b8bea2184932cff2a36558b293997179d59eaf95304b107c7a6ccaaecb29df122f9a5ae85836f830fab67648e6fba55c7ca6362abc91c8d02cd11200f2223b809348500ff1eb25eba2327fb31e7e516625b23ea9b5be468574a1ef8fbece9baff2d5fd1a4ca79e41adbc5e3b7d68a8d98d1aee9eafde65f7ec944fae53f7b55ccd96460fdfac697b58027614f7865c7", @ANYRES64=r1, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="40070cdbd97b97eb849dcad50e0b245add59b06b7bc48665062a635332824ef8f83f4bb4a8629a00fbbaec216b34190d3eda387aa113a6372395718adfb513f00e56d6982b7ae5eed69f6f7aa5bbe521fa57313dfe16d962c3f2abd7a6699cad36791d089c1089c05004e3355484daf992d99c21195c37e1cec75e11db027da58e989e4249d0333ba1f968f0879085fb9c9a91bf9dc284", @ANYRES64=r1, @ANYPTR], @ANYBLOB="99752ac20ff52cf3f783f348a3877cbcaf33647638c457f01a25f3cdd64d23407b28ed8ddcc91e4c6a5ecb1c9c9a89faad281a3fd53e649c181b6e249fae42d5185a6f9ef6d016eb025c0ed783cc6e9f4794288277372c654deb50351a54bc0a6b30371d947fd9ea9bd2e5964ee052acd061363b56ad8d84d9316485a1de7683219b27f82095566dbcdea78998595bb1e672467a315b3581ec3ed4c185ba32a705d28491997af6df5e075bff430559bbcb128f382117ace13e93fc78e4d925fa7d2662dbb78d7e495a7705e4c557f109ecf864baa5fedb79de346e2e70c7", @ANYBLOB="d3ce7d3201c8d95f7c449781e807df03d8a929", @ANYBLOB, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESOCT=r2], 0x136) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) 03:33:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='3\t'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) [ 277.890701] binder: 19241:19245 Release 1 refcount change on invalid ref 1 ret -22 [ 277.907833] binder: send failed reply for transaction 224 to 19241:19245 [ 277.922421] binder: undelivered TRANSACTION_ERROR: 29189 03:33:49 executing program 7: r0 = socket$inet6_sctp(0xa, 0x80000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x11, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}]}, &(0x7f00000001c0)=0x10) 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0xdb) sendto$inet6(r0, &(0x7f0000000000)='<', 0x1, 0x7fff, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) 03:33:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) r0 = inotify_init() r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffc0, 0x10000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x3d, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/61}, &(0x7f0000000140)=0x78) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) 03:33:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x80003, 0x207fff) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000080)="4c0000001300ff09fffd956fa283b70000ffff07000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 03:33:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000004c40)='/dev/amidi#\x00', 0x7, 0x100) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000140), &(0x7f0000001200)=0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0}, &(0x7f0000001280)=0x14) sendmsg(r0, &(0x7f0000004a80)={&(0x7f00000012c0)=@ll={0x11, 0x1e, r3, 0x1, 0xe4bb, 0x6, @dev={[], 0xf}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001340)="9c896db5555e9431d2b58f52fe8e1df9305ec7d72cad79256fb87513af5b4e2b14fa1a5e261122f5b80e67276c7205cf7f78529699a5ec307e14b48ae6b8834e73381723c33190ba42ae5a4bcad1aeaf4f93b83509e8116ccbf961491cc21fab5e3b5f270478dd6579c0d850e9a97866980ce8d5c5b632c223c587bf37c2a10d834ec491dcd211f13560d30ac1", 0x8d}, {&(0x7f0000001400)="5c8a8d4f48aa1aaca486f2ceb7d9baef6d234e5e7302a303dc7f4b948c7a4d8a02a7b4bb8639e46e7f1012c84359b8fd44dc0316ace62b238ff001f5fa00994df44bd13015822201267589f0672ec93a92307d70fa9832fa3ec388148d7a1f2440e9dd41688a6fc12ed44b6dec3003d8e53508385e5b75e2fc43d43db963cb96fcfb5868153eedb8f0e2b927d6cd2fea537a1d9c9c98b267accc748af9a548d6440b7302765d6a167cb08321f7608d89b2b1be0b4e0f7d7e122afc3a17", 0xbd}, {&(0x7f00000014c0)="460197ceb01d07888882c32fa6bf0570d08a282dc726647ab06848dead03ab276ce5abaf2495117f8ed7266a08b4e32d4a3ba53d9737eb5e09cc91bfd5a0d30a901f4084179ef05916a9721e68b20e9911e7781260be3c0f49947b0fbf8cf34fc4a6f251c0fdb44503667dee6677a6ce0a946dd8ecd91ab9be63d494a8917c76b5bb8372434e2c17c2c1de71a7be25886f12e0b4e3d596649afec73a6b27", 0x9e}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)}, {&(0x7f00000025c0)="d53e58aff2003388555e3451bbf13201ee8d1a8db5ad606f4a420954ad29436c690208bf0cd9e55750547999fc81c4c74ab6c5df7e7b5add73fbd63a93ce8abbc3cebe0c483ab4da5eec50b5a9e5db58c9981657a45d59db5fbdcacca5ab37a3065b77642c6d5d862fc8c7a3febaa3e7413a284a1ae1c9689aeeb10c117627c16dc53c15c266dbe37b7861701a650f9b173d71753495c711bb0e5558917efbddd5671522f32191a3c27610e3e48bb35f2d3225eed39a16528a074960e2a389404183a9f1ed54e101dc32bb766973e91d4c1113e1f0c8fd2bea83aaf4e4", 0xdd}, {&(0x7f00000026c0)="56f48b912611925b282b9595e8b79d06", 0x10}, {&(0x7f0000002700)="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", 0xfa}], 0x8, &(0x7f0000002880)=[{0xc0, 0x11d, 0x6, "27d5e2fa22fbfb3795a4fcbaa2015951d643b800d374d2f26a35f248354b7d94ee5879dfa6c7cf8a46b7105e78022052dd0663559dd60e7e03268aa12152d8482bf37740ec6c16e05cb6d04760beabf2b69759b30749b2ebc728ef650b7c205e006780154f270efad73a00acd3c444de178db21e1d00478fabf3b2ad651cae3274e3083b7bc6a7f7820ec043badaddd82badedb13bcde5a4848bac4c496c47143a570c1139eb4977e3d30bff1db4a06d"}, {0x30, 0x10d, 0xfffffffffffeffff, "9cab1e51505d64a834fb7bad0f4a2e55a6c740e7157b093a2b6a8f"}, {0x58, 0x11f, 0x6, "f3dd59a66ae26e4a53c6695db31adef5c2dfd59c4dc87e32ce8390a51b371b7c43e9f1271d6a432c940c6095594f2d2025693e130d2d09a2b1b8e6424014f77be4"}, {0x1010, 0x108, 0x8000, "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"}, {0x70, 0x0, 0x5, "6cc105ae5dd04f4f0fa1b48531d429b6894acec91a956e453adcaab74a04456d09e05f9beb6ac7821193c5af97dba56e973995ebbe16a4ec8e8fcfb31022bfe2d83fe58fec5b3c6e09bd5755ec299f077aa5a123e3822e790b4b6a2a"}, {0x1010, 0x11, 0x3f, "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"}], 0x21d8, 0x40000}, 0x0) listen(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r4, &(0x7f0000004b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000002580)=0x7, &(0x7f0000004c80)=0xffffffffffffff63) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'bond0\x00', {0x2, 0x4e23, @local}}) sendto$inet6(r4, &(0x7f0000000100), 0x9f, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000004ac0)=""/90) r6 = socket$inet(0x10, 0x3, 0x4) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) fgetxattr(r6, &(0x7f0000000100)=@random={'btrfs.', '/dev/vcs\x00'}, &(0x7f0000000200)=""/4096, 0x1000) syz_open_dev$sndpcmp(&(0x7f0000004c00)='/dev/snd/pcmC#D#p\x00', 0x8, 0x4002) [ 278.360003] binder_alloc: binder_alloc_mmap_handler: 19282 20001000-20004000 already mapped failed -16 [ 278.370889] binder: BINDER_SET_CONTEXT_MGR already set [ 278.376329] binder_alloc: 19282: binder_alloc_buf, no vma [ 278.381938] binder: 19282:19291 transaction failed 29189/-3, size 24-8 line 2967 [ 278.387728] binder: 19282:19283 ioctl 40046207 0 returned -16 [ 278.402541] binder: 19282:19295 Release 1 refcount change on invalid ref 1 ret -22 [ 278.413689] __ntfs_error: 273 callbacks suppressed [ 278.413698] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 278.429452] binder: send failed reply for transaction 229 to 19282:19283 [ 278.444016] binder: undelivered TRANSACTION_ERROR: 29189 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:49 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x101) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180)={0x5, 0xeb1d, 0x154d, 0xedb6}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000440)={0xbf, @local, 0x4e20, 0x3, 'nq\x00', 0x20, 0xe1, 0x1f}, 0x2c) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080), 0xffffffffffffff9c}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000100)) setsockopt$inet_mreqn(r2, 0x0, 0x21, &(0x7f0000000040)={@multicast1, @local}, 0xffffffffffffff52) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) r5 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000580)=0xe8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xd3, "ae717594f379db0512063951abb924eb9bee9b1ebe610feb5c8bb0d2706a93c27ad7ba9a0bfa553bf2b3b33647f75c84f7dc19846ae2d20f7bb87f3c728fdf0c0a167155eed58d05d62d726d4071e749cdd6214a1b0fb4be873c42c6028c9e9f4922a787cca8c3a32a4065bc3921f8bc2df32db14625e68f1c514985be1533d1c681e3965f3c4d3bc8521ef5855661635b7c5b6f147aa7d8dde20955bc66268b55667cfa961f7e1a7b17806e2c38df864e2e8dea1f85d622a618a3e9c7857324712ea55b070156cf223ad3db7b039a2ce576e2"}, &(0x7f00000003c0)=0xdb) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000400)={r8, 0x80000}, 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@generic={0x1, 0x2, 0x1}) close(r4) 03:33:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x84, @broadcast, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x100, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x87, @loopback, 0x4e24, 0x1, 'sed\x00', 0x1, 0x100000001, 0x5b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0x38, &(0x7f00000000c0)=0x4) [ 278.459190] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 03:33:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x3, 0x0, 0x10000}, 0x23e, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) [ 278.540334] IPVS: set_ctl: invalid protocol: 191 172.20.20.170:20000 [ 278.543035] binder_alloc: binder_alloc_mmap_handler: 19314 20001000-20004000 already mapped failed -16 [ 278.561954] binder: BINDER_SET_CONTEXT_MGR already set [ 278.568726] binder_alloc: 19314: binder_alloc_buf, no vma [ 278.569077] binder: 19314:19317 ioctl 40046207 0 returned -16 [ 278.574365] binder: 19314:19329 transaction failed 29189/-3, size 24-8 line 2967 [ 278.577211] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 278.584864] binder: 19314:19317 Release 1 refcount change on invalid ref 1 ret -22 [ 278.591557] IPVS: set_ctl: invalid protocol: 191 172.20.20.170:20000 [ 278.595865] binder: send failed reply for transaction 234 to 19314:19317 [ 278.612685] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 278.625622] binder: undelivered TRANSACTION_ERROR: 29189 03:33:50 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa400295c) rmdir(&(0x7f0000000040)='./file0\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000240)="025cc80700145f8f764070") dup2(r0, r1) 03:33:50 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$addseals(r0, 0x409, 0xf) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10) recvmsg$kcm(r0, &(0x7f0000002540)={&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002480)}, 0x0) 03:33:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000002f00)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000080)="29d7e1311f160577651070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/134, 0x86}, 0x0) 03:33:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r2, &(0x7f0000000080)="93387d4e60fe7fddd89ad20e541dd4c6b530c590490077b4d13ef4c48620a4e413e3a5d7837beab84ac948f1000dee25933b14d03c8ac42e33b530f663b3155bd191aef4e01173ccc03b91cbe5af", 0x4e, 0x801, &(0x7f0000000100)=@in6={0xa, 0x4e23, 0xffff, @local, 0x6}, 0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000240)=0x7ff, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x36, &(0x7f00000001c0), &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 03:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:50 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f00000003c0)=0x80) accept$inet6(r1, 0x0, &(0x7f00000000c0)) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r1, 0x101, 0x101, "2e973f04927b7c6a82c17b53d03fe1705a"}) socket$inet6(0xa, 0x5, 0x1f) 03:33:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bcsf0\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'sit0\x00', 0x20003005}) 03:33:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000200)=[@cr4={0x1, 0x200001}], 0x1) [ 279.004131] IPVS: ftp: loaded support on port[0] = 21 [ 279.027054] binder_alloc: binder_alloc_mmap_handler: 19358 20001000-20004000 already mapped failed -16 [ 279.039972] binder_alloc: 19358: binder_alloc_buf, no vma [ 279.043274] binder: BINDER_SET_CONTEXT_MGR already set [ 279.045608] binder: 19358:19366 transaction failed 29189/-3, size 24-8 line 2967 [ 279.061791] binder: 19358:19362 ioctl 40046207 0 returned -16 [ 279.067746] binder: 19358:19366 Release 1 refcount change on invalid ref 1 ret -22 03:33:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 279.076670] binder: BINDER_SET_CONTEXT_MGR already set [ 279.082741] binder: 19359:19365 ioctl 40046207 0 returned -16 [ 279.090251] IPVS: ftp: loaded support on port[0] = 21 03:33:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xff, 0x8940) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0x6b65a878, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x6, @local}, 0x1c) 03:33:50 executing program 2: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002800030014000200007064647030000000000000000000000800040000000000080001000000000014000100080009"], 0x3}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x2000, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @ipv4}]}]}, 0x20}}, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) 03:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 279.122966] binder_alloc: 19358: binder_alloc_buf, no vma [ 279.128621] binder: 19359:19365 transaction failed 29189/-3, size 0-12288 line 2967 [ 279.156422] binder: send failed reply for transaction 239 to 19358:19362 [ 279.160316] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 279.178508] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.183470] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 279.196677] binder_alloc: binder_alloc_mmap_handler: 19393 20001000-20004000 already mapped failed -16 [ 279.206316] binder: BINDER_SET_CONTEXT_MGR already set [ 279.212388] binder_alloc: 19393: binder_alloc_buf, no vma [ 279.218063] binder: 19359:19398 transaction failed 29189/-3, size 0-12288 line 2967 03:33:50 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/43, 0x2b}, {&(0x7f0000000500)=""/58, 0x3a}], 0x6, &(0x7f00000005c0)=""/63, 0x3f, 0x38345533}, 0xe8}, {{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000780)=""/109, 0x6d}, {&(0x7f0000000800)=""/195, 0xc3}], 0x5, &(0x7f0000000980)=""/46, 0x2e, 0x400}, 0x20}], 0x2, 0x0, &(0x7f0000000a40)={0x77359400}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)={0x0, 0x997a, 0x7, [0xfffffffffffffff7, 0x4, 0x4, 0x5, 0x141, 0x3ff, 0x6]}, &(0x7f0000000ac0)=0x16) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000b00)={r1, 0x1000}, 0x8) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de440700d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 03:33:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000006, 0x8) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") socketpair(0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x40000000000004, 0x4, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) close(r2) [ 279.219599] binder: 19359:19392 ioctl 40046207 0 returned -16 [ 279.234894] binder: BINDER_SET_CONTEXT_MGR already set [ 279.240331] binder_alloc: 19393: binder_alloc_buf, no vma [ 279.241342] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.246006] binder: 19393:19395 transaction failed 29189/-3, size 24-8 line 2967 [ 279.259465] binder: 19393:19394 ioctl 40046207 0 returned -16 [ 279.269165] binder: 19393:19394 Release 1 refcount change on invalid ref 1 ret -22 03:33:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x20, 0x101200) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x6, 0x4) ioctl(r0, 0x80000008912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) 03:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001900)={&(0x7f0000001300), 0xc, &(0x7f00000018c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000f3001b0005050000000000000000000000"], 0x14}}, 0x0) r1 = memfd_create(&(0x7f0000000000)='em1:\x00', 0x2) openat(r1, &(0x7f0000000040)='./file0\x00', 0x604380, 0x10) [ 279.282009] binder: send failed reply for transaction 245 to 19393:19394 [ 279.299773] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.315682] binder: undelivered TRANSACTION_ERROR: 29189 03:33:50 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a30869a7ed6168582fec5c526cee3622dc4dd4f5a4527079691a03570285aafa29a13fb54f571abba96cb75b89f0d714b9a0f71b72a542395"], 0x3b) r1 = open(&(0x7f0000000000)='./file0\x00', 0x420240, 0x41) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="f719846325e3982558cf67e35288e28d0d42c4") syz_emit_ethernet(0xffffff5c, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000086dd60c8fba200183eff00800000008001000000000000000000ff020000005cfbc3c29254671f1eac601a85400000cfc1aa978d6fae19fc8c87000000000a38fc7e6600000000018800907800000000ff020000000000000000000000000001205d8fe545b315572f51dc12621186b37d8779a837c36f2949"], 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x3c, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000180)=0x10) 03:33:50 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xac, 0x40002) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x7, &(0x7f0000000600)=[{&(0x7f0000000900)="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", 0x1000, 0x8001}, {&(0x7f0000001900)="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", 0x1000, 0x100}, {&(0x7f00000002c0)="752a2ff4f1c8e3c616803e63dc8c269f08ff9a", 0x13, 0x8}, {&(0x7f0000000300)="e6aa57b230da", 0x6, 0x1}, {&(0x7f0000000340)="7009ba01989afc4ab9255f39198467712c2aea75b62d6ed3655e27b8ce16cd64ab32227e14651567168ab8081606cb793be2b2ec17f6e1f8de17d8c669552078df56a5fac971ec80e48c6a5afa43ff1aa15ff5ec75d8277ab63f3ba0b66af864628ea47c40ea2840c312b687d7b1e41d413434d5ad0ffef297ebe359d9709b06386fbb6e5e20131525db6066571c2b381aae9b5f2a93363ac12c7e1eee0c4399db950f193e0a34186dfc532def15ff17be3ff483c8e7f60157faa3abb56fb60189a5fc", 0xc3, 0x6}, {&(0x7f0000000440)="a31200428d9656f992bd50460282b4d56bc720cba160f45078b6bbaa8aea734aeb3737882f08107df76573b9c83c835c71b961933227072a2e57e007be89b04f65138f579fd403c7ef9ba37de11f60edbf4f30f1c29b5345341d949c17dd0d0d2228f4dea4d2abe646d673b1e4f67a4596f4d4cadf08a4bc1aa58f0ffc1dce210684ada0838cf8819b9521981c6e466b25de47382b612faa33d095d3e06efbf16166d7069b959b35c4eba4fa3d2b6145c0d0259b75004c9f80a47084753f225417a8c3b65a0c3113c3a38317b0fd", 0xce, 0x9a4}, {&(0x7f0000000540)="e75667776116fc1fc6b238ee0489de71cbe0c7620ea611fc732df796bc9eee3a21730662385115a046577a57e0e98bb5a22eed3ee4048b9880543dfe45647d30518f91f67fd135314e9bf8517d320ced883983246b87418cd390ac944755de9e6c26add652a8974323d67698c68d594d1c9dd4d661e3f9da062c84aa116c154f03c42593a581e908b9e189891a64d83cfeb3db98bc34531d9020985224d3959b8fad5d56b214c082a0e59ff36ea5a7b9288d208c3a66ae4da92d1fb7ed2447", 0xbf, 0x1}], 0x2040084, &(0x7f0000002900)=ANY=[@ANYBLOB="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"]) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0xfffffffffffffffd) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x4080, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8001) sendfile(r2, r3, &(0x7f0000000080), 0x2008000ffffffff) [ 279.365267] binder_alloc: binder_alloc_mmap_handler: 19412 20001000-20004000 already mapped failed -16 [ 279.379292] binder: BINDER_SET_CONTEXT_MGR already set [ 279.387696] binder: 19412:19417 ioctl 40046207 0 returned -16 [ 279.394920] binder_alloc: 19412: binder_alloc_buf, no vma [ 279.400600] binder: 19412:19422 transaction failed 29189/-3, size 24-8 line 2967 [ 279.416287] binder: 19412:19417 Release 1 refcount change on invalid ref 1 ret -22 [ 279.436868] binder: send failed reply for transaction 251 to 19412:19417 [ 279.445669] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.473288] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000045) [ 279.480490] FAT-fs (loop2): Filesystem has been set read-only [ 279.494672] Unknown ioctl -1071076861 [ 279.509020] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000045) [ 279.516455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000045) [ 279.526322] attempt to access beyond end of device [ 279.531314] loop2: rw=0, want=305, limit=116 03:33:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r2, &(0x7f0000000040)={0xe, 0x7, 0x1, {0x5, '%self'}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 03:33:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$nl_generic(0xa, 0x5, 0x84) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xb}}) 03:33:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0xb2, 0x4, 0x7}, 0x2c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x200440, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x0, 0x0, 0x8000000000}) bpf$MAP_CREATE(0xf, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x1ffe0000000, 0x0, 0x0}, 0x2c) 03:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:51 executing program 2: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) sendmmsg$nfc_llcp(r0, &(0x7f0000003b80)=[{&(0x7f0000000000)={0x27, 0x1, 0x1, 0x4, 0x7ff, 0xc8f6, "5d7e3107255246984f13ab3d904e061af5c8f0e2589834190b7f751bf50ce6de0555588fad2bb516afbc238cd65031e3c84cb6018c2f42494ac3b852145330", 0x8}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000080)="ac13bca1ed5105e5e2fda9b0e4b588bb69a46f837596f98a4f62d6e1a94dd4e7360b1c3557fe9f75a77af2ece77dc6aed2b8582f37c46d920eba5aa70322328c218fc7a839b0585eae82ef03b3fa196ca1c1768517aafad6e441d5b1a69facdffa66869b7abccc89caed8f6e6f3d5c71df46717064b7254f", 0x78}, {&(0x7f0000000100)="83d474ca12d6a7328962a925d389ae70b70a473ccf1cf1d69367fbf28eb0c0dedcf28e9a88b26826f450a020deac0ed445539699c03803c9440c6e04a8736b48a63ed547e2745ee54efaae570f055380841c1b7d98bf32", 0x57}], 0x2, &(0x7f00000001c0)={0xd8, 0x107, 0x100, "e571a443aa095cbaba8c09dc217062271118308f48fb66d652144d3afd65dc02c91f1c6d4e0ed2c36d71ebe8367216644615c0ef3c5f678b9e66700d8d74c67d5ba45aea27a1d8ab8cbd8173b737c8e3df97e227d74cca29544cbb1866a47bbb92085612c502b64ca4fbef1c9380dc2e97bf9cbe7d05d826b929fdbb2fce26b9cf9d5db5e178256b79baadb0920774abf07e1891bd0348a0389af6c1a19ef4d956558d7be2b37b6cb7f43ced20e35a44039488131938dbf042e5bd039c04c54574"}, 0xd8, 0x8000}, {&(0x7f00000002c0)={0x27, 0x0, 0x2, 0x7, 0x100000001, 0x100000000000000, "34c9932ab30b9f54073d817bf477869936bafbcc0738e4837ab8a408520995c4d525fe96d3d65858b50469e5f1119b3b79c1c62058461b544fb083de193ccd", 0x32}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000340)="d4248e20eca2f30e89b9afb35ac0fe808a6682806656526526a9df89db1975df3387b6b1e2151120e3eddf929bbb6ffd277dadf1a103bca496e6c50555c0a8271832f59fc4e768d28f8755dbaa7b3eacce0bbd08b6d3aea0e557e222740ce02a7771afbbdb908e5adfdb", 0x6a}], 0x1, &(0x7f0000000400)={0x58, 0x10d, 0x7, "b38de2a81f64a2ab0eaebcb3a7210d7b714fe3f14216e765935b314dc9913a9ec4d4c0b7971e31e63614a1beb636130f3f74a3bdf3018a78560ae35df591f28fabdf4ed3a6fc9c"}, 0x58, 0x40}, {&(0x7f0000000480)={0x27, 0x1, 0x0, 0x7, 0x6, 0x5, "1fa0fae1b955a3b1188c315c88c07fa9540a06d0bdaa0fbe145cb9187e1f1d94bdf1e3c2af38b1c3a285b4058f144b514da0c2e32ae2a070be0f8b2178e12e", 0x23}, 0x60, &(0x7f0000000880)=[{&(0x7f0000000500)="5afb8ae78f512d1fc37f3ced4242bbbf3782830afff7c22a046b64fecfc13fdb00228198afe422c20fb7f9dba0678bad1ddae9f3ce6a9c9ab89e135aa92478c461226662b3867d5e34810223fe6c3d4f48c622c3baf3c423719ab3e5f60a03cbf48624daf7ab022173bf6af3c6096a8ee264ce71ada60252d83625ef4a649c80048edd50eecf44ebf619e421b0cdbdef06aa329ff20890e7c8e6a595ca8c856c81ecc88052f2ef7316de10ce5599e063d7816339c975d09aaad907920ae6f10d8ac9074f4bf3f1001a5bdc25df5848ba056c36af4c0d0862e21973ca8d0d8a", 0xdf}, {&(0x7f0000000600)}, {&(0x7f0000000640)="3cc940d94e3f36473de0e30245ee569154599652cdcd4217497c609c9b3dc64870a5f299d30c9e95f6e18bb0cf752ed2e24044559704b590d829bb0481df8fc89e5e4ea846081da73167ec25ef48233d37feb338142de3dc88fb8c097fbba69499a6292a9b1a430495db0f7bcb2987cb46eb8ea0f23e6709b9d4e0824e702bb4015655af33219917", 0x88}, {&(0x7f0000000700)="980dbf708a6de9e04c6bab488cf160938af0d36171ec234d582241fea741e3f801374b20e9e6bf7362dc24166d8b94dc8c5e4c4ae6868e81eea2ded0848963dd7d1a6715a0516b2b61a1ac27beff1e49c7e8c35519984a9f5dd101e8736a4230cfbbb2c421e73935820893bfd092f0351eccec78f86ec027a218ebbfd7ab655938edd947cdaf259fc17503e4a1d4ece2569aa04ee31c739be027f2f96e09187d854e60de469e9d45ff00b97406804f4c853dc85ca78a5ba3bfeda9a10a854e83397918de99a846be7ce26638ecdf566a19b0c775fc28", 0xd6}, {&(0x7f0000000800)="4a0486b5efc6066a9cfdc78f47c80c7ad52d76277b60ba1faceed6c7b46f5a9719ad64727b554bfc90a0b9d1f335b3f9187fb39e8597e72116730ee2f1231dce020e7a62426892c71f380d", 0x4b}], 0x5, &(0x7f0000000900)={0x28, 0x100, 0x2, "01ea0871c5996e874c9946f0c110a51890"}, 0x28, 0x4040000}, {&(0x7f0000000940)={0x27, 0x0, 0x1, 0x5, 0x1000, 0xfff, "28238b45f1a2b0a9370d63b4a6cd50bf41a272d508796dfeaca3f242bdf20ed397aa9860c8b78ae1d2656d76f2dea56fc6104d02188f358ce1f56f2a85c2ba", 0x1e}, 0x60, &(0x7f0000000f00)=[{&(0x7f00000009c0)="cb000114fe6f93d929e595ea9037001a15512b5fa7944042359356d768ac22d0c315d5135c0dada1cc66d6718797ca219c802abf3a6c5e9e1d075081639d18d1c8cc38436706383a8ed7b76efe14a93914bc714246d07c64049a97b09fedb0b21903547e0600117f4999929402a25f88d145b7fed44706bc311f2822d006163b5d3fca641fd09ff4b442e30be4b9840d1de4a7dcfa833def203acd3727e6e30078aed2656a83684bd1c66eff96317834ad8fe440187c9fb9995c235b9581dacba15df145501887b83d1446d89d13e3ae50", 0xd1}, {&(0x7f0000000ac0)="5cb5de1871a82762e638e59e836c3837cfce1b3e58b91d39194f6b965a665bc94af30c46ba0f177b7963b93c5c4ae113b9f26d860f8bbafcbc43ba6d6345354231e3b92157fb111fcb6c98cabfeba741617e7480b83ba3537d7a8198e2a86f7a2e4c4ae6f56e7b8c7533fc9bafc2716c0c16d50dad823a7aec628b901140d1e4b6c9b66716812c75fd6effce1d3f950bbdc78398d90c8ff53b6f8c9752bd9f52d7b78018f018f1e05010e5089874b09c2118840e7cb95aed746dd48ccc2b244535001c972e3c7c4e5ee1112fac887e9fc789e95905a390956551d54b567ccdfacef50a3d393e077a671816e516ba447606", 0xf1}, {&(0x7f0000000bc0)="8b81aabc79f25da3fc3d0e09f0b86588253602a2cfd5c290eec2c05263f9cd7a7787f9f4c0a8d7faf6439cfcc238e9aac251c5635ebb5e627f0eded0db372a3c1b35f48a6092a8e5cea8edfca63b6e4839ae321700ed5ef364a471a9eae9ff347862f96de62845da977663deeafe548d471863d3041c3504626a4715e56c0df1b9ac05bc7ea40468897da432", 0x8c}, {&(0x7f0000000c80)="ced0472f5f9f206358de5d5b1141e6e2255c8f90fc161605346e1ae36e6bf5b35207c5ce6c62665de7915d5b6792b3afe46521e457ee6367e8db06a5189e70d68e76222c8309db501285a654986367ac3b39572606f3eb4d738a4b4468fac0e597064e5e9f3b4034520188645ad04c00ce078a86d3d09c7c0a789eb65c71434a4d5e48bca1d3de49f874df597cd96d0f88047dd978e6aeb38e479d0ca7672e5d7d0b6a98c1c62ce88fbafb6ef26e622dbc52f594183362f4edd7962c9ec211f4b4caf5b49118e6f51382b16f06df42f753f60076c279ef9e0141a2b51c63059fc818a521895c531f0de35d03ae9baeb81a", 0xf1}, {&(0x7f0000000d80)="00359dec5488cb5fc9c6115fd97954acc9c48136e15d40c4d35eb8ec8d5f54e0d3ea5b5b641ec542a2915473ca9c46b38aa11ce2829efe2e058aafcc7327d3c00172c0e0e0df7f7405cae2c1fff9cb5a9060e3649664848bc91684ab87ac9b24a466fef63edca296e7267d1a3062a24fd8527bf1594d41a78ad974b7876930df5aed9476b0c1ea544504aca70481e7f7a378b321ad6112101367f9935bcf5bda01168f474b1e85400a7dc10e6e2c2033b956c7458fc5bdf3268a462eb747d6100d28562c7dbdda11773cec3c5738f98c349c929b7b0ad3ee507115c868803f4ca0700a0a44", 0xe5}, {&(0x7f0000000e80)="bfbf79f697a780792c0318914eb12e", 0xf}, {&(0x7f0000000ec0)="6207805c", 0x4}], 0x7, &(0x7f0000001340)={0x1010, 0x11f, 0x1, "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"}, 0x1010, 0x20000000}, {&(0x7f0000000f80)={0x27, 0x0, 0x0, 0x7, 0x3ff, 0x9, "6ae7200707f6e4f4250ec67b7866ac8ed77e612824f43339e1ab4c40a9680fa725019e4c09aaad789fcbc75b50d66518790711181edb6278aa5d39247af0e3", 0x1c}, 0x60, &(0x7f0000002840)=[{&(0x7f00000010c0)="ab1c4d6696e676a58881911bb6ad983846f9567c47adc9a6042ff15dc95229437f1860e012cc7c2db12675a93d9a3304c3b0142eef6cc127d379a2146ebd9a7599e15f48dc70281f4d6bc9f902add0277f1fe1dfb839c1943919a582f436d29eb7ceda836de9a6", 0x67}, {&(0x7f0000002380)="0dd9e606efad4a809b9e45ee1ec72395380ef1930880554996357e8ea617f0c4201463fdcef314bf2c23c5e44799dcf768faa3799bbea1e8747b538721529b5bf63eaeff73219c96b105a9523c3b6ea2312cc104b516b3eb632e9de3b0cef46582761a32d83e867db489cd41724e723e0019c30fe577a0eb9555ec2093552c4a432b10f8e065c8ce2e03393c3005fa80aea3dd24a3b288083276d3056b62e30f102a586eb7245ad6ff7c6f3492a5", 0xae}, {&(0x7f0000002440)="aaf820f15344079d1b086d07991dcd85e97696ad8ce6daadeb64f50ac49941bd6b68a39a5bc46a1e0f8b3709e2e7db798d5905694f9b5cb566e72ae4ed0e44334bf083acbdaaf9c422cb625e5ed0d08b5be08028d995ef68beef851e6386448849c9e4b5e0636c7c4334c7d0708c367caf65ad316279eede50187aa08cb123f31fdec86e88c592630582f689d48589c74c0845ff74a7a8a11a474defda1590e3dd907116bab46d62f4fb26b5c8de6410ca3788970d6e77731cb7425f64461e53efb4aa6efc3f2091eee26803cb6a9b6aeb326d3b2b32", 0xd6}, {&(0x7f0000001140)="1a454083a8182d9d32f94260603abb1bb498cca2dbc1f4775298fbf7fa87", 0x1e}, {&(0x7f0000002540)="b238cbbc705383eb17060f4d94c6ead64e6529fd0b11078bfb9f2b59d3ff9047478318152c9bbc198e94240e4d57ad36fdc2c90e84ccab5adc47ca1c44b8fe8f99ff6e031f9d61030de43c0d21b6477803cc7e105b9297c5c466a73044f6f1f21a9e120f2804d5007cb9a9d3521c1508c99f01529b91386afdf2077ee8e5261c9171243492975faf1fc4d46accd713cf3d99f5ebc9acfe8fbc19e0753fb045b245e53a2f4a69bea36ccefd7cd1135f777b9db436955bc49dbdc49661c3043409003aea447ceb749d1ebcca911862b80da89b45e976550b3f6752b1786110fe4db4", 0xe1}, {&(0x7f0000002640)="b09da86203648fab08f9cd1bf09a6dcd62d6437324dce1f9b682fdd16d205eeb09de4a6325a4139db00ead72cd10501b7b8b64b805613239e88c1a439f5f1ca79b4c7e4f08a4beaf11d173ea269c33a4ab6a59e5ff459f8c05731526dc3a36fefa137e4d59fdb96c6ecfccc131056d05da6502ac722e6652f3317c8d47f5720110b6bd6841bde558fb754b940cfa88a5ab2df58abf77136635ba2cc9006cbfa9c6ebdc4ea3d3a08c6343520335a8c87b061b6d11ed09242e2306288d79b7677de2f90ddf4a80", 0xc6}, {&(0x7f0000002740)="9e1f3874677da84399001bf41a83edf7d611c07b1d6601bb18bdd9e30d67a17977c42f81773ec70b5ad0b3682403cbed2c0a07400926223cd29a9a482a1d30c13a3ef47404cfaa3c9b35276fae0caa8e20afa26e3537e85da778662651b54df7b36af05fc6694713b4e8435a2d5d2dabaa1f85218f8552b080c2a9b7a7b90ca03527acab3281c8207306e7e83a3a11f9da434d91056bddb64cc498f718f988ffed3f2f31db7506d9dabb07f69ff2f9b167f538ae7469d129752de9eec4783db4e6ba1c52dcac", 0xc6}, {&(0x7f0000001240)="0d21bd4963e1e93f2bfa0693db90129dd246e90f18539c21b38d6863c7c236cd2e9296362beb9ebdd11c41e29c3517cb9aa37d711fd145324fda4ea191453577d97491d2a4b027700a94112a8f068fb86b9ed51c71d32dc049f226c944bc685357a9f543e0ff6f20625cea4c12e963fc", 0x70}], 0x8, &(0x7f00000028c0)={0xe8, 0x10f, 0x6, "7ea21b0d057f992a0444fea501ea84a7bae90ada8704f3cadc7d09265f330f19ead2ec1ef2023c04e3154baebbb89ef95f01538b90a05ce078e927bec30cd793c92aca3c26d5cde91ffa6b85024525f95fe54878bd1b68ea4dcae51af3a85e3e2c73393f8c8f37bdd3f9f23e82ea119d52396110b7241e2d9bb28faac0156806bec4854db5d9e5ee50f6b1254001febcb1f854babc8b71c6ee2190fb119ee52c2f0f35be082c2ce954b7e0a295c9b3449dfec130e0addff033e5570c8c9edd72e70a3af1319d50ef9f85243964cc6795960347452d96"}, 0xe8, 0x10}, {&(0x7f00000029c0)={0x27, 0x1, 0x1, 0x1, 0xe6d, 0xe6a3, "63b46020f5db6569180a041e6cac16fb3ce292968de51ffe07125ee3aa450a9cc5395fec24622ca3daa3f90d4ec974df3720af2c80eb8e04dccbe6496b858f", 0x2c}, 0x60, &(0x7f0000002b00)=[{&(0x7f0000002a40)="e344d754c9ca4de0b9ec669dd6c11ef8064fbca5c3f6ba29c90a22e3ade48a17f6f75806ca9516937514d0e0b7f3b6887220f1a6a8724ad706994c15f8fb7f4c8ac85e39c94636f78b117406105f908da85c96e74dedac303e7a19c7c0a374ac00ff1b6b3e5f30ea980cc68182a12344e2ddb7cde1c4fa8ebaa4d89cece8a37f", 0x80}, {&(0x7f0000002ac0)="96be02c54c51dcb934af1e1b8c1468dd3a0bf3811e4442b5735467ebe040b47ac9341cece905ae37b67e82cf70", 0x2d}], 0x2, &(0x7f0000002b40)=ANY=[@ANYBLOB="a800e1000000000004010000ddffffffc2d56a2384b43e5deea596fd560ca7000d957c23f0b2de66d58b8323dcc25df87298e50393d2b61531d664eff2b41b9841afc06ae17c8abdd25ee9f4e9e83ee5aed10fc749dba5f11f5d374c009b23aaa08da79069bb7a9059e6a1cb82d4fa6c1c70eb223d04f5bd90489d7412d3e4aae7a0af6794ff1eb73ad9ae00666233c2e3f3f79a9ebeceac5e476ca9d85924ddb554dbf735000000"], 0xa8, 0x800}, {&(0x7f0000002c00)={0x27, 0x1, 0x1, 0x7, 0x0, 0x9, "0e139d9d5c5dd24b5311ba5ef63ed51b3ab8f3624cc71cb490c10a163f3172d757d36acb0b166107e9890409dc0b1a037a0cf13dd03c966f30dfd9b1ce6245", 0x1e}, 0x60, &(0x7f0000003180)=[{&(0x7f0000002c80)="b8c5f8c7d33bb7a4287783aa9cb242a2c69e08dcc1cbfbcc187e0790fed99e5e851ba914ec43323d211a2724088b8f4f6b768d9cf49c6c5af489079ef001fa694455ef1bdf05348e851ef84f177d19a66b2548d5ae09a6807d2c2865043cb5a4ab143c80b6b773eb7d2fb1a2d2017f7b53956748a1baf7ef34c2d73f76bf4de0aefe3009df56d7e9062eecf5670f8dca3d63202e814197985ea4d1e5088121bed5bf3c0d0650ed938193eb88f325", 0xae}, {&(0x7f0000002d40)="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", 0xfa}, {&(0x7f0000002e40)="8fa80ec94e3f7bb79d5f378e5f0368e5f41095481d1452f40249ed2d5cae83fbe251406ad4d584d88626be532b9775a4ef96f63e63e18ee5dbda0c18aca2c20af2e70167388d528eb2f241770983ae6c2744f590ca1ac61a3a2ec24fc637023d2c40596116fc98e88dc450d7604984702e7632bec43271beea4ea862fefafed0ec0893b125521ba2f66e2e5c5434553f25ca21fe077e09fc5e2cd20221bef93fcb5849293ef3646632a313a26e7485b67cc8218930a3f35bd1c0741085951a277c277b1921d2cb9c532f69c6bc856437a90470574d71b0b35e1ac96412367efa9a2b9505db0c835cbac92d85e5e6c667f3d221b364", 0xf5}, {&(0x7f0000002f40)="59c0fb403adfd53f2fa9f4bc4cc3da5ceccec6211cfb0dc34331444dbadd8ac0316e114bb4be11a63be7748be8de855cf3aff93922f033edfaba3031ef6805de632e5d10c482178dddb37d6134a1830f102773726abc7e88ca8c13a5d727749a59df9f86c20af50ca291843eccdfc95e80c0c9165e00dd6f6cdce7ad99e6d1ca85cd31ee81ebd1773773753f758fdb61ec82975173cae40f307d7748eb522de3c842947890b472c0bd566d", 0xab}, {&(0x7f0000003000)="b140200b4cc6e5f47e6c14576f9eaccedb0c7115196da60055934feb2fdc961525d3548911d171a6f3a1f161b0170d9cc3ed726660e37887baf4c1a5549d2fe3454654cf94236b4bc7e2d1f76a129a2625cc63546e431f8d28a6a4e3dac43dccdfebd0b42aa90953aa6a9f2409fc78863c9d628f897d039ff035dd295603761655a4a5a8bcb1085b0fb020418081d90acf46a3bac6405618496726c6b2293e7d7fe2c0a515e31eedb3994368f2941bf2bbdf49", 0xb3}, {&(0x7f00000030c0)="c54257c8fc7417739addf417a22b38b9162ee6c672db01b226cd5be032be60caadf6720c83d952bd1d51826f6aa951ac8b841a19607567ce6ab3a2571ec13dc68fb0fe168def01177fdf8078a4bb95ba840b821362dee7014cfeafcd785b5a3a0f16ac2b81a94197c800c3ca74f4feda6a450649d9047d61619b5b4796913fd8ba3370a1f272dd6943c932efdf8f69d58e40ccbc1034e66f759c36624f42b2fc66268d09c1229c4fb33bd9198a3296f782", 0xb1}], 0x6, &(0x7f0000003200)={0x80, 0xff, 0x5, "70d346a2749eb98fe8c4921b4b84169a590739b5bff343c024556d862ec75ac387055804c286161a918eaaba6c1687b41653a35d84f4c53bff0fcf1a98d4dda3b82a3c80a0551efdc2f2c8ec5dafe1decc17cc18f5d3e23d648c40a55cc154ba7fd8d39a4905cbecf76cadc3753d"}, 0x80, 0x4000000}, {&(0x7f0000003280)={0x27, 0x1, 0x0, 0x7, 0x8bb, 0x0, "9e5426662ee8b039f96d7d9e577b15bd5707f412fe9b34414615781f04706b4018dd792cf81c24506d168a9bed86284562e69595fac12fc9ec30d7c11178f3", 0x1a}, 0x60, &(0x7f0000003500)=[{&(0x7f0000003300)="2dfe55b022ef55b12e1b5fd2a7d2fd4d1ef43f7cce8b5454294d77825a8f79e25aa5fa1e18913bfc8217", 0x2a}, {&(0x7f0000003340)="a04c039e823b2251998cfd43107241c45c5773e645ad30da2542335821da87cc6e9999377bfdb5e5fac1245daba009dcd5ec282ed1ddfd628515cc073cad8179a811a0a381eee2a3f3a9dfd6a0bc8e89df6629aaa8c8686216d1e9d5351d7b2ea75695f972d27342b696a8d2d7aa5f2580904c5160da9c17ad2e454e48dff283f7ecadb01c194ecdc030", 0x8a}, {&(0x7f0000003400)="6c8b9d48f2e2bccda9029f750f30bd00215a347096e0aef290c269f1b5cb16f2b26ea91f4bb7b163270d885420b797389bf80f378dc3ca1bc27a9963edaaa37ac7d1503ee6a64cb4e306914c28dfe3a6442d49f8e649a38728438b44b23a6f3531a7c01b68625609d032561e63d0d75203f6c5d3dd949e8f8e8627a35fb05a3bc04d8bda897ab749a5cc1427cffbee999f5709d3033511a757e69fa3b88e86fc8a11b916354328d903370ee9cc6a37c0940df04b8ed2534fbcdb9f1fffd5c908e0", 0xc1}], 0x3, 0x0, 0x0, 0x40}, {&(0x7f0000003540)={0x27, 0x1, 0x1, 0x5, 0x6, 0x8000, "b5e46649d8b99728e0c8e55d03955eb0b8294317626cf26947d21a44cc035e3395e17be173ec1b291de759049b6424b6d9c89338dacb6cf568626cdf9edeee", 0x27}, 0x60, &(0x7f0000003a80)=[{&(0x7f00000035c0)="128c6aad31477db994bc7c4f1f79351796f5a6e47c3635a4e7c79a02697517f87099af344f1f1e1795639bba15accf750d0e82fb6a9477e097839df4a6e2e3bfc7f8c63c26babeb69da39d1f49525b8ecf10f0307c23beef02e50ca51821142a88f5bd2255e2859bb944a4797d8d26a0c29cc5c3d6008be8da5f3fa6ac97c2930e40b518eae461e9339146cd43b4dc7420bf610e0b90", 0x96}, {&(0x7f0000003680)="08b4adf4b6fab7b13ad24b1fc5e0d800143e17c254d535cdc2e3b59f86d4ec2d9f3b4a906a6bb23cb1ba78daf75b934f7d9dc5d66e7c23a2ed4208a49e3a86a45271e83f6954ef5d9f21817a84d8dba6821f6262cfbe1cc7c730a458f3ad9540f23de0a333ce0b3a4b4115bc591d19571e852563a437053f3fe463150c56c70e06e61c57ec3627645ce43d85d6002d225298e3b451363547b731053ad1971201d3620c9e5a8bbcff330d30dc2fdb2b578f8a145f5d9798aed5baaa35e64605766700cbaaa79d72122508ace940b4b081ba1da8873f7c0fbfcd02bd", 0xdb}, {&(0x7f0000003780)="94c92ce86d27aa0acab6058369e0f20ccfe7d58c61888332f049fd0243715cd8054cc33f3c6279246118ac4c73c358d3df6ddf799742331b5a59680b769298ab9f6a53b75de4e4d67ba530bb5b830ca85ad8213f479231300d2340c3ad4489940d90d77756a1fce458498edaaed61594eac958", 0x73}, {&(0x7f0000003800)="2ec4df8854c526a702d7b237e87b3b0951e7fe0f83bc6bf475b5e8c9d9e945d67771302e4c6d914bb1a4e10f0180a1f73ebc8b8500ea9d4379c1c5c47f0b2568520ec1330942a929e79bb96be1a803c685ffdd6e1e8f4b52962af0ab60a539ae2e7993c3ed28dfd2eb1e4e3063b70b1fba09ae072daa3a4067dc7c64009932e450ea24dcb40907cbed281f76599748542011fc56747f597c370cae92ab5f8f8428", 0xa1}, {&(0x7f00000038c0)="d93fc31406644b8784b07e5929562e6515b011f5c980981697bce967dd5babcb80efe7bc3ca3407b92cf70c4863c5b553084e15dc899e87b313b23975bd66172fc1c67cc801e590d3442b2817eed3ec8f2a0328178c62e", 0x57}, {&(0x7f0000003940)="f7c468be24e5b1c0cd694d3bbce2a6dfc5d10ca595e4be96398e9772c7c8b88a38fcba52cba6bc33dc45a02094fb8ad4f678249067e1dde26afd270926a9ff755e7f1e66cdad39ae27ee2da5e818fc4b69d27c0ea8bc63b091a9632aa46b73941263c8662854bdf936e5bff0ab89d786ec53e31a5161489ffd386af58e453c6887823c31825f41b4466d8e9d5574324472067f4f3c3c214c4111ed4451c4284c99ac302b087148319e2bb05fb709a3c0937fc29c2383c813d973d144e39426b2dc3f086d89b3c5fdc486cba0ff66de1c0e24ea338702483e9215f06926e4f42b13898d6d0d7bd764ef52e41b570c7c455d2491be06", 0xf5}, {&(0x7f0000003a40)="28029fd0ad732b28f40ace1409021f2f12f0a375f2d49e34bab83600ca374946c96d19dc119390c214bf3f69", 0x2c}], 0x7, &(0x7f0000003b00)={0x78, 0x11f, 0x66413306, "98a0232d3c5662f635bfb6c198ee01232dab6c93bab6904dd6d5c062b205823c029c04bb7c03c5a36173aad28745b875b750660156a35b104e6c1a4d266441b6a1d934a59352b06f322a5a8c818f950c8f841b9970553ee828797bee0ee4429fe3b1085f"}, 0x78, 0x40}], 0x9, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001000)="ba37f8e3439272ab130bbe40a1d3146cc4f64145222588d3e503150c6355d3cd9d8bfa9a14dd93f41f773d04aaea5193e9b62c22f15104922869fe1488802ec70bec1fa594f618a69107d3d1f472619d1b4a38be5407c0a1b4bd60200ffdbb4d1a69a2a17ca884dbc2f1e47a240abded58506507f9e4011dff51c52053885e22fd002a54fb40bf1e84ef2486aa1f0834e6dabcf51f73e588890849", 0x9b}, {&(0x7f0000001180)="fc7d5b52f95d6098f25ece478d76305eada919df5c9ef2e1fd19bdcffdf2d51aca11bafc67d973b85865204117c5b02d83a81b2136b70f206b8015b438f1dd056408d2da7f705c3f8f8734eb10d98f93ab3349d8b1d77d266170fe0bbabb1555ede66b557887079a53d3422a46ccaf0c530aff5d1eb38b9ebf6b83d11752450720d58f027fda0af14c4c64cd5857d702d568a53d942fc0c4530871eac49590f767a0e0c115219285ef0082dd924377f210fc498a", 0xb4}, {&(0x7f00000012c0)="077b8ad87ad19bc93e6f790e73905d04", 0x10}], 0x3, &(0x7f0000000100)}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004140)={0x0}, &(0x7f0000004180)=0xc) sendmsg$nl_generic(r0, &(0x7f0000004100)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000040c0)={&(0x7f00000041c0)={0x298, 0x80024, 0x801, 0x70bd28, 0x25dfdbfc, {0x14}, [@typed={0x14, 0xd, @ipv6=@mcast1}, @generic="9ae0dd91455b4ec35bdead7e09d24ce348cf1b27069e28a5eda9b9fc5ebb6cec16a635f9fab0d97263f86a376735df23e56cf58beb36f0a41f135c7603c936b02a5680510e2291", @generic="a6a92ee1c4f95c0e9e1387a4a346744b3000a89f3ec93018bf7c3a71991478b4adf58a8b8f33a4a6719b00afae54b595faa51373d2ec8a3d59e6615cc997b007088f901e7f470d2a182ebae0db58caa037c00a5a408656c26d302f68492994c2913b6a64fa923498abc499e6b4bd078e472828bd0b30cd8999205b66a384cca6168ec2ad01d4f214df40539f426dbd039b0ae8df164c80da29d0612ea15749e77e525e5644efa5afd302a09a4c0da519e122b8ec0161369c1ca8aec03ee53590447640f921", @generic="32a1ba91f4faf387e61fc63b707794a88625cbc631a76789cc3dc57195dfbd5b89c920ad8c187bd1811efd64f966ef866b5c6a0744148e539b5fbe415c4ba1937c64463a351a12f1d2228193d116de7766aa8fcc02c8d73352112cd1a1de9ade8beba52f7c682981b6cd249c7b32a9977b10cfbb68e45580cd44ebdde0ecc89bd1e9a9761b0801ffe0bacfa81dc44c38358b96dcbecbb169d7dae26bbed92779f0aa86925e7fe94b84292a6b87283ea02b657b2a338a93c7f1fa2eaaf90dccd1441623210a05f777799ed47b23b825581635e4afaf91dad750c26e2a95b825", @typed={0x8, 0x25, @pid=r1}, @generic="6eab5e579e84e5dd7d6a97b2f0e73f7a20294a13dd1431459409b39bac15797c3520ac925d7c2776e654aafed9c76a53fdf87d5f55dab8bc8d596100a6da52429549cbb2a8662ef316623fb14160cabdd65f1fdf53b48ff018", @generic="35eff1e6f62b1c1fa7d73496410eb4ba9f2cceb03c2c15297ee9208d6c056d00", @typed={0x4, 0x5}]}, 0x298}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r0) 03:33:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x210000, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x4, 0xf7, 0x5d}) sendto$inet6(r1, &(0x7f00000002c0)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56fc88046a184a362e5e6368b2a8e4572f5cd7a4b7a5c0aa0ad303c9a25966a797c1cd31ea5645eecf24d37dc36e3e758401d662b3f56bb40e", 0xa0, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x1, @mcast2}, 0x1c) 03:33:51 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x20000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0xfffffffffffffff7, &(0x7f00000001c0)=0xe6) fcntl$lock(r1, 0x7, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2}) pwrite64(r1, &(0x7f0000000040)="75e8ede165c53a9c44cbec294406093355e82a1992da93281e2814f6892f0b7a825e2a0b6b007ec222b9b328d709cf36f7d1b161cfdb4d80031034359f374b02e716111564510903d0544aad057b55a36040a476a10d94d0d445a266581f2a85b94798de1b8964eb9b6b07e443f96e998d90570525643f07bf0738c684e1cfa5654d87604ce514017918acd1aa89ad856eaf44b2cb1406f9ac6922611e73d187ff33ea4cb785bd0fcf24dea12f8d18fb5c464ad93971a07d8a99c2518bce50ae1b6884a988ebbb2b391cbf6a", 0xcc, 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 03:33:51 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a58930f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='selfeth0\x00', 0xffffffffffffff9c}, 0x10) mq_getsetattr(r2, &(0x7f00000000c0)={0x4, 0x9, 0x400, 0x10001, 0x3, 0x2, 0xffffffffffff1e9c, 0x1ff}, &(0x7f0000000100)) getrlimit(0xd, &(0x7f0000000000)) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) 03:33:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="0a0775bd4cef56d673967c33d11f3060", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="515a7dd746b2c3a88126b2e47aee41b5", 0x10}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{&(0x7f0000000300)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/3, 0x3}}, {{&(0x7f0000001c00)=@nfc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/106, 0x6a}], 0x1, &(0x7f0000002140)=""/207, 0xcf}}], 0x2, 0x0, &(0x7f0000002340)={0x77359400}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x0, 0x80}) 03:33:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="0f20c06635020000000f22c02ef029a100883e0f01cb0f437a450f06b876000f00d066b8010000000f23d00f21f86635000000020f23f866b80500000066b9030000000f01d9363e670f01d166b8007000000f23d00f21f86635100000070f23f8", 0x61}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x3, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8, 0x20000) [ 280.023014] Unknown ioctl 8835 [ 280.037223] Unknown ioctl -1071076861 [ 280.050465] Unknown ioctl 8835 03:33:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5}, 0x2000) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000001640)={&(0x7f00000015c0)=""/105, 0x4000, 0x1800, 0x6}, 0x18) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sequencer\x00', 0x521000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x15) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2de5fc618d2b04cb5d8aa265c893885df469937aac7de5482e1f40ea17d4a592", 0x20}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f0000000040)) r4 = perf_event_open$cgroup(&(0x7f0000001680)={0x4, 0x70, 0x9, 0x4, 0x1ff, 0x2, 0x0, 0xfff, 0x2000, 0x2, 0x3, 0x3, 0xffff, 0x4, 0x79ea, 0x2, 0x200, 0x6, 0x1000, 0x19a7, 0x258, 0x4, 0x101, 0x1, 0x8, 0x3, 0x400, 0xbbdb, 0x8001, 0x7, 0x3ff, 0x82b, 0x5, 0x3ff, 0x6, 0x40, 0x0, 0x3f, 0x0, 0x3f, 0x0, @perf_config_ext={0x10001, 0xfff}, 0x4000, 0x6, 0x7, 0x2, 0x5, 0x8000, 0xfff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) [ 280.108449] binder_alloc: binder_alloc_mmap_handler: 19470 20001000-20004000 already mapped failed -16 [ 280.123610] binder: BINDER_SET_CONTEXT_MGR already set [ 280.129017] binder_alloc: 19470: binder_alloc_buf, no vma [ 280.134612] binder: 19470:19478 transaction failed 29189/-3, size 24-8 line 2967 03:33:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x1000000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=["07e646d40000000000"], 0x9, [], [0x4]}) 03:33:51 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2005890, &(0x7f0000000240)=ANY=[]) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x800a0, &(0x7f0000000380)=ANY=[]) mount$bpf(0x0, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000480)='bpf\x00', 0x0, &(0x7f00000004c0)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='overlay\x00', 0x400, &(0x7f0000000240)) 03:33:51 executing program 2: r0 = getpgid(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x201, &(0x7f00000000c0)={&(0x7f0000000180)="e95b20bbbf29f2c4e918d37574c4992c8b47b7bcbdfb3678712b6b1de25a346f336496dd5c01c5beef4583a35a0775efca06d71db53fe8d1752d48321665033de02fe7bcfa39b96879d307fd9c2967e1d862540d27c4f779268c2f10dfe82031f896baed92b8940d5c438b3d12a97a05d420d9064d6659f4dc90f55c9486f87562d56189dd179a19da22ae", 0x11b}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000100)={0xd000, 0x6000, 0xa731, 0x9, 0x4d2}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bpq0\x00', 0x1}, 0x18) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x100000000, 0xfffffffffffffff8}) 03:33:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r4 = getpgid(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r5, r2, 0xd36}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000d000040050000000500000000018d557df08a465635f2d2b4d600000000004000000000010000000000000025000000ffffffff0004"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x186, 0x0, 0x100000000}]}) [ 280.154699] binder: 19470:19491 Release 1 refcount change on invalid ref 1 ret -22 [ 280.164898] binder: 19470:19475 ioctl 40046207 0 returned -16 03:33:51 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f00000002c0)={@multicast2, @dev, @multicast2}, 0xc) 03:33:51 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x0) 03:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 280.245370] binder: send failed reply for transaction 256 to 19470:19475 [ 280.264000] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.284062] kvm_set_msr_common: 18 callbacks suppressed [ 280.284073] kvm [19502]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x100000000 [ 280.335749] binder_alloc: binder_alloc_mmap_handler: 19514 20001000-20004000 already mapped failed -16 [ 280.351667] EXT4-fs (sda1): re-mounted. Opts: [ 280.353300] binder: BINDER_SET_CONTEXT_MGR already set [ 280.365722] binder: 19514:19515 ioctl 40046207 0 returned -16 [ 280.365902] overlayfs: missing 'lowerdir' [ 280.377617] binder_alloc: 19514: binder_alloc_buf, no vma [ 280.382402] EXT4-fs (sda1): re-mounted. Opts: [ 280.383276] binder: 19514:19521 transaction failed 29189/-3, size 24-8 line 2967 [ 280.397004] binder: 19514:19515 Release 1 refcount change on invalid ref 1 ret -22 [ 280.400655] kvm [19502]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x100000000 [ 280.412311] binder: send failed reply for transaction 261 to 19514:19515 [ 280.425719] binder: undelivered TRANSACTION_ERROR: 29189 03:33:51 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10003) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="211fe02f09d8ad6d8c0b79ee8ad949c6ead64019d90e9125fa832dc9015681a710dc1d59c83a0f235dbc7b75e8d438286489d653b697e4ec8fdca1836f1d5ea5369382d20742aa5401e04c5a7148539e205235b5f91f99da35fb80d8dcbc8760490e79c00e2d6ae3dd90b0e8ba71ceba236b4cdd5b77f7", 0x77}, {&(0x7f0000000280)="73315d25074b69fa5895ac9e170abba07fe7149c20389657a753db47584e0d63c18d8719cc8288fcd938134721c38c346753dbd05df0ed8e5319a2268db84f6df1431e94f58c63ae942fcddc70f2b194830e2e4175dd1a73bc423b705284c2552f21d4cede56604b8426ff89bc8741bc27968ec886086dd6", 0x78}, {&(0x7f0000000100)="ac27bf07a5ab0d0d550432544023e6e1bc0d12ce65af7beeacd8baa5040a9d0649eaf0", 0x23}, {&(0x7f0000000300)="e10be631691fcf9895548493869f68527cc537b4b3a74e54bb474bf5dd323c1ab82533a209997734155a7c85c20ca25fd00b8ba91e034faaf3390798979854fa6814a92941b5beb2b848ab88b8301168332636e8225f82d1eb2879abd50691b5c963798d91974388cb7eb9569510dd3dbb809b11570e269ca5f09f026a5037992157d2c6aee5693aa785", 0x8a}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="2000000000000000000000000104000064f9563109627a231c7ed57b0000000030000000000000009e010000400000004e697da0a8164ecb534c3fd516952668b637b9a885f729237872000000000000a0000000000000001801000002000000f177e614ac00bc69a3b567a061aea0da0fcf420d4554ff05b33db88580e7886129d14b269a539f41d78a6b491801f66be774eee1dcdab38af68eba30384f2296c8493fb42c18190b4abb19223438f6672bf268812faeb20f75b86e86657100b24b7c8ae00681f5b6dfa41283ba9ec5e75c7a71cad36910714405e105e2031233028a7ca988f861859649550cec61ef0000"], 0xf0, 0x4000}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-cast6-avx,wp384-generic)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000f54fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="bcd0ad05e6a8da1da49737764601f01d3633a99239f824c9c200c130b6210ae0c5", 0x21) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x400000, 0x0) 03:33:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x1000000000000010) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)={0x3ad, 0x2e, 0x10000000000001, 0x0, 0x4}, 0x10}], 0x10d7aa8fb98b831f}, 0x0) 03:33:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xae9a, &(0x7f00000001c0)) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='cpuset\x00', 0xffffffffffffff9c}, 0x10) openat(r4, &(0x7f0000000180)='./file0\x00', 0x0, 0x180) 03:33:51 executing program 4: r0 = socket(0x15, 0x2, 0x10001) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x2ad, 0x0, &(0x7f0000000240)={0xa, 0xfffd, 0x8, @dev, 0x7}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x210040, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x20, 0x67fc) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) 03:33:51 executing program 7: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0xfffffffffffffffd) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000300)=[{0x40, 0x81, 0xe864, 0x5}, {0xfffffffffffff804, 0x1, 0xdb, 0x8000}, {0x8, 0xfffd, 0x100000001, 0xfffffffffffeffff}]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ptrace$poke(0x4, r7, &(0x7f0000000780), 0xc9) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000380)={"6272696467653000800000000040f400"}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter\x00') alarm(0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x1, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000280)={r9, 0x7}, &(0x7f0000000840)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)={0xfffffffffffffffe, 0x1000, 0x400000, 0x4, 0x49f, 0xf687, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x200, 0x1}) r11 = accept(r4, &(0x7f0000000880)=@in={0x0, 0x0, @multicast2}, &(0x7f0000000900)=0x1e) syz_open_pts(r10, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @dev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000080)={@local, r12}, 0x14) ioctl$FIONREAD(r8, 0x541b, &(0x7f0000000040)) accept4(r5, &(0x7f0000000940)=@hci, &(0x7f0000000700)=0x80, 0x20080000) getsockopt$inet6_int(r4, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000040)=0xfedb) kcmp(r2, r3, 0x0, r1, r1) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f00000002c0)='gre0\x00') 03:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000004f00)=[{&(0x7f0000000140)={0x27, 0x0, 0x0, 0x7, 0x7, 0xdff9, "43eb26aab58360184458c6b7a154fbd5c4ce0cd603ec831447fa42413d44d05a7153decfc76a24b5f277694077c1479e88325b7ee380e16c105b6ea160bb03", 0x10}, 0x60, &(0x7f0000000580)=[{&(0x7f00000001c0)="60b4fe0c2fa433135d653d446d173ad1eb3c144e7568cf64aa0b72a602fa0875075cc2e3a03a8b1f0b5ad23a773abf9f6541226bc0dce9d4eace0a598b3124515ecebfb69ec14b6c212c9680a009d108e72bfca748f0a288b4f2d98382f636cd9feea9a87152f3e16f35e14929f8ba484955cffa7002473d3260d5244f489a1732145979b4e3c1976f6e49a96018decef191b01b3cb8c70bd95f4988add27f54b2eecbfcf92d7ad5b6b7", 0xaa}, {&(0x7f00000000c0)="948a863cb0756a3e50cc0e6d0ac30811fe0266b4a27dcc36718cc03a7e5e8458350ac75cca50f1df805ea90dc8d61900373927b7764b96d6a46c8927", 0x3c}, {&(0x7f0000000280)="dee7d2d675b3ba05f9c5c567cac17fe2ddf14b9acab0405f60b93d4dd7c9", 0x1e}, {&(0x7f00000002c0)="3768b3ceb949b232873b18fccdcce0ed04cfc8095fb29db50bc995b0fad1950e172411370a1949ea4c801e0c5083820caa4d2466fcfaa97c297604e47e8e62c2283d2e892168807878cf2470f50d670abbd4d85bf960194e74105772e92f2260426828e5eec7f240dcdecced4954a1f2fa8100bc7f3885a240", 0x79}, {&(0x7f00000003c0)="38d3409e4bf97a79c676a8ab773bc018af122eb4a8ba3da3622b8f2bb7232f24ab7182189e80bb128ffb6cc58517475c8682f7c541fd0171875c3a139ad409995389e98a5cab6a7e216a243b72428fbeb47849aea6fcea7b19143d5ab5a709d7c3bdefbddd6703d2607446e167e6171e8e27208ea8", 0x75}, {&(0x7f0000000440)="0dfc73e87acf114a022a1f7a4348b4dc340f886322461e47a563001bb54723eceb13e6fea179ea289014d2919aedc407bb4c1ea7ade0f7490e660b6c2473ddde8e36ecfd91b32bc34165aad8b5dd8a8dcd06d20c55171d8a3107de6628942b889dd734811c7f84a77358845372a44f29eb132ce59c2e9ce97827d6943b94064563315bf523b5247c19580c55af732c72bbbf5be479a80d010b5e0dbd0fa9a484ab9e17d4766a2eda82641c335b4a295b47746b12bb285f6b1f", 0xb9}, {&(0x7f0000000340)}, {&(0x7f0000000500)="f22102b2485c9b5b6e2e89994f67f22da78a27fa2ccfa590e395450ce090bb495f81fbb318389c3895ecf7737f4be8b7f8505c035ae806ce0bd1e4c19ecf964f076614d552b52634ad63df449863ded739e562439339235ee50e621610982a3d4c5ab3df9bc32ae0ef7c90d4659d7e7939a059f7", 0x74}], 0x8, &(0x7f0000000600)={0x100, 0x110, 0x1dd231b8, "fb40e30395f243b79bb6978d9d8b035bb0b404e9a6028a79f12b0b2729bb92ced52898b6126bb6d15bd709d100df5ffcde565720e6b4a3bb9da340256541767317324bc5ca9ba8f7329972f86ca352b8187d6d4aa4e0703643886adb8e6259c051d8b7ba0560a31e12e589ed6f7f38e6d20dcc06984def39534a7771833d161e01b641d484603038b6de09f65586b75b4ae8a00f4fdb374dfb76e3a409e428288be479645548d1120a7edf212f0743d9fac12ac1e414745605a685aeff907135f3bf2eea14bef23af58f3220e835d0c279a4d0be7aac4cf4bf65c790291fd53b57e9a0ce4dbe32eea7b59ffa2286"}, 0x100, 0x80}, {&(0x7f0000000700)={0x27, 0x1, 0x1, 0x1, 0x1, 0x0, "b7c05cb529e5fcd85bd529ddb81b4658bc68ad28ec637614d47b1c4b866b72706f03e4b0fcd9588afd77bfd8248748034be8f23d55c1609ecb4bb176d2bf52", 0x3b}, 0x60, &(0x7f0000000a40)=[{&(0x7f0000000780)="f10698a5df1de08031474f696bdc570c3377a93343916cece78e57aac30f1c7e2d4f19c4f01603abc083a9414e2217d196adabcfcbe4288c400a15e22771b2fd19b1ddb59d32ea8dfcbf7b43963305ffb467538239537c119ae34b405ddefd56d21d698b9c30d8abc78598d8ff384f424ed869c3b80a4abacc7d682a40a53c1d5d59bcc35995db56d274c2006b19e9dbd58e", 0x92}, {&(0x7f0000000840)="b9bdd1aafd3683b9465e305378fb88465b438107e46bf00ee6f894891af2ba8f35664476d227775b12bfd537da5ccffdda78e7dfe48d1312dc5e925fb7a06d8dbc90552bba00fbe64b4a498576eb8cb475c3b8cc234e9fa8dbddc9d51ad2dd5c579dc1e95c439b62eea454ba095284d3113b744001be1367e5e5b6622da79e25426a203b31e64b38106d67d0fd5f83d05dfe243bc210270ebc2fc5eed90559ebc5cf75008917daca2802c6d36f3aedd0340c5b9ca47255daadc21aaa2fb323d6214084a3a67a2dc6e777a33b43", 0xcd}, {&(0x7f0000000940)="2f119bad3d62729b0545bd811b68b8a757fa1c68be7ed5529f714c2789959950db47f62169bc82be3dafa0d575d33b63b319e04c36a0ba15d250475137d64b71b3d69ee6fa35e1afe80e8f30425ef6daa97562875b02a695b2f3fa6ceb8ec178698fc6d87a6a92556170d1b1102d698ff0e50f48aa59885ed18c89ab871e1d67fdb7dc659082a4a1c9330a7d382c2c8a86d6fcad6fa4f9985ea87700480f5f1f8ca97d13e505cf4f8b2d559aefeb3796adb38a0b2c015e743c4de1bd12375785564188c3dda3de0e389c87823b4c19aa09", 0xd1}], 0x3, &(0x7f0000000a80)={0xa8, 0x1ff, 0x8, "1e20b0bf908711d9cb08c3484d58540cb0c75803f301c1b5ebf5e398a23f83d7b2ec7014c07e8894ccb91d5f14623caf6b827d976dfec728422817a0c2891ebe3641681bc06f826173d165e6ae629eef26b1f001e5036d49f51cfdac055547059e2aceab0753af81dd80210dc70be5035fc88177da4d0e4fe09b7f94eb423dbbc3f7843173d980a5f7d2bc9607adee0e6aea"}, 0xa8, 0x4000}, {&(0x7f0000000b40)={0x27, 0x1, 0x2, 0x7, 0x7, 0xfffffffffffffffa, "72e6ca570392da95077e573d001a3acaef54f3edf3e60d7c2b624a038c744cbb3471269a6aefb91570509be04175b2a5e542e696b47ede9fc55a83e50cf927", 0x18}, 0x60, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="ead49642f6351b33f6300484de43d4df44aae5a3f4c2fb05c81398de6fa82d04ba82b44fed9b6d143df39b372ef4060910803636bdce12e4ba4aa4f3c7d98fda5015b4c46d4367e2fe513f1cf240a2885c8df823129d271b0b27d3c9ac13a8c90ccda34a8712426aa714c323e2e523a9908a426f59e047b49012f4798566cb48274ebc071f7b93420b8c24323af0e013cbd35414d3cc2794423c28b60f6c37dd22c24acd9e45c9d1f707d634eed9113cad", 0xb1}, {&(0x7f0000000c80)="87e0c1c0a283bc4476ee6c7659a5bcec0d5fe84851b306387047fb79c3288edbb3337e1acb685d7863de9c33fc14badedcab1a816e45c47817e6fdda46675f921aa39d1f4c2736227f69f864011d3925b15ea41b7a643f8b7a3df81301f9fa33b5cf9fb22e19fcff54100c986ecf30e17c51a74d0632ca710c1bbc8aeb17f2da3aa52f2430f1e1d2aa6fca7c88455c9ae040f99d8178f9f26517afef499eb6ae9242e0503aa4e7cd944d7eca431b7baea9e3a22539f5d72f9611fa6bfdd5bd95fc4d7a140420920aa7bb8425", 0xcc}, {&(0x7f0000000d80)="4377b3841a5ecf485dcb11d89ac807f893d0399e8c795b6b4db53cd3fc7afed10114bd30933baaf5b60d8e9cbeced5cd49743bce8449361aed23d4e0f32f59414b659a32e7157023603d6683b5785c5c05846d84393557a093a2b704333db67fec8660e4a6589a71602f35f9e549220b7ea40bc530dbe88a64df01e1d2733ec77c8c7d3c5e26a6afed3d8067925cc2f750ee989729fc1f0c3fd593f99435141c34c5220ac28da61526792bb75b1025e31ceb16ed7842b8f5ecdfe15db79ccb60c997c07c8cc5d9aed0809704f3b089826c3468000eed39135bd842011860da1d34f8a4c85d14476aa96cacd8215e0eee001fa26cdea7ed4c8db59f3f3fff2680890d8298bb8e51f7bcc9389cc18e3527b67a348197ff181aed5193eb6775191dad583e7c056f78acaa6aa77d7585d68cca25265b58af47d1c97fb9a14587dba27193fb4e10eef04bde1006b9039cbfe484bbbf7a799ca68217dac3cd4efe9faa180ca4e9177b40e4c5c6dda8e546088ad4015a2c0b3b9bd799163fa130c36ce5554b42518e02d2ef6098cedbf30f207993036d3ffc01a963f4632beddeeb027ee35e4e80e07aaf2545af1d8e73585da3f7e7f8a1258df5048d8958c8eb5724e0c2f896306fe6877c6e03c6de37fd042bf2e43a5d9cd9ec0fd14fe99068f4cec2a81e930d1b8951799ed6153a151a5ad451eac7447a8c2d446afe7cb871902d3fcf7c714ab9e4dab7bd99d15cca2a16185ac3b2b1bdec8032ca663903184ad391c196ba2d1e1878120c536842dab014cfcc3f9a1ecd401360793fb72647b9a0523a7308c98091a41e006091b40c425c98376de17662140e835585cc8adfa91c035b373fd9d949e5034d28b25d9656f6337a51ab316272e68e990199da22e3180a9f9131ee68b53051e427b3fd6f0590b559911ac69ac51dc0133579c10b4d506cde2e3655546c240aa05ae7e1653a47080350e287b6371a43c8fcb350cb2ad74a2a58cb9ff9c0ff5534c3833e110d62a285cebec70b5771eb5c70e5985176c480b8702099844289da4d52b77ced2aeb1fb140b5bc093b95914e32cfaa6f2a368e9a74f58ad121a254bd96b5d7c997744a2ae56ae98d72dac6979ff788f9958adfb01a403f77969b50b3626a2cb4a1cc3fc62a97c91b582bd3eb4f5581a3b4ce49c87107f83315aabdcc2517d88456a8a172dddfe7716ede32d4a09fd0b333c2e6a5ba069c05b40cca4c8e218d1914d1d37d8fb8d6d9f264d354e01319d3af73a48bb9ceb1a0db1f91f8417f0f5ff96fe22fc6ed899eaf87fad09ec8f9844ba8014954df2bb58b10fbd119ef7c5eca31d5289da9b0f2faee3ce4632736e005e45f15a83afa03f71ce00aa5a49897d4b4ab4b8584d7da9497986c7364b3017ef3b8eec81f4cc9de47d1842a4bd9a772ef588426af1d9a2da57d3d793f9567efa9ce7dffc19636b961db406bc04302cdce2e7692151b18c72530de165ea02eed773642c116d9d014ee49c95d7d2e86fdc17dc4ea78dc1864a66ca09cf3d3218264745d5937b2526dd1caa901896b9bfe891f3490b58285605914bb49de8869b195771de32799cc4b259ccba6fc6afbc94c1daa586cc38985e6d63186913ad8eca6926a38bcd7ef51057126bd23eecae77e3fe326d79cf1b43b98d1b067c7c9004baa55388f6d1b43ce875a6152d53ce1e3e06f2bcb4240c40e66819da4ce267bce8c0c687782f9d7fd3c6596c1bd8cd7385fb1c0d99d6de985b5e2a37fc77cafdf533d7c73ed8c0ae57cbf2070d4b992344c49098eba12e69f5a07fdec5726f8dfce86ba7b0389bf3745d8255aa5cfaff7ad1f608777cd51fc29d7f3bc8c6dda17f98642310edb171c5af3615470ae918ffc050088223141004bb9aff6cfa44a7d79ede484fc1fa13ef3be5719e0fe0ca215b5131641eee8fe20fc79abf996d28d2393291a87a427b517aa7020a720ddfbc05d88ccb40ba711bd3bc22ff50085a9fc38eb98e35924d699399cb345dba42c6dbd0101d8301a25f0c07c3fc7a3983047b0eb1f0bb19b7108bee889eb1d71a1bd87351f01dbf975a327fa320509ffc8899a76c8d0f64c8e5bf4a22bbde2f74f4c1cc53e50755daa521d79b0946dff7bc41880717a788c7b7ef761b3dec0ec910e1a2b05119c1305b61b8819f51f61937ea12934444523e27074f67a4b2257cd076c2f6a6efe78fb1ca9005b3baab40f0c55595a8a6eea3206ce7c8c53602185627e0b190ba373af89cd571455eea1497ec4244d52017813857505899d4294a3019f9d011e29c41f7c6cfeec80d0a7db1f1576a94cfa4fc33e8cbcbcaec7640003b6a844324ec957932d09104f9597143e8173619cc9faf0db1ab8f1b5f2c1036de7b0c8b147ff9076362c6fd4c83f198ac7f5b4544501e5cef24ae8dbc62db764d7666ea46c0ab02d519d71f29db3e9bfa1aeceeb4c0195404a24642dcf551c73e207395156dd23c0e186dc03aa898ab984d99d2ea27aced11041677a7bec3f5febf01c632eb4254c2e5e287cdf0c96e746a99821546b9b5f186d5e55d7034103a96c6b74085489630e18c4a0c6f0e4da6fe4b26445fcb561b36abee712e314c0cd2ef6c773f39f14aa4d4408034075c3dff1f8a61689f06fa93e2ccde722ed938753de5f39a0d31a83625caf96216329bb1ba08bde610af7a1c6a3bc2fc754fb7f9ced779ef7789b3248492988df5d8745e7b720496b244af48179bee12493193f0a9693deca45a98b10889600703af1526bade75385f24fce4f0c6de06a55ce9edd37a23c4322e1489d437ead53514a8ef1ed12cb21215b9d724591cf997346476d63da925ebed003791964b37851545e7bea93752c765c5c95cbb8a7d7f648ba86b1cd48c76b8f4d4f090b12ac33ef4a0afbcdfea0bce434b74a46ee81ca1e1c66aa741ac90fc35a4b7367549f8ddc79723d61c197af7e0639d6a798153c009fae3427c1ef4ed3da63ff2be78da82c413fa96f54ef7296755d2c04f5944e8feee50395b91b400bf8c3344b2f7ba18fbcbb9724831b114710fdad7e076429cf5826899f04da7eb4f7fc014d713ed4aa54da265b61d0fe4717be9caa4b0e41db925ef35b94f9f5f1a209d7675f2aa3583e8c5c970cf14fbbae14aecb2aa372d98e548ad7ac72025f4ebbd0dc15bc8a6b44482a31f1ff82ae9e054b0be3ad5707f3d3233bdc23b44f64aec2da29e4d7f5baa90a2cd48339d889f52e0c26b7e63905262c329206a2ad89cc6994f8c162bd3d6fdaf6ce2d965ed9352acf38ca110a55b9af67d8afcd0e81a6aae7fad7416bcceb52f775b00a59e7be7842bc711370e3b3c3933fe5579104e33c803022cfc1d93cddd6a290c05f1442de7b1726ec931d5ea2d7237a3ba0f59eda0c108c7b953987065801557b587856190b4e707f4afc2830a0780c7e1f60d59e746eeb3e99b30a8ace9bba3b311eb5e4143185ffa1d94ba29a4f01e5a8955bc79feac0d121cd8b0409e484689e30ced6bf8a4dbd2aab1cec9538df0cd21d0bc444ec8dcc2df42fe06839b76aa326f177ffa46ab70a0832c0c9296a9ab4f7e72fd4ea41349defaaf36da7006da9d1dd6da3ffbdfe17ff503de8f71a2cc4e9128b2f7c60a838a4b20e80b8855671fd953949fe4e8f009b7411163af10fdefb1db4d72389159ffb43cb7b89fa0a6b81c7387a806e1e89d830c5e55534800ed301232cbb0ec571ebce4639bfb642b426d09be458276a89478a09259e0e200eae1d4df1274a16379e182ca078e05e70583fe5c98ddaaa98fce4fb21221119d5a3ecbd6eabdc4df9bc398af237288b8558367c3689abecde48e8324cbee98d16951de1cba1d9b240e082baf689c1985b06c160bd33394fc006d021be24248f61626419053b2bdd79e6434170b149271dd0ca89cba9165d25547ecee543b76b61a0283fe93e78140be42e8e219927b1b27293917ae22c1cc7fce20688669cf210b2a845cdcea2153ca45ce849da46d5dbd997ddb5d2ee3a378c2f8abbf2bae5a52ccd724f0689b9d448c5a60316bc9fade3472897857a9108721f7fa89e3d496f1a44a1615e5863d832e35d9a688f0d0a03020d4ae3a147cb981801d9406263cb80906494a5bae5a8f82181d853346cf944d9ed86bc38556bf04d80045046efe0160226dfa1ce4677834edb71d12c6b00941c2e7adfbe4c30ac80cdc9d78fba8f6894b7ad59586cc51b25bfd5dc7f48a1587499f8f28e6dcf9f825ade70c4628df9e1cd7149afce89480c282214a07d08b77b6f6876ba76d9a117e3b97d306988f26e3ef8b6e7b01030de4c6a9f7ee88a17843c716e3d1aed5787c9de237fd0470e3a327b3ab34dea5300ebea0ccf3b22de8967cf1b8bcdc15991f12129e619f3e69ddcca439f1c2e676c98c3725c5e0b97a4cd16b9bd93c107088ed06eb1709695121c13d8ba1780b3668d26a90ce61b4c87e7a01e5c6f63296fcc54b59553f61d8e3189aa8cd9ec7ea698b95f97d36161b9da63e235ba801d0a38bbc963126817f8b11110d1d750afbcc909ff5ab271a74f7ca74dbf571ea7493431a6523b3e02b848e989a53037fff3b98c7f1a43e15f04790fd4c4e2b350254b5de3fd8df7bfa665c04308c50be8cb23d2bfcf35baccdeab5b4bf348cb6d432d4b332d7521f475e91b44c4b432132b091be208b5c2be6fa4c8a3a3c6f8f9622a0a542c957ea8f950dd4a217efb6f127d539fbbdad7086ef766b48a7454bb74bf100f9c309d86f88fa3fbf805b3049a01a26a5004e9bd706885e0a0c470ac3552db7addbefe33d78d0b8fcdc977f0952a28f72063e329268dfe3ff5821362b9eef4c39b1c99c39254b543349913bf12b9a69b8a712d8efa440478e4c3661c08628b74443cff2ed309e0ec9c090345c30d4e776910f6b03f90368ba1d949702e64674749caccb549b1db00b0988a0204e49cc0b35c3f400f022c8bd170c85000cdfaefe2e5c371c4981ec9ba6cdbd5d1fe9f9150f6d1d0ad2d21f99873b55968cf7319afaf4cbdf3bd4c2a916acb1948b5ff779e2e093e23f0c9da91f460b3e0f5e1aa9c971d56761cfd211068e11eb83707899dceedf241f1426bb8f01d7ec9f1ee180249d4b9d6df40168314bc60e496d4b08da4e819f660055e71d2a7cae8547ed2d4d8f657fc681f6d91b1f44ff9a0f15a6368d6836f48fc49a9ba20feba734ea7c867721d5ca2c8b28de0d5144ea4fac4febdfa222b626f4110f5f2a4b033e28db47d58ca6ac488a394132ad3b4cbd4e8d34fd3a3fce9c29d7f5e100cd4937bffe8ffa609cc5269f1a3218daffd550d742e6417539cead0386f13c2face58993214a97ace7299acb864beef6fe9ba2c91c344467d4b277b53843a89e50e8dc802a3b80dca81be3df3d0e922712372cececb20579b3a9b0b0b82b011154d7a5b51b3dd30c1870d796e0ac9f4546d6d74fbee7ef721d085f1c204c3b90669151b0417948e945801354a31c4d8e8a19cb1be4dbd16b264322b345e4e81008e2fca0126ae995d0212a5c912a4e5d3d403368688969765fcc40cc23389aa577a04f41eefe110cfd44d931dc8a52a337c0d130a82a070e115c3575226e19b49d45eb496f59c44f2b1ce5d6846c4fa8da6539e33919e3bc833f0a5286805c060259046b2a7d282aa3108788f66f74fa637fd8b9b63cb29cc96ca925f73b784469ef218a990c727a9a8522d04d183d3d4b375f324a3413874137711917ccbdaf7d1742f71cdc37219862b14185d87804df35d0431139a694d5bb84adfcc1a5a51d68bb9179897d5a04d159bbba30cb3", 0x1000}], 0x3, &(0x7f0000001dc0)={0xd8, 0x101, 0x2, "b3984bdfd219f521675d57e0b1efbbbaee4fab2edf998b0508a66bfbe9653bc179facebee71e41b815b5606d997a0970b05cbd9e2a68cab68ea6693030edbc4dcbec36be7357c6c8b5aed31da5ed0d82fae61c2b14a7628f818e91ecddd451c117b94b0de623f3246b251553565946c156dadb67e3427fe0a80f413bddb53a53b72ccf3aee8fe3e12426720b88f63831525d37d95d54ba0016eaa91a7d56f2f32d52224a87f6091985a55402d5e9866f5e7c1f3f48ccd2eb98b616678be9530b18943efa"}, 0xd8, 0x48040}, {&(0x7f0000001ec0)={0x27, 0x1, 0x1, 0x1, 0x10000, 0x9, "5cec31b9a335a0c4aaed015aca58a6e4ffe87cafeb728a1d4d0acf6507826e931c4eb828c091da716cfd09ce4202af4df8209b272f3be33541d3e6b8c5a718", 0x5}, 0x60, &(0x7f0000002040)=[{&(0x7f0000001f40)="b7e15841b387e48080c534b4a57bbbde6eb040b64411df5a4660f274c9c73af6ffb3c7c4343cb09d5115c7bd9373bceae0e51b1177aa86a6257b712c53f761ea0fe6cfc58fd52972d26a08be79ec8a3829e8e3d1aeabaa36f0d43bb84df9813f731fc163e718aaae09a3eef2fc3e1590c084b5cfbff435da8b2b4d2a3f864a1ac774ba73162d8f27f472b6fe49c6b1a300da92a1319f2fabb3ab7e9b226980db02f551ced7a6c89547ddc43f93dfc383ac6607c41f095803d4434b98777cd8308bc514cb526c0ac0b85a86", 0xcb}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000002080)={0x27, 0x0, 0x2, 0x7, 0x1b9488d6, 0x7f, "e8c8e4c51376dfbfc6e30d41b666f74d9e5b6605b8041dfe1ee48d560fa044de39e612322fcc6d9f7c18566582c940375feb21c63aa07e208d4d65a1b62761", 0x8}, 0x60, &(0x7f00000021c0)=[{&(0x7f0000002100)="914f41d081abe21feac97a7020191e15828f8bb633a64ec520d12e2788db4436970c4d73796ed5aa296392b29a5f5514da66dd90888439303fb2cbe6891995ecc853f6b170ede35b41a568e644504d8521b75f7c0e41f8d25801eb67dfdf3c42e37d4eb9785523a118874359724a41e16b8868e6d2524f38bac992d833f2fd19d41d3d16f592f1169de0012108db0ab373812a", 0x93}], 0x1, &(0x7f0000002200)={0x108, 0x113, 0x1, "c10d96a1e0f5987d52636672588c0100d5f41b99f764ab59f61de3b7264251fa0a5abb9c94d66f2392a98f677389b9d3e180674a7d44fe308bc40cefbbe627610a2fd788c3f7d44a32df94b16ad813cb551b2c03c9f09f174b07c5f3a334cebdcdd9b60ef67b27945e1be70b1c583624b22eb97e7cb3b7edb505a38f2288ed2468398b4372b13212197d012a6fdb0fbfc5b75c410119f42ab419d9a348f6ab3eaf5b3b58515a50be2f2ff379901ac6c9333edd1bb345e4a9cd3b26c17a5eeed7f3ab9d298bd006a3e2e23ed1b0f7b509af154d860c3364e05ccb016b14081df477d140c42033cbd38eacda8af5bf4c9dab22780b301234"}, 0x108, 0x48001}, {&(0x7f0000002340)={0x27, 0x1, 0x1, 0x3, 0x8, 0x6, "13892c31ac889f9a3419cd2b34f9123485fde91a90513880db28b532a63f0f972b929212d7b6c3b2e3f4c0d760178920ba0e533222c2895dc2c32af868d864", 0x5}, 0x60, &(0x7f0000004840)=[{&(0x7f00000023c0)="968ea8c236d9a900ae9b96867d5dca53e2fe672a7c26ffad1f9337f5ea953cfa34e3aa048c106ca84726a5ec424dc7e25312f5104c008f34593b49ae3bdd0dc2c3cb592c89a03a9fdde875ccccfcc0dc0e79bb62d7f8499b62bcab5a5b827fae9c5f27039497b696e2937c04598336545c311ecbc4b41066598b3ceba0bb62c1ff7a090f", 0x84}, {&(0x7f0000002480)="5db305735d32cfddafd14da56cfb134077c0140e553866ff182a7c1df68fe9284008da212e83329b9e1add966d9768e652fe51d5229ec49c043ac5f54d5e63a896976b5dcb0d9c34f1866c866806e6fe8bea6878fb03efad8f4e756e19ccd08740319f069d458558e0f9f2a8be5ff9189a584f0b051440b8636a535b417d5cce4abcc11bb56d95779eb6e941e89fdf1990d0430096a0e039f95f2a5121fad30c8e7337d866187551e0b93e331336c99900278f6f88af1c1ad58ada285d28ef", 0xbf}, {&(0x7f0000002540)="f90d6c079fca67e0d7b363e3a4334f93ded4aba642a5820bb758350e1a7ebf0465f499e05d881400fb61534ddd083726d81fd0b8e53ee5c6a9058e443749c6de7f41684b01a2fdfd64daf4a5bd28e263a5aab0b20d8d0a36012b9d639c2b06ba07dbdbd88876431acc6f60c7c3cb0fe9ba66c9f8212ecfc429eae33a507aa7b702f607ded2b31222116d2ad5aa296413ab9f895142dedcf812b93759f6b2c18981aab416a62567b9bf61a9169ba3f21d10", 0xb1}, {&(0x7f0000002600)="1681842326366fb7b9a3c5908a903eaaed24cac10504940fa562d09ac75d46ee4d61f53411d2cfb76d1d98f24e16ce2c1a26f219b9d587e084c739e3a3b906c9eb3dcf3904c3aeff0a734d53baba36e2a2aa72a678974e0421c5005416cbaea50d63a489ec76655c25197edd4f427a6a3123a070d6edb5bf608a417e6d23f82b8ecbf3c50e35de0c58daee74e06effc4bdfb3205c81abcfa9f9138d8", 0x9c}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="ee5509a24be45c94b76d8e94c57989f2a8ef9ec4714cec896a428ebe843c0d8668af52c7f86653020134ee6a9b59230439e09e67dfd12c0683cf0cb6f819805a4c64736c105c14ec354c4f73c34fd21e439b1245de11a11400310258d23337c75a5b61cb5c", 0x65}, {&(0x7f0000003740)="22e153a70f8ed7881c54f2fe2c2ff0321d820716c0b941d34bbe31a9b04a966f5d", 0x21}, {&(0x7f0000003780)="e6fb2d033fb2fde08bed38d6ee6169bd90e0b1d5d4ac038ddc2387f0fb63b101ac648153c27d51944eeb0298a2825db8d870a632285954435493d9894f85fc405d424d025a9d3753313fdb8e31b37634e6ffd0b4e0352aaa44c3bfbe1ddf9a98399b60f4320c7a709497e3b13e", 0x6d}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000004800)="925063f5ff5571c964024bd449b71fabf201c156279818fcc7", 0x19}], 0xa, &(0x7f0000004900)={0x90, 0x116, 0x4, "bd3b847b740a19afc36e573aabce28b7e8b0c28bec37deaa0222abd93dd7c5e3a3eef615381540ed06caad5af85c94d8a59c325563011df3ca3e03fdff62d44f12241c098fa4ac169ab65043bf4e7f0ce655abd3724354dd8ee7c44c566986fe8ea55eb6caf85ec404378fef6fb2cace2ac596a8a2321279bdf0c8c2c3dbfc44"}, 0x90, 0x40080}, {&(0x7f00000049c0)={0x27, 0x0, 0x0, 0x3, 0x7, 0x80000000, "abbcb73d905c6b2b787ab4d50b40c9374b281f911a95447b19a6238e46bb557426868f8a04dd5bd0543772131601b7ee6026fc7d5b1e69c5b148dcaee8c008", 0x2c}, 0x60, &(0x7f0000004d80)=[{&(0x7f0000004a40)="1baae40d064126b4d9a1a8ffbbc8ad684f01a6f51e73844f2807265913aef1a935546cd3bea92b6eccd2256e5543b10f89cc650a9c89b29ab6e82f6d17118ed23cb94ba744313adaee2ace3641a453514a32313dab5e4c985695082e102134beafbaeb3037a097dc686fe53e9407e4177b79cfb6f4ca9071400283e00aaba7e871ec5dde326db468756110ca898b8d53b73f6490ca14ed61e5d2b8d324648a84cfc734c61f9a388e4c77d132b7a87ca237ea4d63ac4c", 0xb6}, {&(0x7f0000004b00)="60929c77919cac1b3d2e155c665d9370a36d513d23338f9098dff1854e7a11c6edef274bd84dda336a2c43fdddeb93fdcd3849b30869552395761a8ff0802b483ed63c7535877233c05b80b321d8f92bd91a84be16b1e1b4d4c0a17b7c085e59d61b7cd39797f342fae21a20d700c28afb8fdceec1090b1a9e524ccc3bc0d2b7451c2e28154ad8fef2648c88410af572d164a9ac9e682a21239faf4bfcb6fa9edc39fe17ee605046520b8859d6c45b1399e7607a7f117a37052f7727", 0xbc}, {&(0x7f0000004bc0)="14a2f518325396cfb3b23f3362807980b6c84fea04a68ce3e87eae558f4bd547a6caa86267da78e383eae78fe501c31f78ef7fd99df6d62164ec591fd958e22929dd3a62118882fa68ca2244d0a20e80be5b103d21833cdef215a13bbcbaba1c288bce687189cd12a2415b6609b61cf61d43d967ad18139b10b530af5fbca37812b994b7824b9dcc9742deee6cae38e84b756eb78b070f0e44c1e14af4c8fbcc95b1696976f0e98f2b968adf016ab2c7307dea", 0xb3}, {&(0x7f0000004c80)="c14fb13d17d1409e6f95fe865215ff6d38be16407e2eb45403bb9be6cf34a13b98eec793b4adda249495cf5fe121dd32bb1e041e45cc07acb58c226ad4408539bae09cc99f47f900a7cd5b14831bc041742971baaf8b720236d0e122e1741b86889648df3d7fa53efe092b1a6cb07f581bb71bb62438fafcd47d102194f47699a97fcb35ce1c19cd915f10b7ce848707ad180ae013a6444f11f97a05924c20a1a68f6612e444f1fbc56d9ff1fe5d931e", 0xb0}, {&(0x7f0000004d40)="e3c76301fe1aef286f859decdf32fb155a655a80bff7d4cb09580316913ad17c9d1fdf7c64757f57dc075e3065e93a", 0x2f}], 0x5, &(0x7f0000004e00)={0xd0, 0x117, 0x40, "2a81f0f6a65a258f3c381ebaa699237920c3757b644fe5c48e1e6d113c890e29e4a843153e7b5b28fc548b5fb375a11339d6f448434583e6e425a67116712060fa530f2e8e456d8ffa39fba69b496c00b8f2066d8229bdeb7c40f0bc59d051d3dfc482611ad8a890e50f12f8ae037e348b5801d73f3df6a39867fea2449cd36f47d1a20b2e7f08ff9eebd15a2bf683e13cd9c4e745f98a78affecef38e8809cf1188d9a573a455ba2351b6e50287bf9242e6431e6c05c40e1cfbaa"}, 0xd0, 0x10}], 0x7, 0x48044) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) io_setup(0xd2, &(0x7f0000000340)=0x0) io_submit(r6, 0x6, &(0x7f0000005640)=[&(0x7f00000051c0)={0x0, 0x0, 0x0, 0x3, 0x100, r0, &(0x7f00000050c0)="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", 0xff, 0x4, 0x0, 0x1, r4}, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000005200)="474027830ec23b008ab80a480855bd4fc3fad2cad79cdad0fdeb08ead38b59ce12213a3b2253fc8a9e061ef9c0eba6ed44fe5c79cc2228bdfbcc13f6f4489d69b1088343177af2cdd17a655d0d4f1ce1aae612d2445f1c194f3b5f1e490cbafef95b0cbe3656bdf97e0dd6786e2a8bd267382fc5439b2cd8d3836e5ac2f6d2805396a703509b5fe1be02193e20ab5b935eba32223a0c0d534aa1dc65634d814bb3942d75639a5bbd98353dacddd8ff420398f2bb9bb3f5d1e5795038c0fbd86084d243a598844ae0804eed335ccddc7ac72723", 0xd3, 0x400, 0x0, 0x1, r5}, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000005340)="32220709889d4107db5d4ddaeffbc863616a20335eb9394f2a542bc4efaabd86d69b", 0x22, 0xffffffff, 0x0, 0x1, r1}, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x6, 0x7f, r3, &(0x7f00000053c0)="2aec5ca47f6bf2135f0b", 0xa, 0x100, 0x0, 0x0, r2}, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x2, 0x41e4, r4, &(0x7f0000005440)="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", 0xfa, 0x8, 0x0, 0x1, r4}, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000005580)="9d6484cf6ce5a9c90ead83407b5c5d75d4563d45b07cbb8ccaa2f3b1a8dfec413bc620df53dc49ab93a80df55cf5bfe28a66ce5b83c4a27cea1359ae7283ed999aa9a36dec9ad327d5a6c70c9c9635de6d4bf4cc8e5bb7e72074eeb49d8b0a920a57fd77d509b558c1c75d79e1adba225ea8223a4ac63bad", 0x78, 0x2, 0x0, 0x1, r4}]) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x0, 0x2, r5}) 03:33:51 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101002, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "6f3077cb61a3fad6d6d8fb183baab21a4c265fdb1d251dc53a0fac0fd91926488e438d13a0950a3cf8b373b4ad6ced6f117f80f02b43bc7f46ae32d5a12fae5eca174d04b14fcdfa4feb4874e6cdc8810e092c51b51b4ac7b3624209222001f1"}, 0x64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0xc0, 0x0, 0x1, 0x2, 0x7, 0x1fc0000000, 0xc6}, 0x20) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0x0, 0x20, 0x401}) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x11) r2 = socket$inet6(0xa, 0x7, 0x3) socket$inet6(0xa, 0x0, 0x5) ioctl(r0, 0x401, &(0x7f00000002c0)="a281c3ac410206e743aba5911ca41a1816cfbb17b01119ff77bcae4941ba022a62bb0c92cf2783dc84a2e81146733c196b88699380bbc0734672e049cb992d6431ea72292e4cf0236aaec6f998d98c9c4fdf236c53b50d6094509f637008d287fa87c377de286a9b5c8b0880ff240a3676e0f71a4b3b5c1df969bbc0b71edea7b148a37ff130a4b5d90d77cada74e0e061e02d72aab75671fc76847c5452d7f0501e02716472708c44dadbacb92620a6839edf6324297649fba4645fd29afad134890ccd2de94a208b99d3d414cec7d4425d6c8789692448c9edb73aa93f1e0f746c8d6d523cd3afe3d320ef0e0edbb73e57f34c5fe62ed785126784da6c4f57cbc725b60023cd5cfaa99f2a477ed9496ffd4ddfac06572cf995640355bcbe10d53894dad440b589d1dbdfd5edd2ac23d925627ea6a69dbecb84ec414148e0bc049b4dd06e342d38f935de4b00da0922a65434e1b49acb53195126dea5f325142bdae0bb6c3f73c3a18ddc88af72909256a4b75080f0460fecd81d24aae04c758c16334bca0fdaa7f975f231b085e189da68a1ae844df639a31c32bcfa08212d4ff8b9900078908802059646d3f86f6039b605909bd437039ef4c8402eec8690d6fa6a40061fff4d22f7bda00985b446f894652af34baf842f37a9aced3a165517cf710c1c93a51cfc3ca164a796ae308ef55db9b00fbb1a5d16a8c21fbc6da5ce8b5ba49b2de07ec3cd864e52a2ed5d60f818dad24beb81be3db2c14b4870c32589ad27ffeeea66b4ae61c9df509ed42f57eec90bbbdeb7bd84bda78911bc27b39d604b82b59a06407fb8a28e4cd2e565c368dca293ac74cf72c822322885aba46a0075e3ba810fffbee24282bf0b3ce3e7f190cd863eea7f4fd61e43b19cf24d6337877803cccab1d5ea6397e6fab7fdf5a9b4068a82201ad9bfbecadee912734d92cffb747061e76a15cb9587a4700d72640d450dd925d8a168064fa5806ae8fc2de3b8066f948fa674c8653923fd71ce15b67b623cf9b6deb775bee72c668e9b13575b97008892a7018420ce1b783644421bc37305a29381b9f5b77f86fe4f9167c12b219b00f439c262e94063f144adee80ce1276dc23272c59e84c7322e76dc546c41d6c761b9111c68f131cb221921136902436b4536ce90a08fe5f1341bcc54006df6ac28bde74cbb664c8fa7ea7eac031b18d2018a704920edea49ead8a7a690070efa71d6e9d0fa10b71f4a9f249ac7c3be77ba463c137ff40d0e17477c2c6d0820f10c55f24c4f1f0d57618b0e1dd2e16c2984e9e172cab77a3fe524bc618e834c27b56f925bf98d3009066a82e476ac7c789b20e48bbbebb9bd04bed2dd14cb8d17ab3b52a1878df37d60fa04dadd3ff155c6cacca1fa9b1aeaf14a51adfc55609366ea90f68fa9f7107cf304997a452d0a4a4c564fc8c41fc6a70efd5439454fb08a729c78dee26dfc0b554220295622439f4bd79f14f6fd03aecafedf5a0ce6099d3e0c836df9d926bb64c98b89174a29badc43dff01a6693482929f2dca364133f1f4d091a0b72fee089e767650c1f9c8d833a19388240a9786da4b86ed122f50ed9ff65635fb3b0596c5654db5ebf1ade4cf30e95711cf977e5619499a67a19c29052da1879d15ff386241cd81af3acd948307aed6ad17891478fc6393c91c02180740a5797e5c08c2bb2868ac94a891ee1e1c57e71e7fa5fb671e1201ebd6c7489551cb7acaf77fb73c7efb578ba250c98ad36dca15d285394627c6b1a0c9c73157106106a368aba5be59216a4777240f2d67da46e4b1e55461ff440c14b4b80eba90fa8330b20addd4fc1a506d7ad4aa102f16326e90c8bde238da0905f7b3df6985de2a726d420801656957dcc817778b55861d0b032106c9a3f35091fc3543af485ece1d1f9f78c4ae62a1d0d8d4b4abe9871027b67e7f705fa197ebc1ed019b968ad3eb154f44755a1a9964ef52781af8dea2a91d22735c0c296a21610c3ff696c0fc74c4f12a8f8da96ed11bf4081310369fe7b156bcfea347aceb71c5ac094fbe139fa89630fe382e1420e935a91c994e831d1c09923c2428d89b3bc5008c2dbd635912289744149b4de8677a2a09cc500c4aab6bf779024e7d679b68b0ee4ec55d9f8bea361a2356dd733918654883bbd9aaa2bbf76cd642552cc2cd1d35edffad4775188d83a86a0cd49e66c656754eb51f00fdf80ba549d322e72d89d428a8f66a459f680a900cda1e61645fa9882f90d82281e723e02abf611236c086f450258e13d251506147452135a1fba7abd5a0ca888f8f4d0742b79dd87ffe7c38d8aef0e76bd3a172f404bb24b6aa7b8ce6faa42501fe326afbe8f9fdc2324051d77b3514d46f0b149e9e0dbd0fd17df6986665a84683c9bd57dfaf040ce9d8a4b1edcfd5baf43274f409a5b44af94e9cd7e21d362f707c8426404371d7d49f72cf4abf23b2cff889da13ca492095307585cf33f1917fb18eaf02ef85918057ab54ed214ae4ce394684feb73530ebb89c257375299f62327eb720fa76511fa6eefc3a35b264761fd482d6febeb1eb398cd41e2ced707fac95aa56e29be6fc1721f019ac9fb73a7606fcd57673b1b75d42f2bdc8f07ee690d142ada3e692bb6f0b8fd3f884c83f41444a723685226427603b34d773673351956d5cf9d9445b8ba22f0552d465638b6858af3271828f2d936b463fb8a44e0b7c7bf9fb6f041f305ab75867e62e02639cc2d7b010744e88c76ee37e561b9e13fe652f9a4200bf1adbc4b68605200b312c5e27b784b9b7d360b4d8a34d552a53d40bdfcb92b5e58fd870c3f76d7ba5cb971e8b3096eaf2cc7e157868e2960edb21f4fb75d788162cf172f994241b200c5afc801de48da4918d4a3b9f7706e27281f3706f7ce13a3a76afc41b0b5a9d9b6092d8092f206db9f5721a563f45a19b47ad1e12c4bf3d19f7f02d315584b59447e393bd5dc5efc8672d3bc41897313cc5836371df23a00623a09248b226990ae6aeb6e6bc4cdb3e2be43975b47c3416839a773503a25751270e83aaef01ebdcbba141fa609f9ad1da574f0650cc7109d53b7a9660fb57b8d689d58bdf20afde18569a5b5fcfaea75fea907be9ce51e38e5b24eae7d0fb43d8ecfdf650a86bff5b4486653c3da86bef7b8e3e15946e1274e3fcff378235efab0fa5c00f21f69d48d8c704813d307275d214e9f86bad10c6801788f3c82b43a4fa4b8c3c52a12379c001b985a9050cc558d8a1daa8e4dd633aab852acd6648427b1a11596c3956668a9824ba752fd61258cdfb4b7cd722c2a1d649e103c0e0883f323d090e3d2a755b77683359f0b29ec6231ec2d436444349d2184ede1d9b1d554f85a9e7d078c1c33a98a2cadb3c2c9616bce7155817c107a82c37dcf2c93b651aecda2a9b09995a9936e6efdce426453b701a6fae80871183dce05db7bcc1f304eebe8a427706aab1ee4818599aaa9351c50ac6b08120c5fa81ee1a3fb93732e31544290f962d0092aa0d4cf75c7e0dc3715e84f9006db73e60a998c94b9af5ce62a47920d76b23166d82c7b0c85bf24f5d645d2c731942d43708a06d8b29ce3afb17facf49d29e3128fd4151f2b28879a1a8da65a089a95a44ba44c3e1d07bdeddc2e5da103c8bf22f3fe2a0c7fd1b1e676683bf0d6246552bda9f050847d54f3b76f0486e404dd16c34d3d03ef501a814d418ea5f1e71d04ff14986e125975a483ae2e09040c467b7a5f26faae659f5c68c8b59516b3133b77adc0551ecf0b1221685b1b9aa9a10d74ca496e73c55bc59327cc5e3b6b86d5df52408d3d5547690f5d003f5641acee0a2d0261feafdb81c86efc707fa6a1b9011e81f7c3a3ddc04eca3d0972fd6abb6cdc9596a9e71a8979178409231a535964d659e1f6a01b7b3734961b4a2afb29f004469a3a3eafb1e2f1583f512e6ba7669d97f8651307e2e7e143b45c9b39d3306b748cd75b94a24c969dd5ea5f78919f8f98529deaf7fca4a14dac0e5100f978163afb35d5fb9f37131f84ef4398b29b274d24cd6a2db2d885d2108e52a4ad6690b127bda5cbf47a724000fef58d6c4355f167539418de467763c641f202a55f8f7564b39fd3935f01ec044cbec4a92840c3bb226006a4e32c5e2c0dc0455ed2daab318aabaecfc9eeea8745a81e4f1db0c851e276e93c66870a73b3e2e20a0b7e5d7a699f97338642b14473f36321dbfbf6b437439826104576788cb3503bd5bed254b1251f9c31945bb929ed803e393bf9394d0b85d83c22d82daedcbdc1c86294ac464a572d22221cae8c6258c92fcb7002b97a7d8b9a8728d899fc4d4028fc3742a19a3f688f42e955c0bc4348c4e45707fff58ce8e4dd8000b5f38a19765f0550337a221de4f431548782470b92f4bae4aa82bc25e6c920863710aa70df0623d2d3e25ff3f8ab5d03a4ab9615377d7963b491557d642766ed2ad2080d4068751c8fdb2e236bfcc17c60e7a64e49abcd826c617dafc1acb2ffdcfbd1c897425d338cd4467d0d2f2d3450632302f8d32b2faeef9f563ede65de9c12bee18c5ab4b7b20d08368df53d0c6ad0f7d11e93ec7fc3ef441ad1b45bc550ba7eed80f2e6a519c69ff0fed5da9d3b9feed7e99613f123cc4731049cbfe662cafb04f8729a7d0ea8d1290ff881138925a28d1408efc1f18db3667a326172e0294062f6322d7ea2850c45fa9707a87f3bb55e6ebae3faf67f5a7e32cc5c5c533b67a0256a8af0ff1a8f060078e6b32b194cfeefc030fbf05ef559428b0f8b7f72ac371fd99ee5134a44af174f0871b4a2c8110e76fe88f5ebc547d54c6fb9aede8ed670abfa40bf59339214020d514ca373979cd8bb130787d7c2c4a998dfcd61e12e6474a6f3586800a4c2d131923365be7cefe4671a9daa872f02ef3fbb96f5108993a9fad8d56ad419c87edf64c4198f02377db2084bcaeb4eade1cb8f0e6d7657608408900f9782932cbdc898842563973e44be1905106b832d5cf1d85d70feb1a284c7ae9cc28c111fef13f58e710a18b5c0d48cf3e7e547b00a6c35067b3fae0b7173596198b139b93b76d576535b1c5eecf664c23abb1c8b610f845bdf778b1d411f9520060b9c128e857649d36990ec1e93c80c84e2bb28d896858fd8db1551846c8746577c178b6f299bedc84bdc029fec486f90d5ef364017927df1f2e11d35c990232544548ace923065e22753cac7b3fa464c42286f9412c344c6bce9f69228ee8d2995bcb705fe1062047d74131f695186148df77de35778b2edd69d8313c73b0cfdae8fda6fe2d4673d0a57f70d1dbf7a2ae848313f6c0a36dc16cf6abc9a31e379fe474b7f5e2c76b4abc0032e1675017d37444fdfada59455edfae98b783aed5b9d78b25a81424b7073f784ddb4768e2c28baef85bdb0184d5286637a888689fc1e633cfd16c705fe5c4e41e7f13748b5b382fe04f0d79fe530dc1f4592002b523bb9e265fe3b243ab751213132335167370038c264e83134e86213769b9270edbdf2a3a9ec2fab3265ff1e31566e04f9cde649fce219c53e3b320e200e8edd6be6c0763de896de235051abf130b01f8da37710d72ae57bdd925cbe45c8b304c54242a156573ddc91c5acaa279e294d7282e847c6816d930e3b8d5da2047c9bdab3a53676551c1b7b0ee50471acbd16c23583cc4a1981b2e6038b03f15dcd08bdccfc5a4e80a8adba63b39815cf91c9bb3cc2f0d45f2b9e57d31044aa116edd02220a257171e11b42d2ddef40a615e5748aa057f20618375c0a17a18fb699d16245e139bee") ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x4) write$binfmt_misc(r1, &(0x7f0000000200)={'syz0', "acc45088c15248c55bcd24a77f0cecb58d040c6ad74fcf38c6f20dd5ea72096e55906e44e4bbc12fc69d5f8dfdf05dd7856ff5cb7f3594b5dae32e8038f8a56257e0d1feef2aadae06170819ab7f6b6337721c0c"}, 0x58) setsockopt$sock_cred(r1, 0x1, 0xa, &(0x7f00000000c0), 0xc) 03:33:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000006c0)="553cd033e4f6c272633c660e5a04c2305734f8e5d5e5c7b8c0310b4938cafa4ba076c59f634b3e8564d7d3f60cae8709da6bd2843373f2b4546d914e7725caf497262e20a48241beaee1334b168519b4ec4c8f90179cabd3c1689b7005271e5a037d2b3ac744d636a78d10b6354b87d1d9d8dc97580600861b32cdd2fbd2d55ec11aa8fbe5d6ad7c8640f8fee53c45075635c2f8b47b9b02c507d153f3b75dad329e26a49b6aadfd6b") r1 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1f8, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0xd0, 0x108, 0x138, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @loopback, 0x0, @empty, [], @dev}}}]}, [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x270) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) [ 280.492497] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.499211] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.508354] binder_alloc: binder_alloc_mmap_handler: 19529 20001000-20004000 already mapped failed -16 [ 280.520003] binder: BINDER_SET_CONTEXT_MGR already set [ 280.526648] binder: 19529:19531 ioctl 40046207 0 returned -16 [ 280.540576] binder_alloc: 19529: binder_alloc_buf, no vma [ 280.546280] binder: 19529:19546 transaction failed 29189/-3, size 24-8 line 2967 [ 280.566194] binder: 19529:19531 Release 1 refcount change on invalid ref 1 ret -22 [ 280.579773] binder: send failed reply for transaction 266 to 19529:19531 03:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 280.589216] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.630143] binder_alloc: binder_alloc_mmap_handler: 19557 20001000-20004000 already mapped failed -16 [ 280.643258] binder: BINDER_SET_CONTEXT_MGR already set [ 280.660366] binder: 19557:19560 ioctl 40046207 0 returned -16 [ 280.666997] binder_alloc: 19557: binder_alloc_buf, no vma 03:33:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 280.674230] binder: 19557:19561 transaction failed 29189/-3, size 24-8 line 2967 [ 280.683248] binder: 19557:19560 Release 1 refcount change on invalid ref 1 ret -22 [ 280.692801] binder: send failed reply for transaction 271 to 19557:19560 [ 280.702671] binder: undelivered TRANSACTION_ERROR: 29189 03:33:52 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x800c0910, &(0x7f0000000040)) fstat(r0, &(0x7f0000000080)) [ 280.819017] binder_alloc: binder_alloc_mmap_handler: 19570 20001000-20004000 already mapped failed -16 [ 280.833024] binder: BINDER_SET_CONTEXT_MGR already set [ 280.838503] binder: 19570:19571 ioctl 40046207 0 returned -16 [ 280.852848] binder_alloc: 19570: binder_alloc_buf, no vma [ 280.858609] binder: 19570:19581 transaction failed 29189/-3, size 24-8 line 2967 [ 280.869902] binder: 19570:19571 Release 1 refcount change on invalid ref 1 ret -22 [ 280.879032] device bridge_slave_1 left promiscuous mode [ 280.884656] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.884873] binder: send failed reply for transaction 276 to 19570:19571 [ 280.911574] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.923871] device bridge_slave_0 left promiscuous mode [ 280.929506] bridge0: port 1(bridge_slave_0) entered disabled state 03:33:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1}, 0x34d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000002c0)=""/230, &(0x7f00000000c0)=0xe6) getrusage(0x1, &(0x7f00000001c0)) 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0), 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1400}], 0x34, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffffffff8001, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) 03:33:52 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo\x00') exit(0x2000000006) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x447, 0x8000) linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 03:33:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0xa7d59a4af01e34bb, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000600)={[0x1d000, 0x104001, 0x7000], 0x178000000, 0x8, 0xfffffffffffffe01}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x20000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000080)={0x8, 0x2, {0x3, 0x3, 0x7, 0x0, 0x3}}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x48000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='^eth0\\vmnet1\x00', r3}, 0x10) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000240)={0x0, 0x80, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000580)=0x65) set_tid_address(&(0x7f0000000040)) accept$packet(r3, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001080)={r4, 0x1, 0x6, @remote}, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) prctl$getname(0x10, &(0x7f00000003c0)=""/182) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000140)=0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x404c534a, &(0x7f0000000c00)={{}, {}, 0x0, 0x3, 0x80000001}) getrandom(&(0x7f0000000300)=""/174, 0x826a, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000700)=""/100) r6 = userfaultfd(0x0) close(r6) clone(0x0, &(0x7f0000000380), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) 03:33:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008916, &(0x7f0000000100)="025cc80700145f8f764070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40200, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf, 0xc, "7d5358f13fdc9e7cffbfca0cdd811d87021610117a73bf4cc048de2c30eacef33d7ffecbfc5e9527e77a8cbd03abaac89e7b7dee8d80df55672f0f33891fef58", "4802e8aa23184a060fb8e4ea510c1d00ed2894d4ff2ca1d6928c7741b9c3017c", [0x6b60, 0x6]}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 03:33:52 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001180)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x40000000000008}}) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7, 0x8, 0x1, "b904d43356e9d8edf5d043943bb1115cb6db16a9671c92cf12786e0af8ced1f2eec6d78968fa73c30bdb60e8339a7be3f5a0a318bef6585473d3100b456051", 0x31}, 0x60) socket$inet_tcp(0x2, 0x1, 0x0) 03:33:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 03:33:52 executing program 6: r0 = bpf$MAP_CREATE(0xf, &(0x7f0000000040), 0x2c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, 0x2, 0x6, 0xffffffffffff82c7, 0x7ff, 0x3}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x30}, 0xc) [ 281.320428] binder_alloc: binder_alloc_mmap_handler: 19605 20001000-20004000 already mapped failed -16 [ 281.333371] Unknown ioctl 22019 [ 281.339132] Unknown ioctl 1074029064 [ 281.343118] Unknown ioctl 19299 [ 281.346718] binder: BINDER_SET_CONTEXT_MGR already set [ 281.354194] binder_alloc: 19605: binder_alloc_buf, no vma [ 281.359851] binder: 19605:19614 transaction failed 29189/-3, size 24-8 line 2967 03:33:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3a, 0x6, @tid=r1}, &(0x7f0000000100)) write$eventfd(r0, &(0x7f0000000080)=0x1ff, 0x8) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="f1ffdf1ccaa6da30"], 0x8) 03:33:52 executing program 7: r0 = socket(0x5, 0x80000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000d, 0x3810, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001780)={0x0}, &(0x7f00000017c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001900)=0xe8) r3 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001940)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001980)={0x0, 0x0}, &(0x7f00000019c0)=0xc) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001ac0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000001c00)=0xe8) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001f80)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002080)=0xe8) getgroups(0xa, &(0x7f00000020c0)=[0xee01, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xee01, 0xee01]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002100)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0}, &(0x7f0000002180)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000024c0)={0x0}, &(0x7f0000002500)=0xc) stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002bc0)={{{@in6=@ipv4={[], [], @loopback}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@rand_addr}}, &(0x7f0000002cc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d00)={0x0, 0x0, 0x0}, &(0x7f0000002d40)=0xc) r22 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002d80)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000002e80)=0xe8) r24 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000002ec0)={0x0, 0x0}) fstat(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000032c0)={0x0}, &(0x7f0000003300)=0xc) fstat(r0, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000033c0)={0x0, 0x0, 0x0}, &(0x7f0000003400)=0xc) r31 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = gettid() fstat(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000036c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003700)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000003800)=0xe8) lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000004bc0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000000c0)="567ef3d96c918772b4a240613f7e3b1f5bd9cbe61e02602e8baeac9b68d40cf051fd15c9b43febef369b6a628be68507a44863df3ce2b8f4e07b93b41a17c560c04851b709e02b069e0b0ff36329d1687e574d3e4bea3e67622e8432286b28faaa6c9e12840a7152d870dacb8428fa2e055fea799e56cb0605fb258a5488980563137c0911381265ff4b712034a9fe899e284ece1ea5ca3bf20851a1609a88d8ffbd3249975422cf48bc1b1543f26f6f8c464050c115c3fba11123ea4d4cbf35eb0cbc438e1c9bd584434fe805448a2a8a9c", 0xd2}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="29efcd122e348bd674a181aaf76f9d5e47bc612cd2f5f0540efc7ac8c2b6de53496cfde18545e10794dc38ce497a8a08575b7f9d75597044e2fa249a842ac62f7efb30754e901dff838cf63cb24b6b41386f90ffda0ada19f3b101a6f375c2ab56971a6af822ec0eaaaa65f209", 0x6d}, {&(0x7f0000001240)="a1434d43a62e752127c4aee8d45066765d0e5840668550ed24e27f8c8a203bbdd8b0797d0a78dbc8145e03d0b35523d4bed4796b53b000ae1a35a316ca1943a37f8eeb68f5c051c9f60c928847a6752b2d9a", 0x52}, {&(0x7f00000012c0)="9d522c79289c79ac16127cf3550de987c8690d427b49636a01a1d1be1f5a9f5e144375f579597748150e566736e4840ff92214281fe597f72297481f0fe11cd4b5d2df770b8eaf1f07b2d5f3f4b160f66dfd01bd6734720186ea937a1402c1cca11d4ae430130a669dee12e586dcc1df2898e07d5579ee58235683d878ddcf4b91eeb0019333803f1bdb2100b5dc8a7e72364624403cc178a5eafe3386b8af2f4e5d279f2510f8a4dbc4383219b5f1666a0c720fa25f4d81fbde6bcd74866d320ad3689f4c7371d76822", 0xca}], 0x5, &(0x7f0000001440), 0x0, 0x24040000}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001500)="d1b35a57267546331996b7cfda26e43ca51635060dc0347ce8da0b56f6141695f15a89cfc28c4d26d2d61fbaacf8d10f607d080e88fc9a14ccb2e1bf7739d3636090b5876d5feb", 0x47}, {&(0x7f0000001580)="88bbb96c195a06db5c64ae9b01a9d296db61a6db9b64e5df0509bd0fbd48e091460450f69957305de3d2744dfa6cf6c25345aded72920dd38a52bac3ac59d5867d0bab18651e2a3f0b6f51a165b600aba9aa7b944afeac6151e4e36aa8c54234f7a96b1a6969fdceb4813df569770d5d6bd80eeb8f29a5a99daca6c11d98e1be6c7015885d7b4319db02434d7bad228bc06692a28c7b86b2d2ecafed7aa37e981bca75687324cf050ba76444ad8246980b5b92e85a5e5b04", 0xb8}, {&(0x7f0000001640)="dbd00075aeecf296d1080ae4b9d7d18e65324069f734c0892d92857c7b56100f58f21b6bdee2dbe39aa8975764d99888fff1e950fc0fa727853109062a4fc60358fbacdf19a156d21c7d4fea4de16b09915081bdef5a6cdddf8d2bedd3722f0c655cb5364ce860f4a5495b294f4dd5c65a8706c9db69d8ec7a7b243480fafa35feed7596e6a2d865c2a143807b949cf460fc3ff5bd3f881edd6a37bfbe88534ee5461bbf2e48c1b800e2ca2e83bc5b74f80c8a8d5d39568ff18a294b86d1848760b400f7262d651dae02e0408a9b179aae6429520be24457038f9d5f3c0fbbf9", 0xe0}], 0x3, &(0x7f0000001d00)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x148, 0x8800}, {&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001f00)="94fe0309befa878a62988497dcfc74a6e10c492461bfe8c9ae45fb418bf6c43e9b1aed01e9e6f0ee5509aa67949c47b00e88c5", 0x33}], 0x1, &(0x7f0000002240)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x140, 0x4000}, {&(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002400)="6f8eea970f3ecd3e82edbea3f9002836906f14fa0b8f5e8210c5cab332d6977136d13c43d90ec5a27a78825a025c056ad9a02bb96aa1152ce6c2884c15db74e37cd7231a23dbcfb6e397b0cb27525e9e1c3dd7b5fd4fb1efc697fee34e1fa08a8030d4f790b822aabf6355a39fa2e54b", 0x70}], 0x1, &(0x7f00000026c0)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x58, 0x8000}, {&(0x7f0000002740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b40)=[{&(0x7f00000027c0)="023db0a330fd89efb90313a38b0dc3b14d47def62034821296a4d43ffb9a360251bde297683992fbbf6a0304d17b1a51b71897c7ab9c9d4ef09cead14577a003138107baca97ad887e230aa9b3ad9d50e2acc6579bc3755a41f8f2206327ff8b69406a94bc44a54cc1d029fa1cd19e7979f0cf7fc07a67beb149cef1b45af77ba0d55cae1f2374d5cef8a4b30d2b74567ffc341cd406a7220c6e9d53ad0669dcc3a2c3c30f46e10a98535d3556dbe1411d76815801", 0xb5}, {&(0x7f0000002880)="efd03b65cb6be80811e0e241d588d70675b71ce15d8b292c70de536158ad5e9c6dd5549f1d2abc3229f5831ccbd56a0db667ffc13aa332c21fe6c4863df47f4b44a5c6167163aed1cdbe0182573e86f91fcb21f4fd259efd9510aaa7539b0558aae5727d87b6972e589e625bcdc87f8f40116f2dc3306b03", 0x78}, {&(0x7f0000002900)="f00561a303eb727afacc36a7143f902781a7e186811190d3192569f9d12f57e2322aa38eb9598a6ebc91696a85ba5b93c2334c7585070e4d3d9c89c7c819805e45b056ff387558c69df22b9d442079ab66309eefcb7772d1c61df844d61d8467c4a69bf6cfc1955ac4c5d4bebfd738436170d1921e0b68ed9bf5304da9ac165d3230526504b6509882eb6c732319642edc1a7a582a77095ee436705aca6b19d6aa9573ab1f483d46f35fba6c50cca6e860ae64b5b2c8760e010e0abf3fe818eb7dcf32a6494d8a8d8b", 0xc9}, {&(0x7f0000002a00)="1572e9a5b79790ae8f521e67827c7c14c0149e9764bce4d177de11794f9f1985b64748bcf8654e46f581504ab17f055dbc6be5d0681f13641c961de0bc4fd0d58e8b122c5119e29bc6f7ba5d7f42f5e76b2e22328ab9a7aa2451e214e092973edbac87319592d65ba017a8138d825f1d772e3708a272b95381f7979eb3217d9824fdca6a3e40dd188f923435c3caa1c3a6b896d791422edc3b8c19670fbb976370e5da30056e7e7032a4583fb9646d79815c10b9e50ab90b9408794d61e0bb59584d341557c8c7ec970b507820c27d083e119c9254fe5bdaf5c0e829522cd6eacb52450c", 0xe4}, {&(0x7f0000002b00)="59b4961ff51735eba76ce6e1a74ba31c7d836b5dd4d5e5ac54bb10281bacbbae41de788754e6ddebc070c0f7b3071c39ef91", 0x32}], 0x5, &(0x7f0000003040)=[@cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x88, 0x20000004}, {&(0x7f0000003100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003180)="e5ad0328e2945a43a2811b7b04af2f900149d7e549bd583924b45d4c1ded81352590349f3cbc6330120c298c2ec6fb4bced8ff3bb7a37b18562e909c17c68afe69822271ce925b071fc6250d63171513ee1b4d5e8b48f9859d4aa66c32baef6f251ac1e8d6add094ce4f8457b54fdbfbbf652bbd19eaad13ed10a176c6c270dbdda264bc3f79deeb01a6e32fd7ed69c9573494da5be1e337b348bc6711a0d3d958a3b268e2fc290f193d8df0bb9abbf4ec69f47b88a087bebe73ad6d09fd27ad5b5c6e03077f5823b890321cb4da11fa639fe6f1f662908186e6293879bddca0", 0xe0}], 0x1, &(0x7f0000003900)=[@cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @cred={0x20, 0x1, 0x2, r37, r38, r39}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0xb8, 0xe21ba3dc99cef867}, {&(0x7f00000039c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="ea8319e3f91792d04d7c57c42c53e041cc68e51951eaabde5bc0aef8414dce7fde962a06eed9a6b98affcfee1104c3e1789dafc69c47cb74a39c48e7bf5f0f90c7eb048f28c99a1f76b06c19f04b98b6e0383c0e1913e725eb812e0295118896925f164702b06e3674c69047e3e058e1e5295962dc4c0afe91cca12d29feb8263cbbbe5cef20", 0x86}, {&(0x7f0000004b00)="d86f26986ccd8866642092ebb6e5dd6800feb22a294cbfbfb6f8a7b33fe68b74bce7e1b4d6cd0fa0af5c6f0a146f86eec4e7e7b5866b29c8257f21b32ec4db62a4d90012931ab53722ca7f136e153560008deaa3b0e5bab2ffd2d089bc", 0x5d}], 0x3, 0x0, 0x0, 0x40000}], 0x7, 0x1) write(r0, &(0x7f0000000000)="240000002a00070032f00008004a7700fbffffff010000ffffff0e00ff10e4814cce125c", 0x24) [ 281.367729] binder: 19605:19606 ioctl 40046207 0 returned -16 [ 281.374286] binder: 19605:19606 Release 1 refcount change on invalid ref 1 ret -22 [ 281.395421] binder: send failed reply for transaction 281 to 19605:19606 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:52 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000080)=ANY=[@ANYBLOB="d26710f16090670c6ebb45"]}) [ 281.421971] binder: undelivered TRANSACTION_ERROR: 29189 03:33:52 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) io_setup(0x800000000cb, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)}]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3a7e}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @local}}, [0xffffffffffff8000, 0x4, 0xd36, 0x9, 0x7, 0x1, 0x8, 0x87ca, 0x1, 0x5, 0xffffffffffffffa0, 0x78065aff, 0x8000, 0x10001, 0xa5f]}, &(0x7f0000000180)=0x100) [ 281.462899] binder: BINDER_SET_CONTEXT_MGR already set [ 281.472778] binder: 19639:19640 ioctl 40046207 200003c0 returned -16 [ 281.481086] binder_alloc: binder_alloc_mmap_handler: 19639 20001000-20004000 already mapped failed -16 [ 281.492122] binder: BINDER_SET_CONTEXT_MGR already set [ 281.498432] binder: 19639:19640 ioctl 40046207 0 returned -16 [ 281.499155] binder_alloc: 19639: binder_alloc_buf, no vma 03:33:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x4, 0x3, 'client1\x00', 0xffffffff80000002, "df8cf8c3d9f9fe5f", "e214a5e7e2fcd8fed5018e27947c90d9ce79a507220e7e61a89737c15940990e", 0x8df0, 0x4}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0xa7e, 0x60}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x7fff}], 0x2c) [ 281.510006] binder: 19639:19646 transaction failed 29189/-3, size 24-8 line 2967 [ 281.518866] binder: BINDER_SET_CONTEXT_MGR already set [ 281.518918] binder: 19639:19640 Release 1 refcount change on invalid ref 1 ret -22 [ 281.528676] binder: 19639:19646 ioctl 40046207 200003c0 returned -16 [ 281.542328] binder: send failed reply for transaction 286 to 19639:19640 03:33:52 executing program 7: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)={[{@noquota='noquota'}, {@resgid={'resgid'}}]}) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x282) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) write$P9_RSTATFS(r0, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x40, 0x0, 0xff, 0x1c, 0x86, 0xa4d, 0x100000001, 0x0, 0x21ee8611}}, 0x43) 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:52 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x14000) write$binfmt_misc(r0, &(0x7f00000005c0)={'syz0', "ccfd7ddcbccd613ae69edb917d16a94a22fe30fdd8e8c758a2a4942816dfcbfff34d501a5a5699302c6fea5663e591254fd01b17bb204c3ca3001b41d4550d25046862"}, 0x47) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000000000000000000000000002c0000000000000000000000000000004daa1cdaabdaa4cb8c"], 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9127, 0x900) sendto$llc(r2, &(0x7f00000000c0)="e6a1660c2b00d415788b9c52baae5538da80d9ff851539d8ee48daa7c4cf7c8f1a38dced491af0b476826f721ac9df59bb7d3841e5608a6840ea85d01f061851fa5808ca3987cd4711d70f11abcbf053ab58c4e82f4a18e7c94717d27baeddfe71b9f8baa44d0be2639b5d4ad6a02050c52909a504d01590859249bf1e90788f0173b579b4f5569e9d6323a1b401e8b14fc7a7f465520a2357ea3f889860cec1c67e3f7ec99de985332d1e956f92495bf756603d360f9331117fd281dd6e049d076cfb803eb6", 0xc6, 0x40000, &(0x7f0000000040)={0x1a, 0x32f, 0x9, 0xdb, 0x0, 0x3, @dev={[], 0xe}}, 0x10) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x5) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$xdp(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x2c, 0x4, r3, 0x1f}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="df3b0b1975ca4b3de823157a52e536cbbd2e29b674e25d4baadf2f06da0cbd8a302c7bd4a941faef102aa2ae65e6ba425b3e08bfe4fb15ca868a006d28766c6cf27b3ef048f38c964889a1f3017016944bd191d4b1bad59bc739ef3dfec7aa5e4bd2a85a8402ba5455d19b83e10b299282f08bc01d57cc139268349ad5d3f89e20576bc300b2a2b90de48245f76022fb019e944860be946932ce9855bd71a6f187e7f9b38f8b4c60088da288d9804f94a96afda4c54418493017390b9568aac01672226da99f8df5811747796300317ff690c6adb61efe7e68ac", 0xda}, {&(0x7f00000003c0)="cf91ac62c0d385bde9d7adb8d4935554bc9c74cb119a7b3edfb8d2e789557965c5730f588bb26b5406c41018b16580ec7617d3b15c0e50d98f2d5004c3537143572d22f807b5a2387eb14e375c1147cd158b7234edc77b6d0715323c644760a99d1593380a2478e43f773a5ac20e50e60e8e82976dc690", 0x77}, {&(0x7f0000000440)="e44547459dc17b73da6f9ca985aa801c8c61996a44c90975dbb5f4793c861eddf375d41d352b5601194c0ef30c58cbaaa327ec1aabba2ff2de9d3226ee9e7d9b10c34d84fe382e9dbb4951451a855d8f7891101810cc0a0fb52b4a3e92c95c4fecd6230128de67b1e3255465befa82370f0337daa8a63b7f4be15e", 0x7b}], 0x3, 0x0, 0x0, 0x4000000}, 0x8000) [ 281.560354] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.616379] binder_alloc: binder_alloc_mmap_handler: 19654 20001000-20004000 already mapped failed -16 [ 281.628196] f2fs_msg: 12 callbacks suppressed [ 281.628208] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 281.638017] binder: BINDER_SET_CONTEXT_MGR already set [ 281.639845] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 281.645419] attempt to access beyond end of device [ 281.656666] binder: 19654:19656 ioctl 40046207 0 returned -16 [ 281.657732] loop7: rw=12288, want=8200, limit=20 [ 281.658697] binder_alloc: 19654: binder_alloc_buf, no vma [ 281.674082] binder: 19654:19665 transaction failed 29189/-3, size 24-8 line 2967 [ 281.677447] binder: 19654:19656 Release 1 refcount change on invalid ref 1 ret -22 [ 281.682035] F2FS-fs (loop7): invalid crc value [ 281.695268] attempt to access beyond end of device [ 281.697445] binder: send failed reply for transaction 291 to 19654:19656 [ 281.700254] loop7: rw=12288, want=12296, limit=20 [ 281.712127] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.736728] F2FS-fs (loop7): invalid crc value [ 281.741404] F2FS-fs (loop7): Failed to get valid F2FS checkpoint [ 281.756323] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 281.763416] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 281.773021] attempt to access beyond end of device [ 281.778006] loop7: rw=12288, want=8200, limit=20 [ 281.782836] F2FS-fs (loop7): invalid crc value [ 281.787754] attempt to access beyond end of device [ 281.792743] loop7: rw=12288, want=12296, limit=20 [ 281.797815] F2FS-fs (loop7): invalid crc value [ 281.802506] F2FS-fs (loop7): Failed to get valid F2FS checkpoint [ 281.823220] attempt to access beyond end of device [ 281.828257] loop7: rw=12288, want=8200, limit=20 [ 281.833659] attempt to access beyond end of device [ 281.838681] loop7: rw=12288, want=12296, limit=20 [ 281.844377] attempt to access beyond end of device [ 281.849404] loop7: rw=12288, want=8200, limit=20 [ 281.855229] attempt to access beyond end of device [ 281.860305] loop7: rw=12288, want=12296, limit=20 [ 282.137470] Unknown ioctl 22019 [ 282.142146] Unknown ioctl 1074029064 [ 282.146020] Unknown ioctl 19299 03:33:53 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x4) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 03:33:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000280)=0xb) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000140), 0x2d6) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)='7', 0x1}], 0x1, &(0x7f0000000700)}, 0x40) 03:33:53 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x52}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1f) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x402000, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000300)="2e36f2ad0f01c866b9800000c00f326635010000000f303666839ad1d3cc0fde0965f20f1022baf80c66b8c6bb4d8366efbafc0cec66b8355900000f23c00f21f86635030001000f23f80fc72e0000ba2000b84e6cef", 0x56}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:53 executing program 2: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$BLKGETSIZE(r1, 0x127a, &(0x7f0000000240)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0xb54, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="d6fdae9b6d78b54b7b83eae1092f06c4594d92b37082a7872905ad03f90583a56d3e0b9e819e35c47807b34ad69f9e9e991db6e2d26262c9bbd5ebb1f6fee6a8aec116c29c416b07abdf3dbed16e2b9ac17bc2ab3a642cf5c60bf0bcde6909d6b5b838f5d1476ff8519ae5c0b125f574255e531a634aaf54c7871b2ef81b1ae61c4f20d095bf46b16755a1b7db8a9aa8e5790e3e96943737d42908b373acfb", 0x9f, 0x7000000000000}, {&(0x7f0000000180)="8234c17725669f711c586dec648a074a4ba593eb2d77e8866bae814ebd72c5082f303ff0c0e2eb85b94ca352d6ca6c22594ecf5505275013ec521e693ffbff12", 0x40, 0x8a}, {&(0x7f00000002c0)="3fb33e19c3ce3e4cf31d42e612636e9050df967b588549df8df129508180ee9d0bf2c1f6627067d085531f1f376c6ecb028fd30cee4acb0e90e349c16d2debc96cbe40b47f621bcbc10c2fc370460d1810ca053b993c06d2952d52b248b3bcbdd6ee326571ca1231360d83fdf2feba40a1c80aaed9103da10c24adc7eaf597d282aabcb6d41e3828485aa5a80d84a89f", 0x90, 0x9}, {&(0x7f00000001c0)="837ba8", 0x3, 0x8001}], 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f71756f74612c7374617466735f70657263656e743d3078303030303030303030301030303030352c646174613d77726974656261636b2c71756f74612c00"]) 03:33:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$nfc_llcp(r1, 0x118, 0x7, &(0x7f0000000140)=""/22, 0x16) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[{0x28, 0x0, 0x7, "8612b75e7eff7f0000000000004a927364"}], 0x28}}], 0x2, 0x0) 03:33:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) r3 = dup2(r2, r1) io_setup(0x5, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x8000, 0x4) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000040)}]) 03:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:53 executing program 1: r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@local}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xfffffffffffffd5d) ustat(0xffff, &(0x7f0000000000)) setsockopt(r0, 0x10f, 0x87, &(0x7f0000a94000), 0x0) 03:33:53 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, &(0x7f0000000140), 0x3c, 0x20000802, &(0x7f0000000040), 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 282.309392] gfs2: invalid mount option: statfs_percent=0x000000000000005 [ 282.316483] gfs2: can't parse mount arguments [ 282.326232] binder_alloc: binder_alloc_mmap_handler: 19693 20001000-20004000 already mapped failed -16 [ 282.340108] binder: BINDER_SET_CONTEXT_MGR already set [ 282.348198] binder_alloc: 19693: binder_alloc_buf, no vma [ 282.350251] binder: 19693:19706 ioctl 40046207 0 returned -16 03:33:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x402003, 0x0) ioctl$EVIOCGREP(r1, 0x40107447, &(0x7f0000000000)=""/174) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$evdev(r1, &(0x7f0000000140)=[{{0x0, 0x2710}, 0x2, 0x3ff, 0x80000000}, {{0x0, 0x2710}, 0x3ff, 0x2, 0xdd0}, {{}, 0x9, 0x7f, 0x18}, {{0x0, 0x7530}, 0x8, 0x2}, {{0x77359400}, 0x2, 0x10000, 0x2}], 0x78) read(r1, &(0x7f0000000500)=""/4096, 0x1000) [ 282.353823] binder: 19693:19713 transaction failed 29189/-3, size 24-8 line 2967 [ 282.364078] IPVS: length: 4096 != 8 [ 282.376043] binder: 19693:19710 Release 1 refcount change on invalid ref 1 ret -22 03:33:53 executing program 2: r0 = socket$inet6(0xa, 0x2000000000800, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x600}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x40, 0x4) socket$kcm(0x29, 0x7, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x1, 0x1, 0x7, 0x6, 0x517d, 0x800, 0x9}, 0xc) 03:33:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bond_slave_0\x00', 0x5}) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000008420eb61b450f2751aec2000ff8a000000000000000006000000"], 0x14}}, 0x0) 03:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ipv6_route\x00') getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000300)=""/250, &(0x7f0000000140)=0xfa) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000001c0)=""/243) clone(0x20000, &(0x7f0000000200), &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)) [ 282.415811] binder: send failed reply for transaction 296 to 19693:19706 [ 282.447690] binder: undelivered TRANSACTION_ERROR: 29189 03:33:53 executing program 6: syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000240)='./file0\x00', 0x2, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000340)="f533754bf30e", 0x6, 0x4}, {&(0x7f0000000380)="078743f5e53bf784bf038396d29f065a79287e6a9c6873bf5fea969836510313f940d0c9ab0535a75cce830f26114cbbb280c2c1cc24f9b6c57022526f33d2cbe481dc9e6f4184a2ade26d0bbad1b1b1331ec1675f2f886752ac9b621845931448cd5e6980", 0x65, 0x401}, {&(0x7f0000000480)="b4011a30bcc700277128f5", 0xb, 0x8001}], 0x200000, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="87ad8e0000f055b0cc21350c844b5f00ca41d4de5e6120", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d5a3e12f50498227692813e848c55d2ad5d629786e99240b49f86cb35635d7546da4afe8c66537dd982ac03359344b57d6aabb2ef8ed077eb0b21ec121caeb51d5c0411d4262cd98ac73137439e21ede4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usbmon(&(0x7f0000000680)='/dev/usbmon#\x00', 0x6, 0x80000) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000600)={@empty, @loopback}, &(0x7f0000000640)=0xc) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f00000020c0), 0xffffffffffffff3e) clock_getres(0x0, &(0x7f0000000400)) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0x0, 0x2}, 0x10) 03:33:53 executing program 7: r0 = userfaultfd(0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1ffffffffffd}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000820000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x880000}, 0x200000}) poll(&(0x7f0000000180), 0x202c, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00005c6000/0x1000)=nil, 0x1000}, 0x2}) 03:33:53 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) r2 = dup2(r1, r0) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x20, 0x0, 0x5}}, 0x14) getsockopt(r1, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x28) [ 282.552044] binder: release 19739:19745 transaction 301 out, still active [ 282.569577] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop6. [ 282.591226] binder_alloc: binder_alloc_mmap_handler: 19739 20001000-20004000 already mapped failed -16 [ 282.607283] binder: BINDER_SET_CONTEXT_MGR already set [ 282.613063] binder: 19739:19745 ioctl 40046207 0 returned -16 [ 282.652173] binder_alloc: 19739: binder_alloc_buf, no vma [ 282.658438] binder: 19739:19764 transaction failed 29189/-3, size 24-8 line 2967 [ 282.671718] binder: 19739:19745 Release 1 refcount change on invalid ref 1 ret -22 [ 282.681165] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop6. [ 282.694591] binder: send failed reply for transaction 301, target dead 03:33:54 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x290400, 0x18) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2) 03:33:54 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) bind$vsock_dgram(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) dup(r1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) connect$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000500)={0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[]}) 03:33:54 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x10) 03:33:54 executing program 4: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000200)=""/249, &(0x7f0000000080)=0xf9) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001280), 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r2) 03:33:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x20000000002283, &(0x7f0000000000)) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/66, 0x42}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)=""/255, 0xff}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000003c0)=""/42, 0x2a}], 0x7, 0x0) r2 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x7, 0x80100) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @ipv4={[], [], @rand_addr=0x6}, 0x2}, 0x1c) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000880)={0x7, 0xffffffff, 0x4, 0x9}, 0x10) 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x1000000, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) keyctl$unlink(0x9, r2, r3) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="240000005e0007031dfffd946f61830020200a00090003fcff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 282.790817] binder_alloc: binder_alloc_mmap_handler: 19784 20001000-20004000 already mapped failed -16 [ 282.791138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 282.806385] binder: BINDER_SET_CONTEXT_MGR already set [ 282.814214] binder_alloc: 19784: binder_alloc_buf, no vma [ 282.819806] binder: 19784:19794 transaction failed 29189/-3, size 24-8 line 2967 [ 282.825412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 282.833565] binder: 19784:19787 ioctl 40046207 0 returned -16 [ 282.846458] binder: 19784:19801 Release 1 refcount change on invalid ref 1 ret -22 [ 282.857597] binder: 19784:19802 ioctl c0306201 200003c0 returned -14 [ 282.893232] binder: send failed reply for transaction 306 to 19784:19787 [ 282.908856] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.281106] IPVS: length: 4096 != 8 03:33:54 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001180)='/dev/rfkill\x00', 0x50201, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x762a0a0aa0dffd7e, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = semget(0x0, 0x3, 0x48) semctl$SEM_STAT(r4, 0x7, 0x12, &(0x7f00000000c0)=""/118) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000000040)) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000180)=""/4096) 03:33:54 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r5 = gettid() fcntl$setown(r4, 0x8, r5) recvfrom(r4, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) 03:33:54 executing program 2: unshare(0x400) r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002540)={0xffffffff80000005}) epoll_wait(r1, &(0x7f0000002500)=[{}], 0x1, 0xfffffffffffffffe) 03:33:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xa912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 03:33:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x50442) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") listen(r0, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='A', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x3}}}, 0x90) 03:33:54 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_getattr(r0, &(0x7f0000000000), 0x30, 0x0) r3 = userfaultfd(0x0) creat(&(0x7f0000000d80)='./file1\x00', 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$KDADDIO(r1, 0x4b34, 0x400) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x4) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r2, r3) 03:33:54 executing program 4: socket$unix(0x1, 0x3, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xbbac176ec2201e20, 0x0) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x8001, 0x8, 0x0, 0xff, 0x9, 0x210}}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x7, 0xff, 0x8, 'queue1\x00', 0x1}) tkill(r1, 0xb) keyctl$session_to_parent(0x12) 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0xfdfdffff, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x42042, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000140)=[{0xfffffffffffff3ab, 0x6, 0xffffffffffffffff, 0x2, @tick=0x4, {0x1000, 0x7}, {0x7ff, 0x6}, @ext={0x1000, &(0x7f00000002c0)="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"}}, {0x80000001, 0x6, 0x5, 0x9, @time={0x0, 0x989680}, {0x80, 0xffff}, {0x9, 0xffff}, @time=@tick=0xbfa}, {0x3, 0x8, 0x6, 0x1ff, @time={r1, r2+30000000}, {0x400, 0x80}, {0x6, 0x5}, @queue={0x8, {0x7}}}, {0x6, 0x20, 0x7143, 0x7, @tick=0x100000001, {0x7, 0x7}, {0x3, 0x8}, @control={0x0, 0x8, 0x7fffffff}}], 0xc0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000000000000000008907800000000000000000000000000000000"], 0x0) dup3(r3, r4, 0x0) [ 283.356446] binder_alloc: binder_alloc_mmap_handler: 19818 20001000-20004000 already mapped failed -16 [ 283.371120] binder: BINDER_SET_CONTEXT_MGR already set [ 283.376638] binder: 19818:19825 ioctl 40046207 0 returned -16 [ 283.378367] binder_alloc: 19818: binder_alloc_buf, no vma [ 283.388201] binder: 19818:19829 transaction failed 29189/-3, size 24-8 line 2967 03:33:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet6(0xa, 0x2, 0x2) syz_mount_image$ceph(&(0x7f0000000500)='ceph\x00', &(0x7f0000000540)='./file0/file0\x00', 0x7a6, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000580)="90484f86e40c59dfe98d4bd2de5ada8013a47723d28b1dcece7d064cc2974f41ad1f8f3623502e13ad9210398f5e16c962", 0x31, 0x7f}, {&(0x7f00000005c0)="d4a41a6eabe861f5a54e5c17f2ec6c90d1685484e33982444c6e7973bb98df18824ac5d580495a9ecf92108d4a6471b832883d3eb2cb4b1f7fe3afe2b366098a19e1a92bea6804d6b8c91be96f5f04b8249d282ac58a455a0f5f9532f0e4f5826a31135d85f3c1a8a7df6150786e285d120f85fb02f554a3b0a5ee56cf6aab091d1d828a3e3d4fa7873bc0e5979f2d1c003b3cc4d62e62e29f7d8b89e74fc5c44137998c5538a011813104a196f5228e70dd1092d30fafea186e61d57a29ebcb718e21e6d9b17e4baacadb5f93d06b6e6196188dccd10e10d4cc97a53460dbd7f6bead6b", 0xe4, 0x8001}], 0x2, &(0x7f0000000700)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc4, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x28, 0x28, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x3, 0x19}], &(0x7f0000000140)=[0x30, 0x0, 0x30, 0x38, 0x18]}, 0x7}}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38, 0x28, &(0x7f0000000200)=[@flat={0x776a2a85, 0x100, r2, 0x2}, @fda={0x66646185, 0x6, 0x4, 0x21}], &(0x7f00000002c0)=[0x78, 0x28, 0x30, 0x38, 0x60]}, 0x2}}, @register_looper, @decrefs={0x40046307, 0x2}, @request_death={0x400c630e, 0x3}], 0x85, 0x0, &(0x7f0000000400)="4c33fb7279d6f2c7c6429eb52c68ce9b57b9167a7fd321d7234fbfb7996da8a1f28c27fa15792fc9abc762fe13e35376aa435c888f2502b45a91d7e108a3b4c8c9f961fda5dba1a3ba47deb5e082691c93e58793c9143a19f7a339bd1a37bfe3189258125ac214e457c185083800caf48c83daebde4fd73cd27bcd0cec1b9b1043ebc14528"}) 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0xfffffdfd, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) recvmmsg(r1, &(0x7f0000008c80)=[{{&(0x7f00000075c0)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000007bc0), 0x0, &(0x7f0000007c80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)='6', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) writev(r1, &(0x7f0000000100)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x163082, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) [ 283.403329] binder: 19818:19825 Release 1 refcount change on invalid ref 1 ret -22 [ 283.421204] binder: send failed reply for transaction 311 to 19818:19825 [ 283.430836] binder: undelivered TRANSACTION_ERROR: 29189 03:33:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000001e00fb034d564b000000000150f0f4bf53a9a2d9eff62fc4d85ca6947209aef0191b4332b7672579cdcfb3480642cfa86225da613acd4f9992ff0300432df9f7f3c951cc3dc8ee4a26a419186db070bfed122020e443aee02413eac1346fdbc100ab07456e93c68b332304b1aef858e77940f1a04c16421d2ffb0227d93d49119c3e30c569c1cc1d6b0205f54fe3691d3a1c8911fee99b8ae5c2cdcd049055c853066346c7644e9284e353baa9c33d"]) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) [ 283.477074] binder: BINDER_SET_CONTEXT_MGR already set [ 283.486827] binder: 19842:19844 transaction failed 29201/-22, size 0-0 line 2967 [ 283.493625] binder: 19849:19853 ioctl 40046207 0 returned -16 [ 283.509472] binder: 19842:19844 got reply transaction with no transaction stack [ 283.515988] binder: 19849:19853 Release 1 refcount change on invalid ref 1 ret -22 03:33:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000001f00)="42f7fcf7f52b931b1c04e314b70427981fa9bf6a0ae87b5867c8a3b2f3ebf7f11bb63c35dfba586c2c705f6485b79d5a9d9012687c2ddc4697f7cef8f3ffa1d0e530861e36547cbdd187ca573c4718e85e56f7e6a3ec8a04adf2657bd48a60216fd6ceef24da413243a80d5e994c60d7aaa66f4ea6d21c362461a14c7e71d92200bf2709c563a4f3c4620779d1a12f3a873c7accf5becc977ec3c3bff3457599bf6e5591e66912e75725b368e976340eada8e57167ceda391c2a57e8267770c2eb349f5f27d7f7719b638bf73a215a55159a0fd74bdc64fb046a43da927941f813c5f150252befdb236c8e7151ef89", 0xef) sendmmsg(r0, &(0x7f0000001e40)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0x7, @ipv4={[], [], @broadcast}, 0xffffffffffffffff}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000300)="23473839b7384095664c377dd6346baccd36d839416a2974e51770fa0eff2c5d48cf40f3fb861008f185d0a4fdf1924ed3e47b8e6777ac395c74b0366f20da5a161d2bca42fdb2d4b07959d686fce0fd467bb511e5b810daa6f950b5d9d449279320f53beed536820ada9a40379bf55c8b6f4601f6f30dfe1eb5ca8680be2dd202bd42d44691600481397880142b5466afa068f93e95f898a1cdd710a172716893d9ff54350eb0f11427e2fba5", 0xad}, {&(0x7f00000003c0)="ff2e3541853669c69df92a2c1f685e69682341c1bab85e2c294c02504907cf38c1167571145c6d13b2bd40bb61d3cd553818734e56caff3d3abb04b1ccd92fd175ed060e6dfc4a08ea6a49a814d43fdeacb9e6fc", 0x54}, {&(0x7f0000000440)="35bd533f1509d0137e368cc533113d7551754768fb7a892f1ee7276aa3240a9eb2343ca61b25f4f801fde79eea984aa1d4974ea9fea97e6ce8e72a20568e37443b96e562a4ce56de7da583fa321e8039750035505964db4b35e36d27bda55c9e1731209fc1ca9111c8f17ea60a59d111919bc68ca3", 0x75}, {&(0x7f0000000600)="f31d660422609ec9dbe9e0895dba3f29afb6ded6d86eac2423d0928696d0a44667f657e9ff716450745af540800204f47f3e6ae97956ba96f323e153b72b56ca7d5557b873eaac7b36d646f933be33c5e69bef0952899bee90b59519fc3a2b4e2686f86d7b8e65499a2f06b1588ff26def51db75ebc956863c4ff10bcde75473f9894a1b6454d437399a3044a98d934069b6d2e0ba358497de5f35cc864636c7a566045b1f431527cbde2f28119f7ec65f79995083fe78c1d7719db49a53d51d59ff23026538d9f308c0304f137511", 0xcf}, {&(0x7f00000000c0)="2dd76067601744927cafebe203f5dc465c2ac8ca326cd6b87a0b678288d63a0fb6e2b1a400f6e7c7c88c173710bcd990", 0x30}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="aab451f6ea6fcfd40db82dcad0a731a1d2fd2f1919fc557df341c04000ecbd3e7739bb66a8d92ce6c20b393cdda26947cde4ac72b4b93ba1ca8b78847b2e6485856043bed67e4ef2d78af62ec5e307173c929e04b1a45ee5c74d61ef8760df8e44441c263af9c737b346ac205f414e8ede43331ba9096927bc8230f7104914c5b848ad3ff8e28df0acf04ca1202a36d1571cef8f3870cfdcdeea1f32ad5bcae007598b", 0xa3}, {&(0x7f0000000140)="62a779e576858855317e850731b37e9d75cf72822a4ea5b11ae2570b", 0x1c}], 0x8, &(0x7f0000001840)=[{0xd0, 0x19f, 0x7fff, "2679933197cb14df66ba216462de54ac762a189832f3a578f74ed2532a799496e88677ac428e41853c8501d6b312121d1fe42217f27a03d9ceec5160492ed7bfe2efda3c40209129c19e774e40afd55af08021facc3d8b8ce6cf12469d04dca97c424f70b03102ac3a08a25dda681954dd63b8c0db4a2a6f6cb2813b067c66aaa465f31f33022c7bed22d91c0615dc3c5602de36c72afee338212f3e431741aab6c75573f296e2a71cef345a80a1c1d7be36383a7abe3e6e504302f9a1cf"}, {0x38, 0x117, 0x7fff, "3db62bc532b4931c0e263f9224f2db4494273d816d06753d4010fb7e1b02abe1a0"}, {0xe8, 0x117, 0x9, "9eb71082dc19d26a0620f37020f42cd31ca10a5967e2f89c3769dc35612a366dff21d83f21ecfe41912521748a01e37fde6b9665b2adde75a9f0fcfde9ce3775a55cef0f15c396b1c332bfc23c3b0f71ae0f55fa95efb9314e43a48154279132294e5558fa2d0577b0a37b594ff1f7459c05ebc47753f6bc28facd9115a8ffddfe7b3e3ef8a9a851707aebf90740b3ca0ddfb030b7a08ed4c2f441ba5946beca0bbdd9120c5670ff33b3bb6cbe24380dec7cbb51fd115ea18259b5a11be3fa929ea14d866e4973ef74db444ab7f3cb71667f27302b"}, {0x38, 0x29, 0x2, "28215dd0553076d71378e35b882f1a85d26a88d94363bc67ceacf187bd1cde5c5039c0e33e7fc3"}, {0x70, 0x113, 0x10001, "2f1c11b4f8f6cce3bdc215570aeef92649f61b686c1447c65493d89237df2831ca860861e80a0b98fa135715fd6373c819314a53441c73264c8f805257fc686633c6446f99fe524897aacd1f903be013210e83eac9195883e8"}], 0x298, 0xc0c0}, 0x400}, {{&(0x7f0000001b00)=@generic={0xf, "ce9baad591118d5c5eddccc043ea7ec4c8f49214143bb76f12a67bca15e3856b7cf8bd0c0aba9234028d776bcb703f47528e377eabf15964ce4061ce52b45b61dc2485586c07baa163d10233cbbe06b4b769750777e2e5d1d491d2651928ae85382facda2e3dfe9a27580eac9f3d76c794a95e58c9eaab338f0ab92f5964"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001b80)="ac5038dcf2fb97a275b8fd9b975807aa697988f6b94b8fc996f3a1e6b80d71dc01e31f7848a524eb7babae857a3b87597985b3d6cc0666b3388d7d9f281b0617151502f69e6ed8e130a13d2f1c12f2a557651e09687e447f05314b908c6f733cc47ee9c09a9547f619aaba54a64eb9ae1f7d48176c47c4eecd65d7c3cc19d4f5341ca2b6067b4c2f8b737493fbb4252106104f328020a31ff48e90f203acbb00d7654024", 0xa4}, {&(0x7f0000000200)="4c5fcbd8c90eba65da920d2be75b60138d610704280f46c98e3949d3d38396b6d0b7c5fc89c91f46700adb0284d3ab45b34b0c2373ae", 0x36}], 0x2, &(0x7f0000001c40)=[{0x70, 0x10b, 0x6d6, "5ae208cbf6f9b79707500bf0975742605baa35ecccb74bd5843ca845eeac3c880f05aa7c9e3fefd92a7869e116642cd8e0e20ffb76dbdf071dea776e0f7b1923f0031a449a280b41d518fa556253be2669d6c4b673fe571d5f"}, {0x88, 0x0, 0xf95a, "663cb781ad57a4507b57c876396a33ab4f8278c1ad6191ba29415d702c36521b88d7b9c0de3d118217cf9c6ca34c86b1b427409e124bf62f4ee2ce6413e74c491a062acf947e7adfb890072201b5a158684c9ae753696463288f454b4365cdf6f57c047d575be2b6a1e2663d4eeadc03bfef"}, {0x30, 0x11b, 0x6, "2bfc9443ea1d1963ce8268fb410572140cb4b193966107a49118"}, {0xd8, 0x19f, 0xff, "5e01890304722a3b5298680322b39fa2fcc3234a623c2ee90be8a6bdfef0e371e1cf02f6abf693ccdc3be34930ebde959978707e52c1edeebe0841749441d2753c49f0755649406f3f52640ff3fc9d306a6d15cbc842c8933454839ffabfb9285485732d4e58384e24220fa2ec13afd021a3e3bca109cd078a435532a1e24fce4c2e197193d17cdeac5ae9bf08910a23c61dd23988812ea6524bd874ce77fed57b29fc4f40b87402b1c51fb70ed4a3fac7581ac061d0cbdf66599baff3b4ffb98807e3b6b7"}], 0x200, 0xc001}, 0x100}], 0x2, 0x40) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c", 0xca, 0x10000}], 0x0, &(0x7f0000000240)) [ 283.517031] binder: 19842:19844 transaction failed 29201/-71, size 40-40 line 2759 [ 283.544241] binder_alloc: binder_alloc_mmap_handler: 19849 20001000-20004000 already mapped failed -16 [ 283.566646] binder: BINDER_SET_CONTEXT_MGR already set [ 283.573886] binder: 19849:19853 ioctl 40046207 0 returned -16 [ 283.577264] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 28 transid 756082810144684242 /dev/loop2 [ 283.580807] binder: 19849:19860 Release 1 refcount change on invalid ref 1 ret -22 [ 283.602744] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 283.609960] BTRFS error (device loop2): superblock checksum mismatch [ 283.616820] binder_alloc: binder_alloc_mmap_handler: 19842 20001000-20004000 already mapped failed -16 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0xfdfdffff00000000, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 283.621110] binder: BINDER_SET_CONTEXT_MGR already set [ 283.635595] binder: release 19849:19860 transaction 321 out, still active [ 283.639064] binder: 19842:19844 ioctl 40046207 0 returned -16 [ 283.649430] binder: release 19849:19853 transaction 318 out, still active [ 283.667757] BTRFS error (device loop2): open_ctree failed 03:33:54 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r5 = gettid() fcntl$setown(r4, 0x8, r5) recvfrom(r4, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) [ 283.679349] binder_alloc: 19842: binder_alloc_buf, no vma [ 283.685054] binder: 19842:19867 transaction failed 29189/-3, size 0-0 line 2967 [ 283.701824] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 283.702194] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.709121] BTRFS error (device loop2): superblock checksum mismatch 03:33:55 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000000c000/0x9000)=nil, 0x9000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getpid() ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000002c0)='team_slave_0\x00') ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @remote}}) close(0xffffffffffffffff) 03:33:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x4a) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000380)={@remote}, 0x14) r1 = socket(0xa, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) fadvise64(r0, 0x0, 0x100, 0x4) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) [ 283.734283] binder: send failed reply for transaction 318, target dead [ 283.741092] binder: send failed reply for transaction 321, target dead [ 283.769879] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.772412] binder_alloc: binder_alloc_mmap_handler: 19879 20001000-20004000 already mapped failed -16 [ 283.776043] BTRFS error (device loop2): open_ctree failed [ 283.794674] binder: BINDER_SET_CONTEXT_MGR already set [ 283.800290] binder: 19879:19880 ioctl 40046207 0 returned -16 [ 283.806413] binder_alloc: 19879: binder_alloc_buf, no vma [ 283.812198] binder: 19879:19890 transaction failed 29189/-3, size 24-8 line 2967 [ 283.826104] binder: 19879:19880 Release 1 refcount change on invalid ref 1 ret -22 03:33:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = getpgid(0x0) capset(&(0x7f0000000040)={0xb91836e8718775c6, r1}, &(0x7f0000000080)={0x8001, 0x6, 0x100, 0x7ff, 0x4, 0x3}) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004a5000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1, 0x17}]}, &(0x7f0000000000)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="18000008000000000000000000000000620a50ff0000000000001200230000009500000000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f0000d35000)=""/4096}, 0x48) [ 283.840677] binder: send failed reply for transaction 326 to 19879:19880 [ 283.860299] binder: undelivered TRANSACTION_ERROR: 29189 03:33:55 executing program 3: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x4000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='vboxnet1\'\'posix_acl_accessmd5sum$!nodev/ppp0![!!proc\x00', 0x25, 0x0) ioctl(r1, 0xc2604111, &(0x7f0000000040)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) 03:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x100000000000000, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:55 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = gettid() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000380)={&(0x7f0000000280)=""/209, 0xd1}) pselect6(0x40, &(0x7f0000000000)={0x0, 0xdf, 0x2, 0x9, 0x1, 0x2, 0x6, 0x8}, &(0x7f0000000040)={0x2, 0x40, 0x40, 0x2d, 0x0, 0x3, 0xfff, 0xf2e6}, &(0x7f0000000080)={0x7, 0x6a, 0xffff, 0x80000000, 0x6, 0x3, 0x81, 0x4}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={0xfffffffffffff291}, 0x8}) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r4 = memfd_create(&(0x7f0000000200)='\x00', 0x3) openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f0000005700)=@sco, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/199, 0xc7}}], 0x1, 0x2020, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000003c0)={0x2000}) 03:33:55 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r5 = gettid() fcntl$setown(r4, 0x8, r5) recvfrom(r4, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) 03:33:55 executing program 2: creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) iopl(0xffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=@known='security.ima\x00', &(0x7f00000000c0)='security.', 0x9, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 03:33:55 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xfffffffffffffffd, 0x240) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'bcsh0\x00', 0x1}, 0x18) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x400) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) clock_settime(0xffc99a3b, &(0x7f0000000540)) 03:33:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000010001900000007000000068100022b0506000100010100ff3ffe58", 0x1f}], 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe9a, 0x10000) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x7, 0x9, 0x8ea, 0x100000001}]}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x10000, 0x3, 0x8, 0x7, 0x4, 0x2, 0x1, 0x10001, 0x5, 0x401, 0x973, 0x5}) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x2, {{0x1000, 0x40, 0x80000003, 0xf90, 0x40, 0x767ff560, 0x7f, 0xffff}}}, 0x3be) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x3}}, 0x18) [ 284.311087] binder_alloc: binder_alloc_mmap_handler: 19914 20001000-20004000 already mapped failed -16 [ 284.325200] binder: BINDER_SET_CONTEXT_MGR already set [ 284.325215] binder_alloc: 19914: binder_alloc_buf, no vma [ 284.330598] binder: 19914:19916 ioctl 40046207 0 returned -16 [ 284.336136] binder: 19914:19922 transaction failed 29189/-3, size 24-8 line 2967 03:33:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) [ 284.367395] binder: 19914:19922 Release 1 refcount change on invalid ref 1 ret -22 [ 284.383891] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 284.402749] binder: send failed reply for transaction 331 to 19914:19916 [ 284.408322] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 284.438822] binder: undelivered TRANSACTION_ERROR: 29189 03:33:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x0, 0x1}}, 0x20) readv(r1, &(0x7f0000001540)=[{&(0x7f0000001480)=""/154, 0x30}], 0x1) 03:33:55 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x804, 0x8000000100010000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0xf9, 0xfffffffffffffffb, 0x6, 0xffffffff80000001}) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x80) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000080)=0x1f) setsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000000)=0x9, 0x4) 03:33:55 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x7) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0xe, 0xffffffff00000000, 0x4}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x4, 0x70, 0x9, 0xda4, 0x3f, 0x7, 0x0, 0x216, 0x8000, 0x1, 0x1, 0x9, 0x76, 0xff, 0x10000, 0x6, 0xb8ef, 0x8001, 0x1, 0x1ff, 0x10000, 0x7, 0x1ff, 0x1, 0x101, 0x3, 0x4, 0x4, 0x1, 0x8, 0x5, 0xe71, 0xfffffffffffffffd, 0x101, 0x800, 0x4933, 0x65cc, 0x10000, 0x0, 0x8, 0x4, @perf_config_ext={0x7fff, 0x8}, 0x20004, 0x4, 0x1, 0x5, 0x4, 0x3f, 0x2}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xc3, "4e65bfe354f3a291b567ba89c32bd5d225ed83c01eebaa3fadaf78561e5bfb698066110a3fedafc41314da595b8856bf8164d827f80aa823997183a438d3ed77c05047b5d2e65667994a9e6335d3f904756ed236a169a3f3ecf0a4f69d6bc75e8397c27a673a633d8a5bbac1e89db0a5aa6043c1584ee6382fd6b2c05f727d51755930c36a6398bd59151e6487494940bd76db8b5721cee35f7b78946fe3ded21c2f2e64140d87e388982e9fb04f1dd087a860e28c01816e1cfa070913f77ee209a599"}, &(0x7f0000000200)=0xcb) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r3, 0x4, 0x6d, "096cc099801cb74e395533fa430772e1522552643d8807d721ce3793c03bfcfbdec74ff2082fed4eb3af22cd31da281dd5d37b3e1434af804755141710de1f4b2eb600e2aeb39143531dd30b83c68171b539bd376a4afaf7b687ecd4154cbb039bd1c4f80cb4437f8ba7b6efd0"}, 0x75) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x857}, 0x2c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x3c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x400c630f}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2c8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000440)={0x43, 0x9, 0x2, {0x200, 0x0, 0x3, 0x9, 0x0, 0x57, 0x4, 0x7, 0xc7b4}}, 0x43) sendto$inet6(r1, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 284.708089] binder: 19954:19957 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 284.715181] binder: 19954:19957 unknown command 0 [ 284.726227] binder: 19954:19957 ioctl c0306201 200003c0 returned -22 [ 284.748292] binder_alloc: binder_alloc_mmap_handler: 19954 20001000-20004000 already mapped failed -16 [ 284.763747] binder: BINDER_SET_CONTEXT_MGR already set [ 284.776810] binder: 19954:19957 ioctl 40046207 0 returned -16 [ 284.783600] binder_alloc: 19954: binder_alloc_buf, no vma [ 284.789242] binder: 19954:19975 transaction failed 29189/-3, size 24-8 line 2967 03:33:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x400, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000540)) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/37, 0x25}], 0x1, 0x0, 0x0, 0x8}, 0x2}, {{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/107, 0x6b}], 0x3, &(0x7f00000003c0)=""/114, 0x72, 0x8001}, 0x6}], 0x2, 0x40000122, &(0x7f00000004c0)={0x77359400}) sendto$inet6(r0, &(0x7f0000000180)="020300000700000000000000fff5", 0xe, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x2000000000d, @mcast2}, 0x1c) 03:33:56 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r5 = gettid() fcntl$setown(r4, 0x8, r5) recvfrom(r4, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) 03:33:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x80000000}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)=""/89) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x100, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x10) socket$netlink(0x10, 0x3, 0x1f) 03:33:56 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x52}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet(0x2, 0x80b, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'tunl0\x00', 0x2}, 0x18) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000300)="2e36f2ad0f01c866b9800000c00f326635010000000f303666839ad1d3cc0fde0965f20f1022baf80c66b8c6bb4d8366efbafc0cec66b8355900000f23c00f21f86635030001000f23f80fc72e0000ba2000b84e6cef", 0x56}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:56 executing program 6: r0 = socket(0x2000000011, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c) 03:33:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth0_to_bond\x00', @remote}) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x4008000, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) close(r0) [ 284.804117] binder: 19954:19957 Release 1 refcount change on invalid ref 1 ret -22 [ 284.811963] binder: 19954:19969 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 284.819067] binder: 19954:19969 unknown command 0 [ 284.824190] binder: 19954:19969 ioctl c0306201 200003c0 returned -22 [ 284.841164] binder: send failed reply for transaction 336 to 19954:19957 03:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40486312}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:56 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00004c2ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00007e5000)=0x7fe, 0x7c) r1 = dup2(r0, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x99, 0xdb, &(0x7f00000002c0)="7c429a8ba5e15c387aace906f85d9850337db3d6adaae39292a4ad577cf845785545084db294023832f89677d62c4d99a3f6f606aba1ffe9ca05a8b419e4fcb8313cf3195e3ce80b2249ab5684dafd4ae5596d47fac461a3e39934e407d30c6f09cd4986ebd98f5415032c7b5cd388d2eeb01772b36fc417f542422bc011a1068817c1a2adbf1f1dafd43fb32df2808715cc7e7b3ed4aa42ea", &(0x7f0000000500)=""/219}, 0x28) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3, 0x7e}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000200)="2d46279a7e672e5dbab28e3c928387d6d6857f5d263fa50fd92a46ea6ebf6423e8422a80406edcd355c89c7416549c3bbe41f004617e37e82d0d5c8958bd475a4bc62267fe4fcb74c43b988343682fc4a5392dbb8892f7f0ebe74f4c5afdd20f5cdcc3c9641289d72ba8c88e0e294abb3f53cd1f220cacce60146919fe4182a7858bdf85b78c8b7e8e32ea70b5a6696ebe40094dab4b8024", 0x98) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/74, 0x4a}, 0x2000) [ 284.865868] binder: undelivered TRANSACTION_ERROR: 29189 03:33:56 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) fgetxattr(r0, &(0x7f0000000600)=@known='system.sockprotoname\x00', &(0x7f0000000640)=""/195, 0xc3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580), 0x13f, 0x8}}, 0x20) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{}, {}]}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) truncate(&(0x7f00000008c0)='./file0\x00', 0x1) mount(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='ntfs\x00', 0x0, &(0x7f0000000800)="ad2ae11f3d406f0e609231a3ce14505a559f862c8634c50bfd983ac93d7264921104c157665414b3d29201734986356ca4d7523d5f7e717833c7420970371a5630e250ae3cdbd71e5aa690eb660b33d612722d5df416126f08ee0f03dfc22db09f8ffbfe54c059983b209caad0b374ef852f08a1b17aaf1f5d1bf8953301b9ab56e60ae0d7524b11c042ab3e9ff68b2dd11aab3e0b54eb4cc5165aae0c02add52c7ad83425c6297336596342205a") perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) 03:33:56 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) r2 = getgid() mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x800, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xffffffffffffffc1}}, {@max_read={'max_read', 0x3d, 0x8}}]}}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x7b9, &(0x7f0000000040)) 03:33:56 executing program 6: r0 = socket(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019", 0x9}], 0x0, &(0x7f0000000240)=ANY=[]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setregid(0x0, r2) setreuid(0x0, r1) setregid(r2, r2) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000001fe8)={0x20000fffffffc, 0xffffffffffffffff}) setgroups(0x0, &(0x7f0000000000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 03:33:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x100) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="d6", 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r3, 0xfff}, 0x8) write(r2, &(0x7f0000000140), 0xff4b) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) connect$can_bcm(r2, &(0x7f00000002c0)={0x1d, r4}, 0x10) [ 284.975282] binder: 20000:20008 got reply transaction with bad transaction stack, transaction 341 has target 20000:0 [ 284.986100] binder: 20000:20008 transaction failed 29201/-71, size 0-0 line 2774 [ 284.999936] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:56 executing program 4: r0 = getpid() mkdir(&(0x7f0000000340)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000000c0)='./control/file0\x00', 0x100) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r2, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8001) fchmod(r2, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20}, 0x20) close(r1) 03:33:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(anubis)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe00", 0x20) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x8) recvmmsg(r1, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=""/234, 0xea}}, {{&(0x7f0000000c00)=@pppol2tpv3, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/201, 0xc9}], 0x1, &(0x7f0000001140)=""/8, 0x8}}], 0x2, 0x0, &(0x7f0000001180)={0x77359400}) recvmmsg(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=""/224, 0xe0, 0x2}, 0x7ff}, {{&(0x7f00000002c0)=@ax25, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000440)=""/213, 0xd5, 0x10001}, 0x3}, {{&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000740)=""/159, 0x9f}, {&(0x7f0000000800)=""/110, 0x6e}, {&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f0000000880)=""/204, 0xcc}], 0x5, &(0x7f0000000a00), 0x0, 0x6}, 0x100000000}, {{&(0x7f0000000a40)=@generic, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/84, 0x54}, {&(0x7f0000000b40)=""/13, 0xd}, {&(0x7f0000000b80)=""/66, 0x42}], 0x3, &(0x7f0000000cc0)=""/195, 0xc3, 0x3}, 0x7936b9c4}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000e40)=""/3, 0x3}, {&(0x7f0000000e80)=""/220, 0xdc}, {&(0x7f0000000f80)=""/1, 0x1}, {&(0x7f00000011c0)=""/132, 0x84}, {&(0x7f0000001280)=""/195, 0xc3}, {&(0x7f0000001100)=""/9, 0x9}, {&(0x7f0000001380)=""/57, 0x39}], 0x7, &(0x7f0000001440)=""/40, 0x28, 0x4}, 0xbf}], 0x5, 0x40000000, &(0x7f00000015c0)) 03:33:56 executing program 7: r0 = getpid() r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x4001) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x4000)=nil, 0x2000}) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) accept$unix(r3, &(0x7f0000000180), &(0x7f0000000240)=0x6e) r4 = userfaultfd(0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x3, 0x79, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f00000003c0)=""/121}, &(0x7f00000004c0)=0x78) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$sndseq(r5, &(0x7f0000011fd2), 0xffffffee) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="2d1c89fb8ca8f7cd6ecfe5489d47c59632f6c4a81afcb97dcd1af34cb25292612104b3e248a8ca3fdcb80c077170f6393a0153e867b39b630565aecada18ef06951e64bc299f6f1e3ddbf6f2dd42a23746c15f7c609cebe457bb9e59e37639501291b6728536af84d8bc56a50577fc3e7e649ab377"], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000140)={0x4, 0x8}, 0x10) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r3, r4) [ 285.032220] binder_alloc: binder_alloc_mmap_handler: 20000 20001000-20004000 already mapped failed -16 [ 285.052105] binder: BINDER_SET_CONTEXT_MGR already set [ 285.057997] binder: 20000:20008 ioctl 40046207 0 returned -16 03:33:56 executing program 6: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[{0x0, 0xe521}, {0x2, 0x3}, {0xa, 0xcd0b}, {0x4, 0x8}, {0x8, 0xf696}], 0x5) r1 = socket$kcm(0xa, 0x3, 0x11) r2 = socket$inet6(0xa, 0x4000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0xc074510c, &(0x7f0000a07fff)) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000280), 0x2e2) 03:33:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)}, 0x1) [ 285.097100] binder_alloc: 20000: binder_alloc_buf, no vma [ 285.102754] binder: 20000:20034 transaction failed 29189/-3, size 24-8 line 2967 [ 285.124555] binder: 20000:20008 Release 1 refcount change on invalid ref 1 ret -22 [ 285.132421] binder: 20000:20020 got reply transaction with no transaction stack [ 285.139942] binder: 20000:20020 transaction failed 29201/-71, size 0-0 line 2759 [ 285.169545] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.178762] binder: send failed reply for transaction 341 to 20000:20008 03:33:56 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r5 = gettid() fcntl$setown(r4, 0x8, r5) 03:33:56 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0xc00) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000fe04000000fb5cd4e3449c7902800000720a00ffa439f25e985ada0386d173e09e1174401279e70c5a26ccb221cfd7ef36e592a89c2f925d0d435ff49bf37309597c47ceb658d86e96a6c407183c92e89dfb923021f2ad331bcf902c13c127d3684bdf2674ba8e4b021ea0ffef34ff16dae07f5f52095b23a7de8bf857de128b3ec7a1a5f32401dc40999ce0efebff89e9ef766774ead45ecc64956a60efd3589225"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xffffffcd}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 03:33:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)='::2.le:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974592e6d64377d54d60e00"], &(0x7f0000000080)='ceph\x00', 0x5, 0x2) 03:33:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100), &(0x7f0000000080)=0xfffffef5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x6c402) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000400)=0x4, 0x4) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x2, 0xfff, 0x100, 0x7, 0x100000001, 0xff, 0x8, 0x6, 0x4, 0x1, 0x8, 0x8b7, 0x128}, {0x0, 0x0, 0xa, 0x8, 0xff, 0x800, 0x10001, 0x800, 0x3ff, 0x2e17, 0x1000, 0x3}, {0x5, 0x3f, 0x80, 0x0, 0x6, 0x2, 0x37, 0x4, 0x2, 0x9, 0x3, 0x9}], 0x5}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0xe, 0x7, @thr={&(0x7f0000000140)="468961665d824a5ac0060dc16a4066d6c54ae3179211c1d9445c9e77ad9abd58073c8a15fe7092d2c2dfa14c361097578ae65d155baeea0fca65563a78770051c210c819ae1b1085dbc814289ed638d78024f0be", &(0x7f00000001c0)="00effc82f69d15c75a266011fdaf3982cef189b85078c2b7641cd764ff57c43f4c5dc9098ca71db9ec1662f6d46cf5db581a49cac1be7b9b1f4edcac4b943689ce6851e39bc054fa89ffeacd8512f43b09e34416ff81d167764b5412633df96c476d82e30015735e4aa215acfce320e27958f2a51e1051408954573f714fabfa9fda6e90e4b9243f717e1ff76bc5076b1e7f2e95216182460f0e1f4e77503ecfd127f5b58511dd309d971a015b002e069a1cfccea89c78eca2"}}, &(0x7f00000002c0)=0x0) timer_gettime(r4, &(0x7f0000000300)) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xb7891e60387e7f1f) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x2217) 03:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x630b}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:56 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) syz_read_part_table(0x40000000000000, 0x1, &(0x7f0000002600)=[{&(0x7f0000001600)="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", 0xdf7, 0x9}]) r0 = creat(&(0x7f0000000940)='./file0\x00', 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="14b80b7c3f6067944c5900df763573d135402390936982239fd4485d4a4c8dd2c58cf37a35d2470f7cfdf8d70836c9f50ec26ab9e7411091afc3cdefd80177366a665e8e461f49218d", 0x49}, {&(0x7f0000000000)='S', 0x1}, {&(0x7f00000001c0)="9a26deb6a1cd5ea6838588710193a3a4908f363f900068ab9027c1a581f8a86cfde20033c4cfc9a18fbddbba3e399f4990938d1c6d83287972092ca61e3647e289d2cecfafd33bc6585d634e557e81e2898b9000a7", 0x55}, {&(0x7f0000000240)="dd482812f379e1f2b35e98aa26ecaba5e70c76c72cb514940b9a24d45b471e32c41fc7bce4e9761450f9d490908f825cef1ef5bb0395d0a3479391dc05272cb2bb1151bc0effc48d70e4ec5176ffbcdc158ac2ada5101df3401e99d0691ef032e323539cb9ebc90d3f8b72e89be491b0056b652d87223e52dac884d5f69889e5a81c55b6a04791e37fb931aa17c953f8a64a7ad6be07690f238cf9d75f70a794be606a373faf33fb0bd88aa998c3", 0xae}, {&(0x7f0000000300)="598e510f9d01e116e3053ab6dab5f68db73fbfa5241cd147179415be3ee1427b17caed42ba3bb4f9621753c80b139b2215b34f0087f9de302b7762ae385b79d813c5372087542b38f4b7b54da604d59965398fb6c69076d8addb1a4430336d96920e3ed9acfc40602f9d09a33708b077b808022d0d6fc606697a3d6bf14fb6c276a5f03bda56d5b0ff8d37b72f39443515bf67f543996ad18e6b169891b99b3bd653b666", 0xa4}], 0x5, &(0x7f0000000440)=[{0x100, 0x0, 0xb, "306cb8e64a804371cf7810780a85ed4e6b1f34f12bf81c50c2b036924ea682101331d927d774774b7b0b62d8ae750de67fa0a17a6a50911c30845aca90413dcbb07db7b80335dafbc915f88a52e4bc88c9e7b232389e641855ed42b41402b30ceedaab107c781689b43b7bd96b495f10dbde94ee82661ed4ea59a2b2b91614c22647eb3a9244eac357261533c4fbdc32a66213cd77d1e0a861e2c80cc7a2982134533522da0b80d31b966cee73637b1deac101b75a341b683d125ad4319b1826b9d0e45ba4a5ac5d119d3c6806d1520676e3bc6c470e0f97fc075ad975772f3480d1965a109eb739d25b076702740a8e"}, {0x110, 0x103, 0xf4, "66aadfe190663091b94b470546469566f7986dfbde8cdd96a4d358973c4a0d1627031e68404816245341c514aa95a006cf346ef87bbc0bdc5710890560301f383bafa03ef7c1760982fa5a876c56c78d5d23c8d5f776f895997e167a85c8dfdb65a09efc46def08a3e882746c5071e711b62ce4ecf52de0e8a32136350f17c65927fdb8065e6d80694716b05b1bd5e3dfd05f2a4a16777bd2f8585da59ba3c9ddea2c20172dcb8330a7a8b5f6bfb267343f03703f1ef860ed17121e4011bbbdc90e61d89a14caf7efb503c16acb3e214fb8a1f0f9e08c4b1daa8500329e60556766bb54b773987f9ab40b5524d8af46ba058eb8548936fee1f020c3c9bda"}, {0x40, 0x110, 0x9, "755e2c4aad65fa88c3d812a72042bf033934f053f87cff4f97940507330147061b0195230f59b3effe"}, {0xf0, 0x1, 0x3, "827a0a4abf5407fb12cdd9c90a272175e9ca25413684d69e3b4d5310f0d09b64dc9ab9105d873345446d4919694571a612899c67d333fe0f56cc971997a0a1c0d0d6cdc8d51b4f4a433a43c61acdea7063e0887037701c070ce92c1182175c615f01ad437d6ddcf5b509287e9c308cb5b9d76a96e283244f10db61668a32a675bf8e8e1277e9011f536daf197aa3c289abdc6a4411f699717e6884a776370920ad09522a6fda2aff361c63fa6160eac70d6d4ce05b8c686944e2872b209a69c2b70758ea6fbe48a1c233f7061cae065a0e756fb8b9c4061ee0437bdc"}, {0x68, 0x13b, 0x0, "a733b74dcca0d1a1769df7244a83753254004c164399440e75da0a9a3e8d33c094ab11f8ab511332554385ef15d83177bd45d4e82624242238b5b9329fc535ea807e1dddba40818ae6ace2e000a5c47fccb33f4bd5f7ffea"}, {0xf8, 0x1af, 0x40, "86e4816368dbea84b93bb6ffd2f725fafa6841b99070accca74ae1ed888c9a57bbe76e030b0acbffbd8b009f7732c90bcc335c3276bde8c5ed0d223f5615702e9d05539630e80563eda23d02f8882ef49c0e2d5bc07788184cfece6b807dcc7a8cb3bb0f89acd730f2dabeca721e8f6f4ce8c7061df96a0b2b455563e453a5e44d17735311e30239d8c624e68d2a80777bf3768a739654ec3b69e5c78b81018c0c480a98a8a0aee3c74355559151ab49c7a0200b50daec9e0a4cc34fca92ef4e2b2c582533f8d41980305a8c1b3f3234628020c959f5596004066eb1509a824f8262"}], 0x4a0, 0x4040000}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x8001, 0x3}, {0x9}, {0x9, 0x6, 0x0, 0x80000000}]}) creat(&(0x7f0000000100)='./file0\x00', 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) [ 285.211519] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.217087] binder: undelivered TRANSACTION_ERROR: 29189 03:33:56 executing program 2: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) epoll_create1(0x0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x20000014) 03:33:56 executing program 1: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaadf6, &(0x7f0000000500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mft_zone_multiplier=0x0000000000000000,umask=00000000000000000000000,errors=continue,errors=recover,nls=macgaelic,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030302c646d61736b3c30303030303030303030303030303030303030303030302c7569643da96becdd880f164254e4fb3d4587e3c492b6541b94eb82f3fe08d8e6a7e5675979819201fa9cbcce1b5da50a338fdb5ea6e71201887dbfa6b76f1886e1358559bc376eb86f33e18a1bdbf2561e3471c00cfbc47abb42a48d727ecf37b6e3665599cf7faa92f5465c95dbd2b62321b41a2c723461b6402fd4c8ef9b9dae06da7a5cdb4c757b97d3b07111dd33feebcac16db64ce620ac8dfc6553c6a5b2ceec5907ca3663f3", @ANYRESHEX=0x0, @ANYBLOB=',nls=iso8859-7,\x00']) [ 285.279778] libceph: parse_ips bad ip '::2.le' [ 285.289601] libceph: parse_ips bad ip '::2.le' [ 285.295099] binder: 20066:20070 ERROR: BC_REGISTER_LOOPER called without request [ 285.297465] loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 285.302767] binder: 20066:20070 unknown command 0 [ 285.309233] loop3: partition table partially beyond EOD, truncated 03:33:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000d32000), 0x4) [ 285.343490] binder: 20066:20070 ioctl c0306201 200003c0 returned -22 [ 285.357227] binder_alloc: binder_alloc_mmap_handler: 20066 20001000-20004000 already mapped failed -16 [ 285.376391] loop3: p1 size 2860017751 extends beyond EOD, truncated [ 285.379437] binder: BINDER_SET_CONTEXT_MGR already set 03:33:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) dup3(r1, r0, 0x0) semget(0x0, 0x7, 0x80) [ 285.383737] loop3: p2 start 619790148 is beyond EOD, truncated [ 285.388793] binder_alloc: 20066: binder_alloc_buf, no vma [ 285.399975] binder: 20066:20082 transaction failed 29189/-3, size 24-8 line 2967 [ 285.413731] binder: 20066:20070 ioctl 40046207 0 returned -16 [ 285.426944] binder: 20066:20088 Release 1 refcount change on invalid ref 1 ret -22 [ 285.431678] ntfs: (device loop1): parse_options(): Unrecognized mount option dmask<00000000000000000000000. [ 285.440612] binder: 20066:20089 ERROR: BC_REGISTER_LOOPER called without request [ 285.444836] ntfs: (device loop1): parse_options(): Invalid uid option argument: k݈BT=EĒT [ 285.452421] binder: 20066:20089 unknown command 0 [ 285.468777] loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 285.475363] loop3: partition table partially beyond EOD, truncated [ 285.492209] serio: Serial port pts0 [ 285.493216] loop3: p1 size 2860017751 extends beyond EOD, truncated [ 285.501308] ntfs: (device loop1): parse_options(): Unrecognized mount option dmask<00000000000000000000000. [ 285.512323] ntfs: (device loop1): parse_options(): Invalid uid option argument: k݈BT=EĒT [ 285.522451] loop3: p2 start 619790148 is beyond EOD, truncated 03:33:56 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x26, "e383382044a43e99f7f4a4ed316f9449810be589945fd8418c28b3d5031df08e403b44240781"}, &(0x7f0000000140)=0x2e) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x8}, &(0x7f0000000180), 0x653eff22c8c28ec2) [ 285.541313] binder: 20066:20089 ioctl c0306201 200003c0 returned -22 [ 285.564907] binder: send failed reply for transaction 348 to 20066:20070 [ 285.572442] binder: undelivered TRANSACTION_ERROR: 29189 03:33:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0xa0030, r2, 0x0) r4 = mmap$binder(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x28, 0x48, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2, 0x9}], &(0x7f0000000080)=[0x38, 0x48, 0x20, 0x20, 0x38, 0x28, 0x0, 0x38, 0x58]}}, @free_buffer={0x40086303, r3}, @dead_binder_done={0x40086310, 0x3}, @enter_looper, @increfs_done={0x40106308, r4, 0x1}], 0xa7, 0x0, &(0x7f0000000380)="62e7eaca45cf4966c414b1a7b0f8761f72c876cc1718b54e0c859e47468b37411a32cdf9d35d3998f50c5e8f3af4b1c29358398457b210f3fba665c98ee5327ee3d24635940634f4298fa3cb94d779f15af21d9f402bac9cbc413ae099d8234d19e4e7144b09ef6f7a75510f3b6a9353a86bebb9dc68ea1ec7b8e37070ebf130d477dad93b657240cf20b9a55cd3781519bab66c5a0887943696e1d1a4ce4c8ce9fe85831ded3c"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:57 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000180)=0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x10000000100132, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000002300), &(0x7f0000001280), &(0x7f00000001c0)={0x77359400}) shmget$private(0x0, 0x1000, 0x1004, &(0x7f00004df000/0x1000)=nil) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x6, 0x3f}, {0x6382, 0x800}, 0x8, 0x2, 0x9}) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x4d0d6200, 0x800}, 0x18) [ 286.001768] binder_alloc: binder_alloc_mmap_handler: 20129 20000000-20008000 already mapped failed -16 [ 286.015906] binder: 20129:20131 ioctl c0306201 200001c0 returned -14 [ 286.023927] binder: 20129:20131 ioctl c0306201 20000440 returned -14 [ 286.030874] binder: 20129:20131 ioctl c0306201 200002c0 returned -14 [ 286.042392] binder_alloc: binder_alloc_mmap_handler: 20129 20001000-20004000 already mapped failed -16 03:33:57 executing program 7: r0 = getpid() r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x4001) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x4000)=nil, 0x2000}) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) accept$unix(r3, &(0x7f0000000180), &(0x7f0000000240)=0x6e) r4 = userfaultfd(0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x3, 0x79, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f00000003c0)=""/121}, &(0x7f00000004c0)=0x78) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$sndseq(r5, &(0x7f0000011fd2), 0xffffffee) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="2d1c89fb8ca8f7cd6ecfe5489d47c59632f6c4a81afcb97dcd1af34cb25292612104b3e248a8ca3fdcb80c077170f6393a0153e867b39b630565aecada18ef06951e64bc299f6f1e3ddbf6f2dd42a23746c15f7c609cebe457bb9e59e37639501291b6728536af84d8bc56a50577fc3e7e649ab377"], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000140)={0x4, 0x8}, 0x10) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r3, r4) 03:33:57 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) gettid() 03:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046304}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:57 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a06000000a84308910000003900090020000c00060000001900a30700000000000000dc1338d54400009b84136ef75a1500de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000003000)}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) capget(&(0x7f0000000040)={0x200f1526, r1}, &(0x7f0000000100)={0x2, 0x2, 0x9, 0x2, 0x200, 0x2}) 03:33:57 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0xff, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="7fa98941487be68cabdf968ac96473dc29ea3d120256a688e09f8a4fb32c54e63888810d07d355c0115cff94a1af965f737972d2a0e5ff2b3eb7b57b18b9b713817c98b84330819177e4ea3454a7568317c7e37b9a964d7737773a219a41aad139d98e601439a37fe271b78b6bb5ac6827abe0803042b5756b006e5ff153725feee255829159d0ea29dad7ea88db8b034c90ac9708e56d56cc2860e9d3dbfb4ba507722f2d1cd13bb92ae44a2d21c8f7bf6fad28e78d05", 0xb7, 0x5}, {&(0x7f00000001c0)="9c58d2759c8f0a0b034e", 0xa, 0x6}], 0x883, &(0x7f0000000240)={[{@show_sys_files_no='show_sys_files=no'}, {@show_sys_files_no='show_sys_files=no'}, {@nls={'nls', 0x3d, 'cp936'}}]}) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='com.apple.FinderInfo\x00') gettid() timer_create(0x8, &(0x7f0000000000)={0x0, 0x20}, &(0x7f00000000c0)) 03:33:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = socket(0x40000000015, 0x5, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @loopback, 0x69bf3526}}, 0xfffffffffffff782, 0x6000000000}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0xfffffffffffffff8, 0x8, 0x200, 0x9, 0x4}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r3, 0xcc, 0x3, 0x7fff, 0x2, 0x2, 0x5, 0xffffffff, {r4, @in6={{0xa, 0x4e21, 0xd282, @mcast2, 0x1}}, 0x10001, 0x8, 0x100000000, 0x80000000, 0x2}}, &(0x7f0000000380)=0xb0) setreuid(r2, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sched_setparam(r5, &(0x7f00000003c0)) [ 286.055739] binder: 20129:20131 ioctl c0306201 200001c0 returned -14 [ 286.058729] binder: BINDER_SET_CONTEXT_MGR already set [ 286.068601] binder: 20129:20137 ioctl 40046207 0 returned -16 [ 286.076283] binder: 20129:20131 ioctl c0306201 20000440 returned -14 [ 286.076692] binder: 20129:20137 ioctl c0306201 200002c0 returned -14 03:33:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x8208ae63, &(0x7f0000000040)) [ 286.143117] binder: 20143:20147 unknown command 0 [ 286.153637] binder: 20143:20147 ioctl c0306201 200003c0 returned -22 [ 286.167514] binder_alloc: binder_alloc_mmap_handler: 20143 20001000-20004000 already mapped failed -16 03:33:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002600010000000001000000250200000008000c0024000000"], 0x1c}}, 0x0) 03:33:57 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x9) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") setreuid(0x0, r1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'ip6_vti0\x00', 0x1}) setreuid(r1, r2) [ 286.197729] binder: BINDER_SET_CONTEXT_MGR already set [ 286.206593] binder: 20143:20147 ioctl 40046207 0 returned -16 [ 286.234442] binder_alloc: 20143: binder_alloc_buf, no vma [ 286.240159] binder: 20143:20170 transaction failed 29189/-3, size 24-8 line 2967 03:33:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000140)="025cb03d6d345f8f762070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef73ada4753dd58b4d4b6e689d30d71c32fc0b98143e037dc1250278424e1b0368a82cc15eb4037dc12502000000b5e8", 0x38}], 0x1}, 0x0) close(r2) 03:33:57 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x2000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x43, 0x0, 0x0, 0x80000}}) close(r2) close(r1) 03:33:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x301000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x4, 0x6, 0xc20c, 0x3, 0xffffffff, 0xffffffffffffff37, 0x1, 0x5, 0x2, 0x200, 0x7, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8d, 0x7, 0x0, 0x9, 0x3}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r2, 0x8}, &(0x7f0000000540)=0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x5) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x1) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x317, 0x2afd5ee7, 0x6, 0x3, 0x7, @local}, 0x10) sendto$llc(r0, &(0x7f0000000200)="c70df30647e64d21ec6990dc3aa65ac97570d9add81836da6980453ecd2984c4ea4bf561c5f3010d5ab92407d17ff3982098121cc299e0961ce96821ed629ca11389ab950653e1206ba4343052bf5db8870b01cfefe5e75f23c0b5609e8c19cc54c970c2eeb63c130dbd818a4d4ae38aa6f2c6d18d86b50f5f42a1e9bbce3b0573041592ed6fe5684e021b4d49880a941b2fa3ceea9fd884f08b135ae3f43474b0cac1b5d11f3372247871ea27d6", 0xae, 0x40, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0xfffffffffffffffe, 0x7fffffff, 0xff, @broadcast}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sched_setattr(r5, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002a00200029bd7000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="ff3e86bf9e929102640000baf4875d01ba89f4044300"], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x8004) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)) write$P9_RWRITE(r4, &(0x7f00000002c0)={0xb, 0x77, 0x1}, 0xb) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) 03:33:57 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000007000000b700000000009b999500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = dup2(r2, r2) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'syzkaller0\x00'}}) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000180)}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000240)={0x10200, 0x0, &(0x7f0000ffb000/0x2000)=nil}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 03:33:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) write$P9_RREAD(r6, &(0x7f0000000040)={0xc, 0x75, 0x2, {0x1, "f4"}}, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 286.260926] binder: 20143:20147 Release 1 refcount change on invalid ref 1 ret -22 [ 286.268955] binder: 20143:20161 unknown command 0 [ 286.279136] binder: 20143:20161 ioctl c0306201 200003c0 returned -22 [ 286.285729] serio: Serial port pts1 03:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40086303}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 286.346722] binder: send failed reply for transaction 354 to 20143:20147 [ 286.372063] binder: undelivered TRANSACTION_ERROR: 29189 03:33:57 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000012c0)=0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x3, 0xffffffff, 0xffffffffffffffcf, 0x6, 0x0, 0x1, 0x40000, 0x8, 0x1, 0xffffffffffffffc0, 0x0, 0xffffffffffffffff, 0x5, 0x1000, 0x9f2, 0x5, 0x7, 0x3, 0x0, 0x8ab2, 0x6d, 0x5, 0xfff, 0x401, 0x0, 0x3, 0xe39, 0x0, 0x7, 0xf3, 0x9, 0x80, 0xd0a, 0x6, 0xee92, 0x7, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x90, 0x3, 0x6, 0x3, 0x5, 0x4, 0x9}, r0, 0x7, 0xffffffffffffff9c, 0x3a7650ec3dbbe64e) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f00000002c0)=""/4096) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x42, 0x0) getsockname$netlink(r4, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 286.457787] binder: 20201:20202 BC_FREE_BUFFER u0000000000000000 no match [ 286.464861] binder: 20201:20202 unknown command 0 [ 286.512113] binder: 20201:20202 ioctl c0306201 200003c0 returned -22 [ 286.531283] binder: BINDER_SET_CONTEXT_MGR already set [ 286.541556] binder_alloc: binder_alloc_mmap_handler: 20201 20001000-20004000 already mapped failed -16 [ 286.551165] binder: 20209:20210 ioctl 40046207 0 returned -16 [ 286.559499] binder: 20209:20210 ERROR: BC_REGISTER_LOOPER called without request [ 286.568265] binder: BINDER_SET_CONTEXT_MGR already set [ 286.573728] binder_alloc: 20201: binder_alloc_buf, no vma [ 286.579343] binder: 20201:20211 transaction failed 29189/-3, size 24-8 line 2967 [ 286.579590] binder_alloc: 20201: binder_alloc_buf, no vma [ 286.592571] binder: 20209:20210 transaction failed 29189/-3, size 0-0 line 2967 [ 286.598555] binder: 20201:20202 ioctl 40046207 0 returned -16 [ 286.606590] binder: 20201:20202 BC_FREE_BUFFER u0000000000000000 no match [ 286.609315] binder: 20201:20212 Release 1 refcount change on invalid ref 1 ret -22 [ 286.613612] binder: 20201:20202 unknown command 0 [ 286.626907] binder: 20201:20202 ioctl c0306201 200003c0 returned -22 [ 286.642643] binder: send failed reply for transaction 361 to 20201:20202 [ 286.652801] binder: 20210 RLIMIT_NICE not set [ 286.661270] binder: undelivered TRANSACTION_ERROR: 29189 03:33:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000000)="1b14b4c6068ed9183f416db1334859c0be8605c91b30bfbe24dc2421ea6be0d8289a0481262b1740") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000e40), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:58 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200000000000, 0x101100) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000080)=""/226, &(0x7f0000000180)=0xe2) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="220000002100070700be0000090007010a00001e00000000ff00040005001180eaa4", 0x22) 03:33:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='task\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0xb4, "153aac3c5cfb3d11e81355e8edfc6da9ddba77b6a210b4e446029469add7713174a3ec746222c4c281786ad360cc760f03f70071a22c1d782429c16e8f3820aa0cfb2317fe014d3f1d0902d5c80796f6a35f120632b106b0a594301d4618ab92056728fedc85976502d3065e35a32f9a08476b415fcb146924a33646da99321881be8c398b2ae8fd4d04a8e94582915c39b5d4f86b9338b3faa15eddce9ad4123c455d7166b9d6d60a6cc56aecf884a745d34d97"}, &(0x7f0000000500)=0xbc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={r1, 0x47ec}, 0x8) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xffffffffffffffff, 0x2000) ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000200)="a1bb991535205bad70e34d50a388476ef2b91777feb701d04b8f63f7860bcbfc511aa9b8f4936a3ebc41219ba59439f46cc738b408e328808980b18916c8e2e868931d355c1c15fffdcc8f31233fed09c46799b084e725e7f8bc260f2c659473150ac34441b7b2c5d9e88fe0ea8f4cb8ad6a4f96e588d42784531dd41bd5ec1bd40d4a36eb54c686a6db9a577f89155731bb05a214a38e1c75e460c2203bb624bbce93260e0ab5c8419357d165bda4a0b865a09f0a18d3506a33b198bbafc2acf8ca46be") r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180), 0x1) write$vnet(r3, &(0x7f0000000340)={0x1, {&(0x7f0000000300)=""/9, 0x9, &(0x7f0000000040)=""/83, 0x0, 0x7}}, 0x68) clock_settime(0x0, &(0x7f00000000c0)={0x0, 0x989680}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)={&(0x7f0000000000)='./file0\x00', r4}, 0x10) 03:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x4008630a}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:58 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x80, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000300)=""/221) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x80000001, @uid}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x118, 0x18, 0x400, 0x70bd2a, 0x25dfdbfc, {0x7}, [@generic="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", @nested={0x4, 0x81}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008081}, 0x8000) [ 287.103618] binder: BC_ATTEMPT_ACQUIRE not supported [ 287.110938] binder: 20223:20226 ioctl c0306201 200003c0 returned -22 [ 287.119630] binder_alloc: binder_alloc_mmap_handler: 20223 20001000-20004000 already mapped failed -16 [ 287.147774] binder: BINDER_SET_CONTEXT_MGR already set 03:33:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$nfc_llcp(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x0, 0x6, 0xd6, "53caa2520a74a45ccd34c627f17669e7a5b5ba4c0cd507178e16e6f408b3c823aa91a0675e53f2428758b19d353f861539a158a6226e3d65a8e6e0ca87c73b", 0x12}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000080)="a57f3420187499c763d075dfe7148506bb6fe778227ab0b342642c58104855f2b09674705f11e1d8a2180be962436687ac62a9bbf875a35eaca81bfd197cde95ca1f84e75194b71c7cbf53c80d6e57496906e7f30509d6ebdbea4fbec1b2a10170164f530cd165e122dd46629790590545061bab804278613b0e61b6bfbc0af86c6d9dcb4e49ec152f0aaba4ab49812d622d8235d6fb0678bf7c22aecf82ae3f2eb54a84243bda45ca0811c00b2615d05d3873987eaacf46583b2ae6be71", 0xbe}, {&(0x7f0000000140)="e741c4bac35736215ec86015296c9e618b978cae1a099f0a565a5724a85781c2c87eafb776741c74d85e399643181e8ee3c5bf977be2d15aea711cdc554c3b26850997693de9b476099b28268931cf1f97e12d4c380924445695ed96078bf34385656c092ead61b1a8cee4140c2583022f0c91b281472537c0901478923ffedd3d4f735ea03e7737c7597f8d2e8d1fca092d4249aad20c21f0dd8cc9d8106557", 0xa0}], 0x2, &(0x7f00000002c0)={0x80, 0xff, 0x3, "237069ceaec4196e179d9329da67b7eae4dc583bef6b0b78b7225c25d7a87f81270d49c52432f749f33531511df27465addb3eb491ec6ec1f8969ffa9e3dbf9a1655c750413b78badf32827240832f108aa31c44dbe9c8c9cbab4b784c2d2326d6fff8fbb79c124dfa9a90"}, 0x80, 0x4000}, 0x4080) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x400002) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000380)=""/190) fanotify_init(0x8, 0x9400) [ 287.156487] binder: 20223:20226 ioctl 40046207 0 returned -16 [ 287.181307] *** Guest State *** [ 287.183007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 287.184709] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 03:33:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f8c"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x3, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000140)={0x5, 0x1ff, 0x9b3, 0x9, 0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x88, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x20, @dev={0xfe, 0x80, [], 0x15}, 0x7898}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x4, @local, 0x8001}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r4, 0x10000000}, &(0x7f0000000340)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[{0xc, 0xffffffff7fffffff}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0xffff}, {0x2, 0x8}, {}, {0x8, 0x7}], 0x7) 03:33:58 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x6, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x49, 0xc8000) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x2400) getpeername$llc(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000100)="640f005c000f20c06635000001000f22c00f01df640f019a080066b8010000000f01c13e262ef20f1bb0a6190f01ca66b8010000000f01d986f42e0f1198d7e7", 0x40}], 0x1, 0x0, &(0x7f0000000180), 0x0) close(r0) [ 287.200503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 287.201983] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 287.201989] CR3 = 0x0000000000002000 [ 287.202001] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 287.202011] PDPTR2 = 0x0000205ea1d9a018 PDPTR3 = 0x0000000000000000 [ 287.202023] RSP = 0x0000000000000004 RIP = 0x0000000000000002 [ 287.213269] binder: 20223:20226 Release 1 refcount change on invalid ref 1 ret -22 [ 287.219505] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 287.219520] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 287.262871] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 287.270970] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 287.278982] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 287.286994] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 287.295012] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 03:33:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0x6) r1 = socket(0x0, 0x800, 0xf3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f00000002c0)}], 0x0, &(0x7f00000005c0)={[{@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}, {@errors_continue='errors=continue'}, {@show_sys_files_yes='show_sys_files=yes'}, {@gid={'gid', 0x3d, r2}}, {@show_sys_files_no='show_sys_files=no'}, {@umask={'umask'}}]}) [ 287.303189] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 287.311201] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 287.319222] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 287.327223] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 287.335235] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 287.339054] binder: BINDER_SET_CONTEXT_MGR already set [ 287.343237] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 287.343248] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 287.343258] Interruptibility = 00000001 ActivityState = 00000000 [ 287.343261] *** Host State *** [ 287.343271] RIP = 0xffffffff811f4764 RSP = 0xffff88018d81f350 [ 287.343295] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 287.348952] binder: send failed reply for transaction 367 to 20223:20226 [ 287.355084] FSBase=00007f1c8d7e2700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 287.355094] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 287.355107] CR0=0000000080050033 CR3=00000001adef7000 CR4=00000000001426e0 [ 287.355121] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 287.363125] binder: 20209:20259 ioctl 40046207 0 returned -16 [ 287.368904] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 287.368908] *** Control State *** [ 287.368916] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 287.368922] EntryControls=0000d1ff ExitControls=0023efff [ 287.368935] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 287.368942] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 287.368949] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 287.368961] reason=80000021 qualification=0000000000000003 [ 287.372932] binder: 20209:20260 ERROR: BC_REGISTER_LOOPER called without request [ 287.378236] IDTVectoring: info=00000000 errcode=00000000 [ 287.378242] TSC Offset = 0xffffff6473553239 [ 287.378254] EPT pointer = 0x00000001c468901e [ 287.496787] binder: undelivered TRANSACTION_ERROR: 29189 [ 287.504003] ntfs: (device loop3): parse_options(): Invalid gid option argument: 0x00000000ffffffff 03:33:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) sendmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000002c0)="e8dc67894801149f66675f8223a4f63378355652362a5f43e7c8d0b6835ddf4c9e18fb04c2c3c5118cccdf3e24a5847b1074bf2e2a97f404af08869aaa762f8f5d02cca2ceab94ce2d440af7c6785fe560d50691556315ce44df5a4ae40c488c05f719f6f48b6adddfd70b87c2df8d0158bcd0a6af92f50f466c2018bf72558db7b489599620a7f1605ab23a7af1756420a13f82879f7a44a4656bf8a5c84cfe3001214a8cb6e67eb3e90a21544da8bf285a1029dd84699b9461fb5f3a4050e3186458a5bb7853813990df0c25ba2ec53d879c77235355fdc567b072e3641bb903fe7885a23c9a", 0xe7}, {&(0x7f00000004c0)="ebbe21d2193995411a120a67fbe6aed1f800402cd4bf1c2860e8492066b275030063f8c262a24433596501238e03a0c201f07751a6ae689a9bbd14e59a68f9a6f322bdf85e3d4ce9ce7885d30f7118f33da8d64cc805602a9a79c05b1ab6b7a83d3f2464ad63cdb15f680924b6bddf98c3e6bbeff018ae94cda4d87717b9dca55ea6e90dd30556547ade7e", 0x8b}, {&(0x7f0000000080)="053634a03c0a54ced67be050600fde7dd44527ad340b2b74dd013b251174e0", 0x1f}], 0x3, &(0x7f0000000580)=[@rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x28, 0x1, 0x1, [r2, r2, r2, r1, r1, r2]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r2, r0, r1, r0, r2, r1, r2]}, @rights={0x28, 0x1, 0x1, [r0, r0, r2, r1, r2]}], 0xd0, 0x8000}, 0x40001) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0121be60ed1e00fb034d564b000000000155c7d619c78fc3eef90dc875e6651f2a7acb57c164ffcd0bf7eddef8a43e37cd41501766c8eb13b46aacae6d5dea87d268ca4eb421eaed66909d50aeee0e7cffc434c7549db0b3b03241f6d540703e6aaa765446930bc511bc1e229fd5179833f9f6a480ecc2e47cd9808a6ecb5e3a3a1474928decf40f115afb8cb39a45737a6d0178c60cd94ed736eb69d236be8685ee7ec663c7ecc6279867ec4b7522aa45fe8d2731c13740333c9451461531164194cdf353f6186ecb69668e6fe6bab045b5e60de94567f875a50ae81e1d0ad8"]) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000006c0)) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073]}) [ 287.532618] binder: 20209:20272 transaction failed 29189/-22, size 0-0 line 2852 03:33:58 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x301000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x4, 0x6, 0xc20c, 0x3, 0xffffffff, 0xffffffffffffff37, 0x1, 0x5, 0x2, 0x200, 0x7, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8d, 0x7, 0x0, 0x9, 0x3}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r2, 0x8}, &(0x7f0000000540)=0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x5) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x1) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x317, 0x2afd5ee7, 0x6, 0x3, 0x7, @local}, 0x10) sendto$llc(r0, &(0x7f0000000200)="c70df30647e64d21ec6990dc3aa65ac97570d9add81836da6980453ecd2984c4ea4bf561c5f3010d5ab92407d17ff3982098121cc299e0961ce96821ed629ca11389ab950653e1206ba4343052bf5db8870b01cfefe5e75f23c0b5609e8c19cc54c970c2eeb63c130dbd818a4d4ae38aa6f2c6d18d86b50f5f42a1e9bbce3b0573041592ed6fe5684e021b4d49880a941b2fa3ceea9fd884f08b135ae3f43474b0cac1b5d11f3372247871ea27d6", 0xae, 0x40, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0xfffffffffffffffe, 0x7fffffff, 0xff, @broadcast}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sched_setattr(r5, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002a00200029bd7000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="ff3e86bf9e929102640000baf4875d01ba89f4044300"], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x8004) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)) write$P9_RWRITE(r4, &(0x7f00000002c0)={0xb, 0x77, 0x1}, 0xb) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) 03:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x630c}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:58 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 03:33:58 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000001040)=""/4096, &(0x7f0000000300)=0x1000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) 03:33:58 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000012c0)=0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x3, 0xffffffff, 0xffffffffffffffcf, 0x6, 0x0, 0x1, 0x40000, 0x8, 0x1, 0xffffffffffffffc0, 0x0, 0xffffffffffffffff, 0x5, 0x1000, 0x9f2, 0x5, 0x7, 0x3, 0x0, 0x8ab2, 0x6d, 0x5, 0xfff, 0x401, 0x0, 0x3, 0xe39, 0x0, 0x7, 0xf3, 0x9, 0x80, 0xd0a, 0x6, 0xee92, 0x7, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x90, 0x3, 0x6, 0x3, 0x5, 0x4, 0x9}, r0, 0x7, 0xffffffffffffff9c, 0x3a7650ec3dbbe64e) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f00000002c0)=""/4096) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x42, 0x0) getsockname$netlink(r4, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 03:33:58 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:33:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)="637075616363744534ff2d7c73bbd01e21790fe62e7545e2755f7573657200", 0xf0, 0x0) 03:33:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x415) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x200000) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x200000) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000100)) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) recvmmsg(r2, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0x15f}], 0x1}}], 0x40000000000015f, 0x0, 0x0) socketpair$inet(0x2, 0x804, 0x7ff, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0xfffffffffffffffc, 0x8, 0xbfaf, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) [ 287.667328] binder: 20290:20292 unknown command 0 [ 287.672993] binder: 20290:20292 ioctl c0306201 200003c0 returned -22 [ 287.678092] binder: BINDER_SET_CONTEXT_MGR already set [ 287.685538] binder: 20298:20300 ioctl 40046207 0 returned -16 03:33:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") msgrcv(0x0, &(0x7f0000000240)={0x0, ""/79}, 0xc7, 0x0, 0xa4a3ad41a879dde0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="e14b78b365770b5bffc4c898e825f2932eb7e4482b2ad8794a82aa84216f2597e9b739cae7a1bf161ccd0a7980b41ae710820b4d43a2a3b56eb451888b") [ 287.712714] binder: 20298:20300 ERROR: BC_REGISTER_LOOPER called without request [ 287.728568] binder: BINDER_SET_CONTEXT_MGR already set [ 287.738183] binder_alloc: binder_alloc_mmap_handler: 20290 20001000-20004000 already mapped failed -16 [ 287.740311] binder_alloc: 20290: binder_alloc_buf, no vma [ 287.753344] binder: 20290:20309 transaction failed 29189/-3, size 24-8 line 2967 03:33:59 executing program 1: capset(&(0x7f0000ea4ff8)={0x20080522}, &(0x7f0000004000)) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x200, &(0x7f0000000080), &(0x7f0000744000), &(0x7f00000000c0), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000200), &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') readv(r1, &(0x7f0000000180)=[{&(0x7f0000002400)=""/198, 0xc6}], 0x1) lseek(r1, 0x0, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) [ 287.756944] binder: 20290:20292 ioctl 40046207 0 returned -16 [ 287.772613] binder_alloc: 20290: binder_alloc_buf, no vma [ 287.778259] binder: 20298:20300 transaction failed 29189/-3, size 0-0 line 2967 [ 287.787399] binder: 20290:20304 unknown command 0 [ 287.791033] binder: 20290:20314 Release 1 refcount change on invalid ref 1 ret -22 03:33:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x80000000004e21, @multicast2}, 0x10) listen(r1, 0x3) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) dup3(r1, r2, 0x0) 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x630d}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 287.813135] binder: 20290:20304 ioctl c0306201 200003c0 returned -22 [ 287.815012] binder: 20300 RLIMIT_NICE not set [ 287.837860] binder: send failed reply for transaction 372 to 20290:20292 [ 287.854706] binder: undelivered TRANSACTION_ERROR: 29189 03:33:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) flistxattr(r0, &(0x7f00000019c0)=""/145, 0x91) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-aesni,hmac(md4-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000000200)={&(0x7f0000000180)=@pppoe, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/135, 0xaa}], 0x1, &(0x7f0000000400)=""/166, 0xa6}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r3, &(0x7f0000001980)={&(0x7f0000000300), 0x80, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/196, 0xc4}, {&(0x7f0000001640)=""/246, 0xf6}, {&(0x7f0000001740)=""/80, 0x50}, {&(0x7f00000017c0)=""/231, 0xe7}, {&(0x7f0000000140)=""/63, 0x3f}], 0x8, &(0x7f0000001940)=""/13, 0xd, 0x2}, 0x1) [ 287.904750] binder: 20324:20327 unknown command 0 [ 287.916869] binder: 20324:20327 ioctl c0306201 200003c0 returned -22 [ 287.957015] binder_alloc: binder_alloc_mmap_handler: 20324 20001000-20004000 already mapped failed -16 [ 287.978510] binder: BINDER_SET_CONTEXT_MGR already set [ 287.984010] binder_alloc: 20324: binder_alloc_buf, no vma [ 287.989703] binder: 20324:20337 transaction failed 29189/-3, size 24-8 line 2967 [ 287.997773] binder: 20324:20327 ioctl 40046207 0 returned -16 [ 288.005012] binder: 20324:20327 Release 1 refcount change on invalid ref 1 ret -22 [ 288.013016] binder: 20324:20337 unknown command 0 [ 288.018387] binder: 20324:20337 ioctl c0306201 200003c0 returned -22 [ 288.026616] binder: send failed reply for transaction 378 to 20324:20327 [ 288.041067] binder: undelivered TRANSACTION_ERROR: 29189 03:33:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='security.evm\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x28, r1, 0x401, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8}]}]}, 0x28}}, 0x0) 03:33:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x3ff}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x8000000008}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffffffffffb) 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046307}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 288.135765] binder: 20356:20359 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 288.143606] binder: 20356:20359 unknown command 0 [ 288.151423] binder: 20356:20359 ioctl c0306201 200003c0 returned -22 [ 288.159276] netlink: 'syz-executor6': attribute type 7 has an invalid length. [ 288.170129] netlink: 'syz-executor6': attribute type 7 has an invalid length. [ 288.171440] binder_alloc: binder_alloc_mmap_handler: 20356 20001000-20004000 already mapped failed -16 [ 288.198314] binder: BINDER_SET_CONTEXT_MGR already set [ 288.208970] binder: 20356:20359 ioctl 40046207 0 returned -16 [ 288.231227] binder_alloc: 20356: binder_alloc_buf, no vma [ 288.236866] binder: 20356:20367 transaction failed 29189/-3, size 24-8 line 2967 [ 288.255976] binder: 20356:20363 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 288.255986] binder: 20356:20359 Release 1 refcount change on invalid ref 1 ret -22 [ 288.271595] binder: 20356:20363 unknown command 0 [ 288.291876] binder: 20356:20363 ioctl c0306201 200003c0 returned -22 [ 288.305647] binder: send failed reply for transaction 383 to 20356:20359 [ 288.321563] binder: undelivered TRANSACTION_ERROR: 29189 03:33:59 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xb, 0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x28}) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x800) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x82, 0x3) mknodat(r1, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="060a00000259f5ed5300020000000000"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 03:33:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000340)=0xc) setresuid(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x115202, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000004c0)={"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"}) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) utime(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 03:33:59 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x63d9, 0x42401) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000bc0)={0x0, 0x7}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000c40)={0x0, 0x19, "565ee00f674b1746f77af77a98a8ff26dff4dbef4d94000382"}, &(0x7f0000000c80)=0x21) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x5, 0x100000000}, &(0x7f0000000d00)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000d40)={0x59, 0x20c, 0x1, 0x0, 0x0}, &(0x7f0000000d80)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000ec0)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x5, @remote, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="fd0603207f117e72418bb01656b4a8c57b23caf6504b5b81e51a0fbbb790", 0x1e}, {&(0x7f0000000280)="99158bf7fa353876f8dac320263e294a29918d5d19a103e933cd0c04e293661e908406c8b03c1d4d0b47628571ddd2d4b1ecb88b6d8636389a89074409b0f8217379d3a561ce1deb5880279f7529c6d4dcea4c552feb5e70801e5993a0a461959b307369f3518735a6f2b5cd0392e186812f1e4dcb38701fca4b9c58fb1891c861b7ffbdd49070700d4e734df3e379", 0x8f}, {&(0x7f0000000340)="69b67f411afa0cd7b1cabe02b0557dcedd500f865a6b3da9d3322b4a4eae54c61efb25bc146f888e33647c268d26cb274148f1ab75430a5d7457dddf422d6bd9007280e437bcec23fa0c55edbf1fa47d94603986adbde6240acbc6a03f39ed8f4da73de7920861510be911e709a71020cfc49118ce3c0f14208460cb1bcb6e732f9fc83e09e45329730682", 0x8b}], 0x3, &(0x7f0000000440)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x7, 0x1, 0x4, 0x1}}], 0x38, 0x10}, {&(0x7f0000000480)=@in={0x2, 0x9, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000004c0)="55a5f7c7bf93cd7c27918e964beca4cc4e1fb610d8ee4a118b2c20120011da225c99405cb43111db3097067aa5e35c639dd7d8542ca656ace806cbaeb3e26d686b170bd8f6f824806fd6366a27554644cdff9bac8bfb5363493563b93e53c77b9c187ee99e72534888ac02fcdd4e5b2cb86963fd8887b04c52fdbd67dbf794b7597d3e63f3bd95fb7429b47c75561dd3a4ed680f38000b", 0x97}, {&(0x7f0000000580)="5339c9be995ea68b280a2f93ec96d0e5ff1250a1d89e53d3f522ffcbe80ae511fce667c1e3a43c15f20383c4a6a757b3ea57196a53f0f4a843bf7893e59da5d37895a0289cf2be8470be1fabcb95f2f53d9ccaa68732b8e0a9", 0x59}], 0x2, &(0x7f0000000640)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @authinfo={0x18, 0x84, 0x6, {0xffffffffffffff80}}], 0x30, 0x40}, {&(0x7f0000000680)=@in6={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000006c0)="42236792b38889cc84639da61240dc4e013873a219893ab303fb0eef689d23ef1b50a15f375fb7b7c33068ab005c4a32ff7a0798a1923935ea1a07f2735b1589ee1998f9427b983945419fc4f49e10d652d02f4e968a93a4", 0x58}, {&(0x7f0000000740)="4799f5ac1e8dff07ee79fc15f64d6483011e6d3766906a0d327c714b89a04c175e03f6d53a7b8586f7b374e7880ce5c62b22173b5cf3b14f96ce0fd27be4b8a6355756e60ce0e96a64ad350f99aa0c16472606216d4d793dd0030d21a27c316c3270796f2910ea71ce99fcdc028ead5e4e6900219ebbc05176a545f97ad7e58816b991c6abdfca6f128756772278646d57c2ab6f41d0ed14e304eb17c468f1293aef470fb7690956d30fa96b6480d51b391f36c42cc923b19697317cc692b0d78c10ad95", 0xc4}, {&(0x7f0000000840)="df60df34ff824ca15fb66d34d21feb5aa858265db60ea82e59967d22b6adfa38f6c0895cfaef43dc4f", 0x29}, {&(0x7f0000000880)="adea3a1ba9576b412988d8c684dd118fbe7a0477fe20635c5b6ea88aa57fbf20e1da52614f9fdb37857f77bad9aac820d9f7c2630de617f6384820fe6c0db583760fcfcb32a005f5ceeade0ede5329932abdc4c758471598cb32c810ceab33424ed53f857f3331f210b031ece70539", 0x6f}, {&(0x7f0000000900)="8903a9f4fec58fcec175fd9a10e9c6afaedc63e7a6e6e6f74e785158ac81023cd10f599fc626aacadf0fb714368c143ec3c15a98759b541299a618fb16b7414ce5ab3a29dbd226e0ea53d9a70d2e3e2df2cad35e11610abe66c2d5b870cac37ddeae581266c9840f2cd2a463856e5cfdcfcc4022bed1551dd0c929d3d4179616d564d312ae5f9b01398cf870183df47af2160f40eb36a463a8ab884f004e33d40f98935dccbefdf4b211a54ae77ab8a2ff", 0xb1}, {&(0x7f00000009c0)="7837940675e5a85c8ea08dae897efe417ca0403a6fe4372e7e091273213541f56288edaf97ca8156e88615a8f6d12459b94c39ff384982175320f2ee88c9cd9a192876632e55c66dad93f3cd38faf4cd858621", 0x53}, {&(0x7f0000000a40)="26a67f506a07573ce8f0941401304201194b1549b26fecbc84e958e86e9e9a5aded685371fd7a31a772e020bee5df5ba9c5af370ba6ce36b24d0a14302da498921325025125edd476d52f8b467abd633018ccf0b143f9eb79d1cdbbed0dffb069a69518316be33c49e7d691864dd6eca09a7aa89ec9c28eec47bab0a91d159ac94f3418d412bda42861635c12791638718fdf5e999532c3b8aaa801897be464ece0d2c5e6a396d69993b62b60e63552f7079a45522738b6537568132d817c805f8314abb440dc281a86a58ead4c69df17d8c66881487342ace3079ec22124aa9860e5da56af6c29231ecceb0258d", 0xee}], 0x7, &(0x7f0000000dc0)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x40, 0x1, 0x6, 0x8, 0x400, 0x2, 0x100000000, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x8000, 0xfffffffffffffffa, 0x1, r4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x201, 0x7, 0x8, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8009, 0x6d67, 0x7, r6}}, @authinfo={0x18, 0x84, 0x6, {0x81}}], 0xe0, 0x5}], 0x3, 0x804) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic}) 03:33:59 executing program 7: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000ac0)='./file1\x00', 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r3, &(0x7f0000000100)=[{0x5, 0x81, 0x2, 0x40, @time, {0x6, 0x6}, {0x2, 0x3ff}, @note={0x5, 0x0, 0x20, 0x80000001, 0x6}}, {0x7fffffff, 0x6, 0x0, 0x1, @time={0x77359400}, {0x3f}, {0x7, 0x1}, @raw8={"294f72a9f25c0cbcf71be9a2"}}, {0x6, 0x1000, 0xfffffffffffffffd, 0x7, @time={r4, r5+30000000}, {0x20}, {0x9, 0x5b01}, @result={0xd4, 0x8}}], 0x90) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/119, 0x77}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000000600)=""/236, 0xec}, {&(0x7f0000000700)=""/168, 0xa8}], 0x7, 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='tmpfs\x00', 0xedc0, 0x0) r6 = request_key(&(0x7f0000000bc0)='trusted\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000c40)='gre0\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000b00)='dns_resolver\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80)='tmpfs\x00', r6) link(&(0x7f0000000080)='./control/file1\x00', &(0x7f0000000240)='./file0\x00') ioctl$KIOCSOUND(r0, 0x4b2f, 0x81) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000a80)=""/51) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x84000080}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x12c, r7, 0x308, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9b}]}]}, 0x12c}}, 0xc000) close(r2) 03:33:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101001, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x2c) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)) 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40406300}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:59 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:33:59 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="fefffffff2315777"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xd000, 0x1, &(0x7f0000000100)=""/1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:59 executing program 4: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001240)=[{&(0x7f0000000200)="d29eb68d4715f4886cd6810404edc3237ab1ab24b812a186b527e6a8fbd3c86dae358d8c66a34f557df2f41c90a729638669d9f78bf8da3b4ffa241d2ec7dc756191fcc3ba5e44a260840a6492d771db352be57417289db584640bf5a24a361c6cde7296637e7fb1f0b846534da3e5bfda1d91a0d62d2e86b2933ed8ca5c55012d3109e16141ce7f76ac5214b47313f3a60ae91cd1d3d48846c71f63fa032e01a25a9c6182589f92e376b45132e4357a89009b32dc539f76abee8a80424b21b7674e4673ab711d465fc4b038d5ff90350364a9a434c716ae8a5aba55142b13065ece81ca1b755684dccb2d2e8460ce0334cc62b9b99bcc19cd92db800244dc42be0c677cf8bb41cff901d0dc965a27ebd5b696c00e3c4b5b09867bbb94fd1c5c58646268d649452ba7e5d701de3df49dc3d483710749096f56e801993358c949c93ddc22e103d29300199ddd843385be56a4bc9b8b094e6a32951397b32af0e9f369a36abc8a6bd560df0a8de681c2f1e66be494902044b1a19d16ea938966be2e4b8ce1899870cdb9fdc35f3d37ac80553105404a56b2d537d31b470767bdb7df6ead1915b36bf5b7973b4d7e20ea06d9af4363a0056ae445abc54eb421f7810579663a385666c9687de2dee683e5a9a1e9c8cf5a2d755f32641a3ed083265b4663727f2889300089b238641f263f08ac39ac462733a301cbc8e0353ecf9ce43556ae89f537aaa65ffab0d5d65e8252650748aeb4ce03f8b4c1a66b01b1f02f0aa2d6e63906f51dd5fd3cb90a9835f2086b848939c2cd3c177fecb2ac6c06836b7a6b63737f1b9b2364933527826a1a3d32e473dd80f20bc1b4477da108c3575d0d3204b18091ba40b4991885764e6b9a9e8e5b7d5d1120fd47880561afee712673f74b37e076c2a495b9a691bdecec28074218d964d4c0c7dd1bf1271aac0e1251f4c09f8ff812594137ae1f7843f2e2c5e2c442b369f05ac28cdd97b53d56e54c45a6e21fb65a9d8bff12f299e0d29f971a3d6867dd185ca756ad3b3b8413daaacb2a1029adeb0b8478cfb2e376cd652f804453fd1277c8a81533684d28e262489a2e9fc7c58777801a131a734a25e5d0898bdc95ae5595e97bf221f715eaa1ac7af320d11462bd64fa7c6a92e6f494b3460aad4fb47f77905351e41d9f93c189369ffe8f47aa0744ad70127b6f3b4fcd3325fe4099e82efee4957a03c42827a4afdd2e1e4fec0c9191ddd7c8f4980df3ce4041fcdc9a41bc6f2e16a1d3a6cffd0764a5c288b805d4496642564cb145aae4ff94414fccaaa52fedfe5a07b62a0529231babf7d5d965baa025acd803b2cfec80c9eef92ba76dd9ead81061365c862f9e4fad89c9d06450735e5aa723c2c9e0d6c726d058f7b375929c58580e1d2b78a4d6d83496161f0694e4e8bcd944dfeb1680c3fee4be27cc7f366f9a563b134996f7bff3c90e03f5945452540191a6ac3b330aac0b323ccecf3412f54f9f4c0ac2e1435e17d377c8617507a0b6d46a7bd420953047c7d7a3caff91ee2c5707336f94de503e31b0f5727724254bcc6dd05ed2a1911272e87aec40ae5fa492fe56295ca8e7f8e3ded4baf3fc5629306f5363ab311704aeb3fd928ec8f8fe3ae4d907463619b1987e7579c64b94db125486402672ff9f37f287f5d249d9b72bb10e587eb0dd73313dda566f697544e90f7806a40eb7b88a20e25ca8e9033511e4d39d005aa93adf41855e60277bfbd5eae2adfc61ce86115869b1224ccccd97b91518b73de874edb15a074f8845811660435108aa98fb7431112eae91f6ce2b39a08ba679d55826f5d5ecf87a627d1b1ed88b4961af4d8c9ae08d4991a9394dd74d8e5aea644996314fc06815e494e6ba897229bf5cbbbe2a24039dfa1a7a619f948cfecd813ccc40a755ad765e545cd74b876da65518e747e45dc09f068894679c7025982909938dfb94608ad445741b8933be0bfe7ce25fd1f5b209e7f7d5aa627334c094d469a82f672574bc8db181ee8757fbb69142eccf599765df556549f384d06d1c07e4e5639a71418429855fd60c9917990b7215d3555934929ce898eca725f3fac44a1bfdba259c821129df24149adcf4eaf64f6f9bff33ce4af8dc4e876f8519d45b5abeac076efe12787bb8a959070a931a1c9e5962573f6f8640845ffd008072602fd137da8795a99d18b969799fa47dc5ffe0aefc59b0be034bbd2739d32b7fb1dc0d3ee8f0b56b032ead14b52b435cfd0cc3eb19c12402bf5e5e5f4b5e5572dbc5be09eb59d45f5a4db5144ffdb2406399bfdec447cc9a67a56d43466070641cdddb38af14a1972e40a2cf7ad2a35b46625c30a655d974917fdd6b771c22d1f4aac147fc52c0bb61507f830965085cac0c722ff813a11494e5f18366a739e842375f477dbdb1acc336a7c62662808fef5ed2a349d1e61627dc8833b580107dea46d0c651af5dc20c3cfb98d93cf8a97747ae8b821e9bbdf503e76b4bb48e8d686cc835e7930fe09f7f1d75fa6f2451c7e35091f5e12629c386d4375a367a3cd1f4720ec2d79b287eff47286db4b90a92428b7a20debda68e71b6bac322da84be4b5d40d5775486a8e5f8b988085a3cd71b8e308bb4be4c24184665529e9f310d581413745e433b6203b0670ae459c9a3ecf36d9be128ff98fad85b8e2555d8353885b75827c4e7b93f31b7a4f5adfcfefc6a25ca584eef6f7ccffdbadf1b3a8c9523c5468aeac02e1bf2072ad3d8e1fb19ad5e4117cd215af5dc7d508aa1d49c53611fa55767fdecdf6c5f29bbbf212f26941fe6844545135fa6cd5f4f6b131debf3332e1d165b32b00f463eb4fdf2dcbc3b82d038a7336c6eaf30596e116151a7afd3003fab4d3fe48a3e660146d07938c6609bc7e974299303ede2177609372a7dc1d37a0aab899a936d4ef442ed51a449cc42547484c06ba76c1c6878042590fcb117a2f0e686b3855097b80dd1d32ee75d74a3c24d63f76c683fa2dcb59796c7969f89c637c8ddc2a06c5d31ba4dacb1766bb3cdc97be762ad678a57baf87524cef4308bc618526452fb32a21bd716e7821109e5c83276666a8bcf745fd90c3b52157fc3511d1c908428fd3b194750813c876b8daa1f8c7a3e658045b3a6ba2398b81676286f100a2b7a03cb046e5b32266772f1cea25a22b2c09a1fdcfe0b5f4334881c7486b62f219f03aab1767a1c99880791a8da0f1c86636186f29c9e0338d590f30883ebf2b99561cabd6dc3d6a7e7a1543f323067f0e5a0ea8808d97f441d4c73acabd15a2a4f63a665670acec692b991318712ce49ed5e712d33226b9b7c9f1680c0bc0380a91411f04bd41c7fcfb25fe6ea6d1ed1042646763d9c63cef1848462cc806d66d763f3a398e728bd77c5b38abd9c141dd7e79902aec0ba744d06dc4cc9c210d0622194e9fd84ef45acb1d61937ce0c2875d6b761663556bcfa66908ead2b30ef72e50c4c7a683cc707d4cce76a6482e322c82e49715b64f69acaa6efadcff38523bf49e9a09a27be7ae0160e23476c9851d0db013df4138b4d2c5aab0dd312c6a86e971ed96930299c82778bf055b4ea00bb3d3747993f632473c8c0c3cd1747593b42820c4afc444fa3b24efe6069434437366611cfe37cff4e9e401f9f9091aca5c119af9cf866c86391870b519fb979bb76c4515a3dfce4a914c3e297590cfdeb514ee96fa53bd424d383ef70ed5defba766297faa81cbf7b009eca74ab84d24af7c0ae04fcff95daf9aef5d06e4f7d4d6c2bce16a8fb3881713c24510963111ad5eba7f88dfdc9c28b9db7702f2d39da25ba79fa3507e79d985dccbd1ea4e082a78b904d92cb60bdb3f3861a936f914f9ba3e342fedb50cd0c94c52d04ef4054827cf622d1cfa9679321d7107d5b0f7a7a425ec4681cef06a62e60879a68cbf3ebb2172476249433f48d21743e9d961ccd712b15bc46a95fd495a881dadce73cd58488c8d5c6ceb11de74c3e0b7cc79fefe93c2fe3b45bc5cb215f098ce3460f3ba5c243f64aeff11c419a4151502ccc81bf250fe02deee4d7173d3b733fbc246cec3e6ef4c6047651efd3ff1ebc6e84ddedececa77bccc82d566ee12a82beb977e3266ea28fbe13ba32cf32659024bcd3ff992d481a4b0887a47f4ffabeb324b3d4359cdc3bb5c9b3f84ef29af7c28347080d12940a9ddf424c59bbf1d8424acb708e967a04ba478382caea8e23ca27f8e527f41b834fe41f8074f3816ad385f2348a0bff76a10457c931da4adcd7d957313db1971fd686b35de3e7e1e07ca36378c64e0915cec51fddfc6daf0f3f835551e76de1718a24c1a2b85263b082a36947d967dcc31b75473ef92a64fda5168546dfedbe6f9074a1cbb740c32f3c10888f8464ee5e9571d3ee69cca1ddb321107999d6ce4477499c2a15ac08f9bec3eb5a2955387daf6670c86df22573fbfa5cb3867dd11939cc3615bdea4678f8b106e938e931f71e7e172bb7d8246eb9f51f88b309eba1dd5c53d9d15fc41236e6d6839c9293107ddc8f93f61f08747929e8052f7298c1e4ca8d9690a7ff98e313d13178b34e682e706331bc4618e093b8ad626b37b2397fbae64ef7756f616ec1e7a7e924f3b15d48921450e243ffb840b0c14a330738f812417b1b3a3d5cf7acc4fe2acbae60e161236bce13141abba15edd72fb55f1b26722eb9b1b119091e60ee59e7a39412e3e1848bc4bc2f5ff1e464d8ad8432d90270a0d6cfe19a55128937c69b1bc68d7249678db359bd2a9b752e754ec80dd643b9f347603346dd19fd4279d10fb63776bd6be9e53499f168b35166fe59be1dc84fb184a47cf0dafd07ee47c5b449fca56b48254c9670d17e89a42191b9d8cbcea9f763443bc6a7df59ae2cca954da93fa9eee1b23b0f1dfb7a6fc927dbf82f554f4cdce695ec598e616277324389c3736b96095ae646e1cc001be1e202e1a305bc7d212e6c9d69a0a9bd4d10ec6704d3aedb6815d06941e41c181d4323e3ebae5ed12634ba1f6246c14e65d276fbc01ac0b906eb632ffdf3fb5d211bed64b4024ad7d26bfeb56658612ed73ec00103835e9edd6293edbb88acc35d9bafd88264ebf8c3b3eb6957bf252d1598a4fe431e8f03be7b6dbf17fa85ad12d01d093ee8b827a60bd1517760d2f18355d024fa383199ba1261274f027f0bb947f818687390e8e100203cc4280d30f7e4ba9b75724c3f543af44742335175ed13acbd4146c216cc217f8a41ea0771ea7077933fe90d80843d6216f8c8d6e33b89aedcb242f24b39a231d6eb4ca11cf51cafa6fe8651d61bff3dc59bff4999ca4443d71696e4c764bdc275d1f22aa39a750174d9847877eaa375483ccba934eddbcb0a4cda014bf1645703c7af4c55e136842bb1b4a78e3316cbf1b200d714458f5e854878f429b376e4e1513b1702d865f2604bca3556ac43ea07e0e13e87e24262680ca1f84e163468aac9d9f31b659cc6c5bd1b9620f6e7e3e6fd62cb39d0560c247f772630c762413d29d43a7849cdc61b2f412f6508d74d8d0b9d5eba1148b4eb4b6c66fb4b6b3b6a35afe0c8f35cec1b0c49f81cbdad3f803eb89cd5ee7c17939de61312ff35c54969db7b1810f8ea3a2f9aae4fda15eeaa15b7087cb0b27e5dd6e9dc44f0b7843f20e60b40c43b3fd6437faedc306e4c333faeae081b5edacd7f3e47e67a88e008c2a3ed915f8e9e408c71df0a040b3e93f45b965c45544dcd33738bebbc266a1d278669c60f83296439e6b8f30e2c6364ff420f157dbd3ea38100f17464c903257013734e4689092208b40f0", 0xfff, 0x1}], 0x0, &(0x7f00000012c0)={[{@resize='resize'}]}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2040, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x40}) [ 288.696960] binder: 20376:20386 got new transaction with bad transaction stack, transaction 388 has target 20376:0 [ 288.707699] binder: 20376:20386 transaction failed 29201/-71, size 0-0 line 2879 [ 288.753829] binder_alloc: binder_alloc_mmap_handler: 20376 20001000-20004000 already mapped failed -16 [ 288.776931] binder: BINDER_SET_CONTEXT_MGR already set [ 288.782439] binder_alloc: 20376: binder_alloc_buf, no vma [ 288.784241] binder: 20376:20386 ioctl 40046207 0 returned -16 [ 288.788117] binder: 20376:20402 transaction failed 29189/-3, size 24-8 line 2967 [ 288.811767] binder: 20376:20398 Release 1 refcount change on invalid ref 1 ret -22 [ 288.823882] binder_alloc: 20376: binder_alloc_buf, no vma [ 288.825130] resize option for remount only [ 288.830357] binder: 20376:20408 transaction failed 29189/-3, size 0-0 line 2967 [ 288.854659] Unknown ioctl 19259 [ 288.858185] Unknown ioctl 35106 03:34:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x0, @irqchip={0x2, 0x3}}, {0x4467, 0x3, 0x0, 0x0, @sint={0x7264, 0x6}}]}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x227c, 0x70c000) 03:34:00 executing program 3: clock_getres(0x7, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400200, 0x0) accept4$unix(r0, &(0x7f0000000840), &(0x7f00000008c0)=0x6e, 0x800) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000300)={0x5, 0x1000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) socketpair(0xa, 0x1, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000002c0)=0x80000000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f000000e000)={&(0x7f0000000480)={0x370, 0x20, 0xffffffffffffffff, 0x0, 0x0, {0x10}, [@nested={0x1f8, 0x2a, [@generic="cc41c6e0fafb394fc7d8c93ccaa6e4c220df5cb63f09dbce001fbfc18b15005e9c3f28efb0ea252e912b32235edd51ec2e7d99d53ed01501ca7ee02f3da812421a117f36e6c95c37d417d15e9803e16b583e895bc2711e8e929e703d7f60580229e718ceab1afa785132aed6b2f80d7b8fce7034f74e67fdf2f944eb2105ba727facd657e5e19825d50404dcf3e58b58a01edc77255946973238350a9eda3ea751d48296b64de324c35f53472cb6aebf64f27679eb7580ab26", @typed={0x4, 0x1e}, @generic="0b0efe00473659e7d04235056bec9e2fefb7a85f330bcaa7988433a0e8a7f5d72538de6de8a1b0bebd8d6e87c7f8cc39f1a456fe43479db301f2bdabaf9f841545fd698fa920b5647bba982ced15d47ca45bba850509e333446cebc8a075b6463a878c967e79004032ac653c692fe689c7cdd7afa95e63f9b57c4c77f745d789282aaf3933c906e74b1797bd737425ebd7447c097b1c88f375aac66207ff22f0912e3ea6b9419fecf3198c45e9f844241836ebc722bd42721c271832ad85b90106be4c517042a4e8f7ba2829fd51b27b", @typed={0xc, 0x58, @u64=0x288}, @typed={0x14, 0x93, @ipv6=@loopback}, @generic="505dd8e1e3afea47b153972c61d0701a19df081c144ed29f10ed35e86ed62da4549ca3e2a88f84a5c0fa8e2ee1c6ff9f477671c0706e878bfafbee76ccf5", @typed={0x8, 0x74, @u32=0x9}]}, @nested={0x6c, 0x23, [@typed={0x8, 0x0, @fd=r2}, @typed={0x14, 0x54, @ipv6}, @generic="cc69bf3966c318d18b96389d1b17e3da21f0cdb8d1c4c0379c4f9087b3a9ec3cb8da3239b8652b1fc680464e74d1629b9a356211cf42f456e98776dbfdee44d968c0b48ddd77b76fad75b2af"]}, @generic="22004a1355077ca211dbf1f1b1ee0031ce42fd8932417cf6d41e72b544680e25ff0f2fa099c1ed717e9abacc859f7b8f1855e702083a5f0fc6ade9507c8fb2abfd18561765b939e2f070753d791cbc93dc913f2670bd0dfc77d25a35e1991d634ca5a8f19fe14e112d701a0648178b32f3f05bee8304fc397e3b087d938882b4e01a8781e5db176cd0b857a3a6bc9598d52d1e1dc9d75d1afac3d9dee778b2b1729cb3ffc9c1685df321eb2d39339001ee46fa3788fa334248facd3dcf099bea6c349cacf43fd2afb6017a4de1fc4f23ae82b9", @typed={0x8, 0x91, @uid=r5}, @typed={0x14, 0x44, @ipv6=@remote}, @typed={0x8, 0x83, @fd=r4}]}, 0x370}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x8, 0x9, 0x5, 0x7, 0x0, 0xff, 0x0, 0x1, 0x7, 0xffffffff, 0x6, 0x401, 0x401, 0xc63, 0x401, 0x8, 0xe8d, 0x7f, 0x0, 0x100000000, 0x6, 0xffffffff, 0x8, 0x1, 0x6bb, 0x100, 0x401, 0x64, 0x80000000, 0x800, 0x0, 0x333, 0x1, 0xe418, 0x6, 0x4, 0x0, 0x40, 0x0, @perf_config_ext={0x1, 0x400000000000000}, 0x1, 0x1b, 0x0, 0x0, 0x7fffffff, 0x80, 0x5}, r6, 0x0, r0, 0x2) 03:34:00 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) write$eventfd(r0, &(0x7f00000000c0)=0x20000000000, 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 03:34:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x4000000000010d, 0x197) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) recvfrom$packet(r0, &(0x7f00000000c0)=""/170, 0xaa, 0x1, &(0x7f0000000200)={0x11, 0xf5, r1, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, &(0x7f0000000000)=""/55, 0x37, 0x2000, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 288.867583] resize option for remount only [ 288.890348] Unknown ioctl 19259 [ 288.898043] *** Guest State *** [ 288.901449] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 288.910440] CR4: actual=0x0000000000022040, shadow=0x0000000000020000, gh_mask=ffffffffffffe871 [ 288.919320] CR3 = 0x0000000000000000 [ 288.923063] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 288.929076] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 288.935076] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 288.941783] CS: sel=0x0000, attr=0x0809b, limit=0x00000fff, base=0x0000000000000000 [ 288.949836] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 288.952420] binder: send failed reply for transaction 388 to 20376:20386 [ 288.957922] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 288.972699] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 288.980721] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 03:34:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9a92, 0x8000) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="e0758702c0a05f789e42bfd9e66fb582728968f05e1eb7147d4eafd08b62793a911c11a41d34a93d45d9801c240676ce708a248ee2e923fc0591c2c276ab2f4040f9ad4fe2cf53", 0x47, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x34000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000340)=0xfffffffe) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000100)=""/164) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="a48f3e8fd99d8b0e95b6d6be2872cdbcda671f3d5223da2b7581e78a7b2447eb627f979daf23b3e5a837622bbdc49221167f0530bf7bd355c4faa2937d48"]], &(0x7f0000000080)={0x0, 0x2, [0x20, 0x0, 0x0, 0x1080000]}) [ 288.983233] binder: undelivered TRANSACTION_ERROR: 29189 [ 288.988740] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 288.988754] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 288.988775] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 288.994463] binder: undelivered TRANSACTION_ERROR: 29201 [ 289.002237] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 289.002256] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 03:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x400c630e}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 289.002270] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 289.010252] binder: undelivered TRANSACTION_ERROR: 29189 [ 289.018215] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 289.018222] Interruptibility = 00000008 ActivityState = 00000000 [ 289.018225] *** Host State *** [ 289.018234] RIP = 0xffffffff811f4764 RSP = 0xffff88018f2cf350 [ 289.018254] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 289.018266] FSBase=00007f68f5094700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 03:34:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x5, 0xc, 0xd, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}, @alu={0x7, 0xfffffffffffffffd, 0x7, 0x7, 0x1, 0xfffffffffffffff4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x100000000}, @alu={0x7, 0xfffffffffffff635, 0x0, 0x0, 0xa, 0xfffffffffffffff0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3b}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcdba}, @ldst={0x1, 0x0, 0x1, 0x7, 0x7, 0x0, 0x8}, @generic={0xfa, 0x101, 0x8, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x60000}], &(0x7f0000000180)='GPL\x00', 0x1, 0x4c, &(0x7f00000002c0)=""/76, 0x41000, 0x1, [], 0x0, 0xd}, 0x48) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x411ffd, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/64, 0x4000, 0x0, 0x200}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) [ 289.088940] binder: 20439:20443 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 289.089837] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 289.089851] CR0=0000000080050033 CR3=00000001c9c86000 CR4=00000000001426e0 [ 289.089863] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 289.089873] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 289.089876] *** Control State *** [ 289.089884] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 289.089895] EntryControls=0000d1ff ExitControls=0023efff 03:34:00 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0007002511000000000000000000759d19c2459f697025546a33c1fd0362145f77db470ea988afe54223485853e8c6183a0cd1b10dbf882354ee6c15105ab1104fbf5ae2fe4e5853854cbfeba8d425be8111d030c87fda25d841a2fe9145b858546d38f79e8156c2a78b1bd5d6e508bc212a50ac58b33b418dcd74bdd484f8306720a76d6084a9056f9f5bd0cbd9f703e3504e6afe2cc71972004048d5fd"], &(0x7f0000000040)=0xe) ftruncate(r0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x6) 03:34:00 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:00 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4100, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000180)={0x9}, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuseblk(&(0x7f00000003c0)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 289.097009] binder: 20439:20443 unknown command 0 [ 289.102908] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 289.150294] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 289.156298] binder: 20439:20443 ioctl c0306201 200003c0 returned -22 [ 289.157074] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 289.157081] reason=80000021 qualification=0000000000000000 [ 289.157088] IDTVectoring: info=00000000 errcode=00000000 [ 289.157093] TSC Offset = 0xffffff638d8c18cc [ 289.157102] EPT pointer = 0x00000001b92c701e 03:34:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x210040) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x5, 0x305040) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000340)=0xf5a, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x80000000, 0x3, 0x80000000, 0x10000}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000180)={{0xb, 0x7}, 0x1, 0x9, 0x2, {0xf0, 0x7}, 0x800, 0x80000001}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$llc(r3, &(0x7f0000000200)={0x1a, 0x309, 0x81, 0x7, 0xe1, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) write$P9_RCLUNK(r2, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 03:34:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x1400000000000000, @mcast1, 0xffffffff}, r2}}, 0x38) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) fcntl$setstatus(r0, 0x4, 0x2000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="9e660f352e260f01cf0f3066b9800000c00f326635000800000f30b800008ee8650f01d1660f133d26eea9d6a3"}], 0x0, 0x30, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00b4034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) 03:34:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newae={0x64, 0x1e, 0xd01, 0x0, 0x0, {{@in=@rand_addr}, @in=@multicast2}, [@lifetime_val={0x24}]}, 0x64}}, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x5) 03:34:00 executing program 7: r0 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) fstat(r0, &(0x7f0000000640)) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f00000006c0)={&(0x7f00000018c0)=@bridge_getlink={0x3b4, 0x12, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x20, 0x40000}, [@IFLA_VF_PORTS={0x230, 0x18, [{0x174, 0x1, [@typed={0x8, 0x45, @str='\x00'}, @nested={0x134, 0x5d, [@generic="23040af0684691d4092f35959435ac6f1327d6afb6eb5365a8e0b0ca6a045d43f93498d2550d24500afa3e97259a60f63d059f3a318ffaaeee93d51eda8914ddb3a4880c99dff79cb97a80ceda605b3cb917d2ce288d9f49dbcf508f4219e0c97512472ee0685162f5ce9c7a49476d8e9b1f398b459cbf4d6ac208c5c1bb1805c483d1d2e4291012d4af32003f2ec4cfe7a30b5834a60dba5af767d2ee83c842db9eb866e18154e0fa6ab38e7cd7f87d275a9045fee234dad99d19b8defecf514997fc6c72c53507a5ff772e60c3239836e77dad4eb95dc974", @generic="bb7b482212ed798020d79227a6606288650b9c653e817624b451688f6b70f7978361f9762f87446653d184437581f3147903f8", @typed={0x14, 0x52, @str='/dev/input/mice\x00'}, @typed={0xc, 0x1f, @u64=0xd0bb}, @typed={0x4, 0x61}]}, @typed={0x34, 0x81, @binary="78363280adb14766dc69b9f95d0b0c4a8cedf1f72af4cc3e239c55997dce6b5ae42bf723023f159244db8be968"}]}, {0xb8, 0x1, [@nested={0xb4, 0x21, [@typed={0x8, 0x41, @ipv4=@rand_addr=0x4}, @generic="77407b7eafeced1dc955fb5ca8e01cded621bb720dcff27dd9c4dda859f6576cabe64620185d8afa4c1576d191d30d52f9e5958a2154a9fa4fb467a9481bf97ec034cbc7e78f2cc0834fa469bca9bda35654378ca99e352da3ed7ac6da6dff232f21b849da3937d1df33791d0458448425932875536f5c5fd610c4cc38166bb4e41011347292573a4bb0abc52e4e3896484aa4eed26b84478c1967397d3e040bc53603a231dbbb"]}]}]}, @IFLA_MAP={0x24, 0xe, {0x2, 0x1f, 0x6, 0x5, 0x4, 0x6}}, @IFLA_EVENT={0x8}, @IFLA_CARRIER_CHANGES={0x8}, @IFLA_XDP={0x124, 0x2b, [@nested={0x40, 0x63, [@generic="83021fd2c236d8b046d2fc4fab49b07e2df65ba94e53c1646811a9dae5b48eb68106b0eb6e081639033c34ddd54f447573e738ebea3ffccd2714ac"]}, @typed={0x18, 0x63, @str="b273656c66747275737465647d4c6c6f2f2e00"}, @typed={0x14, 0x74, @str='/dev/input/mice\x00'}, @generic="6e41f88f6cc2865548011af6330df468c78524bce6740533f13179abe45bcf6ca2ab54b4b695c2bf0a1bb5f9c839e32b4e43b8f76a7581b1e394e91096618c97f0074b3a208ddfb8514efe1bd2792abd23bdca993132b4e8dd61ffbdd4cda4843b554dc68005dbaa2ee6604ac296cf7f7d7aa3a7f4c187826fb934ad", @typed={0x38, 0x8c, @binary="a904c44e44b050fc8f1dc487815882311c4d4e30437556a47e18895b72afb287693c5af83ad98e483ee97526c3b58590dac8"}]}, @IFLA_BROADCAST={0xc, 0x2, @remote}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x3, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x4, [{{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @multicast1}}]}, 0x290) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x7, 0x8, 0x3}) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000540)="d1a5be3abc5e175e95304f26ac61e68776c1e629b2f357a0b14d631c5275aae89da1") 03:34:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x4, 0x9, 0x8}}, 0x28) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9e50b00000f3265420f01cb450f21ef46fcc4827d1e9f9a0b237d66f30f01c8f3451a89005800000f23f1c4619972f50b2e260ff2abe27e0000", 0x3a}], 0x0, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="f20f94ff0f01cf0fc72f6436f0f79b450066b9800000c00f326635000100000f3066b91a09000066b8fdafa70566ba000000000f30650fc7a900700f01cf642e3e0f005a0fb800098ee0", 0x4a}], 0x104, 0x0, &(0x7f0000000100), 0x0) fchmod(r2, 0x158) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000003980)={0x20001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 289.283747] binder_alloc: binder_alloc_mmap_handler: 20439 20001000-20004000 already mapped failed -16 [ 289.305434] binder: BINDER_SET_CONTEXT_MGR already set [ 289.313142] binder: 20439:20443 ioctl 40046207 0 returned -16 [ 289.322662] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 03:34:00 executing program 3: fcntl$getown(0xffffffffffffff9c, 0x9) timer_create(0x3, &(0x7f0000000100)={0x0, 0xa, 0x0, @thr={&(0x7f00000001c0)="117d1c80ab65333b86592dcf7e04e408596ad214f5d2b3927c52a4402f52b7992fab7b25b25130f92ecebbebd65f5c92f7430d6e84fcfc77ce28a023bedeef4f75bcc8fad54a1d56845180d2f5b5a57098e649d9c9b90d21de4d156013f925816a16ab085513545c43fc18f086c60d0569f4cee1940fb8d5587c14b6444ca02cd91616122e6d1cd96543e344a0cfdf7764a885fbc7ca16bf6e74ce6bb89840e5987f005cf9b07d5ea5a52326f3379a82c0713242892ce95acaba5241981c65160d384ba370e50a40747feb277710f15cb3bf899f936f06ec3ba8c66f", &(0x7f00000002c0)="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"}}, &(0x7f0000000140)=0x0) timer_gettime(r0, &(0x7f0000000180)) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) 03:34:00 executing program 4: ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000001280)="025cc80700145f8f764070") r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)={0x13, "e52241e62572aff25bc6590c95974259cd77d6"}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0xff, 0x1, &(0x7f0000000040)="18", 0x1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 03:34:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x2, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x212800, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x6, 0x7fffffff, 0xa89, 0x6, 0x1, 0x20, 0x4, 0x6, 0x20, 0x200000000000000, 0x20, 0x101}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)="1d", 0x1}], 0x1) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x21, 0x5, &(0x7f0000000500)=[{&(0x7f0000000140)="2ea8194f712477", 0x7, 0x5}, {&(0x7f0000000200)="649d5928e1a18383efe5ec661665da9ddfb23b3e947b0fc4e44cfc73f0d7cddafadc61b19fa16d56743e33f1ae220b57600831413b627f2723ab437aa39072c28bfba33c5397b4e78ec45305b11a18c0abf2bd0fe9ecb89b451ebeff2cfefd8c13799315a1f6037c37006c3fd453e55f35f77e994a08d13ffffda4991662e0ce8b6e94277876911e71bc402f133e62336dd45b12beed253e98eef195b783a7c6e3e0af12f758a6accf74457779e0d9a93ca84c56a2ed83e94e4edf9a798edc80b8e750c1f193051a40aadba261", 0xcd, 0x100000000}, {&(0x7f0000000300)="cad9395ec12be8771120e317f6a3fc17fb5ef5a2554270e4d3bba8c9ba60786f678b41a91e4f7d6e9526b4358d43a4ddcbcd35195bda83725c480be3e3a28ae75d75d847ea877fe35f340c71ae11e590677ac792979dfc", 0x57, 0xd3e}, {&(0x7f0000000400)="cb539fe51965fb45f221491152368b080f0c8c6e0421ca7c6331d13a2a3e621639076a6a014ebcf51038cfd529406cdf754f31d6d73bcfa34932a7c959521332c6fc7a4ba78b90cdb73d095c3b88415cc0b4017f40f751e8f9", 0x59, 0x40}, {&(0x7f0000000480)="43f5f3e73df4f27ccb7e9a99b259c48eabba4fedf83cdf6dadbea7e09641373a4de42aa9ed421107391b9d1d96e5cc20f823a1a47b23c3ebed83cbd827710cf5e292f5e155d2ef1beffae1b42af4d33e", 0x50, 0x8}], 0x280000, &(0x7f0000000180)={[{@nodots='nodots'}]}) accept4$alg(r3, 0x0, 0x0, 0x80000) [ 289.333215] binder_alloc: 20439: binder_alloc_buf, no vma [ 289.338833] binder: 20439:20477 transaction failed 29189/-3, size 24-8 line 2967 [ 289.361946] binder: 20439:20443 Release 1 refcount change on invalid ref 1 ret -22 [ 289.369864] binder: 20439:20465 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 289.377028] binder: 20439:20465 unknown command 0 [ 289.399891] binder: 20439:20465 ioctl c0306201 200003c0 returned -22 03:34:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x339442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x40) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff8, 0x6, &(0x7f0000000380)=[{&(0x7f0000000140)="806960daa55d8a2ac18dd2ac8be528b59b6c11eb96dd55cf7a9d04fc322e355ab08c93d8fe6bf0fa06344f51bb2e4a377a628c1155232908e271e9d60dcbef48b2e3c14d5d8ffc4871006b58820e9b80f5966cc02e5ffa26039e6328d747a350045ddf7131e513ee5fbffd2f6f4d9aadd149d7", 0x73, 0xfffffffffffffff8}, {&(0x7f00000001c0)="93f66e0151e7d3d75e01fedafcda0d83b2ea0b04a77d007b5d6f492f99f2fb106e408e49946d5e40168d33e879ff466c4adc59a0dfe366ef0172cd1e3daa1ff181c818f77760f6534f8baadfad9e71efb72192eaf8a1c398547806cf476493f33507f2203c5ff317e2e799349fe8c1e1d72c9d3ccaa19e2e58898f1abce8", 0x7e, 0x4}, {&(0x7f00000000c0)="ae9e59b567c949088f00800b5f3d63db567c2409d6f00d1c1ee3fe9a1ad52f2030d2ce841d1c24", 0x27, 0xfffffffffffffffd}, {&(0x7f00000002c0)="e355be1845d16796af590c96701b5e973edbd3b987fa02cded86b52c1dc1d199af56b1dee8316e681fdf134af6b9dfeeb38649a088bd768b356516b2700fe078af9d2a8c0c65439185868ea154a2a72624524c1fbbcc7ff49d8c9084585abd886ad663d4", 0x64, 0x8}, {&(0x7f0000000240)="9ec93a3a90e2834fd52c74e04133f7311dbbb8fd0733d12a7e60ffd1eb98f116", 0x20, 0xda}, {&(0x7f0000000340)="6be72887b0ef6574fd3f282ff979531e031f96", 0x13}], 0x1000, &(0x7f0000000440)='\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0xe9e7c7e3eef64e76, 0xdbe) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000000edff73000040"]) 03:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046302}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 289.440542] binder: send failed reply for transaction 395 to 20439:20443 [ 289.449370] binder: undelivered TRANSACTION_ERROR: 29189 03:34:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xb8b, 0x781182) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x7d65}, 0x1c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x2, 0x20, 0x3, 0x2}, 0x8) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x232) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xfdfdffff}) 03:34:00 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = getpid() socketpair$inet(0x2, 0xa, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x9b, "89cb022ca51100d924a9a67472f6a218eb676f7eccfffd85196e4d76186df3fc548c75b9733c7d5a3d93af4538bd71d31a6d9a778a5ab8f4d7f4d9cc7c147e26e7b9df5c8e95fcd671dcd45fc147fd73c9808d78375355d95661bd11d540a1c799c7d9bb8e62ca5aaa374c1410f2f7526eb11169a6b34071bb71800985b7ff206c94d8f9e51ba136ba7d818ad9490dfd252760399d06bc33d58864"}, &(0x7f0000000440)=0xa3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000480)={r4, @in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x5, 0xd109, 0x2, 0x80000001}, &(0x7f0000000540)=0x98) ioprio_set$pid(0x1, r1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x80000000000020}}, 0xe8) r5 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8000, 0x240000) accept4$inet(r5, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000) rt_sigtimedwait(&(0x7f0000000580)={0x9}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x1c9c380}, 0x8) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x6d, 0x7, 0xffffffff, 0x0, 0x0, 0x400, 0x4, 0x1, 0xfffffffffffffff8, 0x6, 0x7, 0x2, 0x3, 0x100, 0x100000000, 0x3e2, 0x6, 0xe1f2, 0x0, 0x4, 0x80, 0x20, 0x1000, 0x5, 0x1ff, 0x1d7ffffff, 0x4, 0x5, 0x0, 0x8, 0x7, 0x7, 0x8e, 0x3, 0x0, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x1, 0x5, 0x6, 0x7, 0x0, 0xffffffff00000000}, r1, 0x7, r5, 0x9) connect$inet6(r0, &(0x7f00000002c0), 0x1c) ioctl$TCSETSF(r5, 0x5404, &(0x7f00000001c0)={0x100000001, 0xffffffffffff7c07, 0x7, 0x2, 0x4, 0x78ad7c7c, 0x9, 0x18, 0x0, 0x8000, 0x0, 0xff}) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000640)={0x6, 0x7d, "1f5ec64a3467b12ac695e7e23986df49ce65e4bb7a8f3d41931aa8fb8485a061f5c7f8555f17188bab3c91ffc5fef311d9436486dfbf7e1cc842bde11d215477f051fdb78ff0b8b9ea80988ddda1833940cedbd5594e60830fdb7d9533699529f23ef32492aa21e955439a3cf95a0dd0fe7a9aab6504cbdcae73010ac5"}) 03:34:00 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x24001) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000140)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='veth0_to_bond\x00', 0xab93}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x2}, r2}}, 0x30) 03:34:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'}) r3 = getpgrp(0x0) sched_setattr(r3, &(0x7f0000000140)={0x30, 0x0, 0x1, 0x5, 0xecaa, 0x6, 0x9, 0x8}, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)) close(r0) [ 289.574292] binder: BC_ACQUIRE_RESULT not supported [ 289.608688] binder: 20503:20510 ioctl c0306201 200003c0 returned -22 [ 289.628329] binder_alloc: binder_alloc_mmap_handler: 20503 20001000-20004000 already mapped failed -16 [ 289.647251] binder: BINDER_SET_CONTEXT_MGR already set [ 289.654536] binder_alloc: 20503: binder_alloc_buf, no vma [ 289.660180] binder: 20503:20530 transaction failed 29189/-3, size 24-8 line 2967 [ 289.670489] binder: 20503:20510 ioctl 40046207 0 returned -16 [ 289.685614] binder: 20503:20536 Release 1 refcount change on invalid ref 1 ret -22 [ 289.693546] binder: BC_ACQUIRE_RESULT not supported [ 289.698685] binder: 20503:20537 ioctl c0306201 200003c0 returned -22 03:34:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x2, 0x7, @dev={0xfe, 0x80, [], 0x13}, 0x12}, 0xffffffffffffff39) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x100000600000) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x11) r2 = msgget(0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000012c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r4 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001140)='/dev/input/mouse#\x00', 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/4096) sendto(r0, &(0x7f0000000140), 0xcc, 0x0, &(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x4, 0x2, 0x2, 0x3}}, 0x80) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001400)=""/19) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000011c0)={0x0, 0x10001}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000013c0)=@assoc_value={r5, 0x2}, 0x8) ioctl$RTC_PIE_ON(r1, 0x7005) [ 289.706770] binder: send failed reply for transaction 400 to 20503:20510 [ 289.715781] binder: undelivered TRANSACTION_ERROR: 29189 03:34:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000180), 0x1026e, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x18, 'b0b0\x00'}]}, 0x3c}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x200000) 03:34:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:01 executing program 7: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000001, 0x100, 0x6, 0x100000001, 0x9, 0xfffffffffffffecb, 0x100}, 0xffffffbb) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xfffffffffffffffd}, 0xfffffffffffffeaf) 03:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106312}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:01 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x134a4bcb, 0x2140) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r1, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x149) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x7fff, 0x7}) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x10}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8}, &(0x7f0000000240)=0xc) ioctl(r0, 0x8912, &(0x7f0000000580)="025cc83d6d347a8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x10}, 0xfffffffffffffc71) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000611000f40000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x101000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r4, 0x100000000, 0x1, [0x3]}, 0xa) 03:34:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4d, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) 03:34:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0xc922, 0x0, 0x6}]}, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000b3200000000000000d321000000000000"], 0x1}}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000180)="a142f75bc39f4b47f9587b2572e79fa6b144788d91f7bb7b89d574113f803b937e81bb2c4aa49591da70a4f195a92ab852172a9dfe1123f6b620dad855fddcf2c873201a7c1c3bf72dfc5b6bf225adc246b4f7a9b1e44eff0dfea32e3730b38383f48fcb3836bfd6453c77bf1677", &(0x7f00000002c0)=""/96}, 0x18) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c) ioctl$int_out(r0, 0x5462, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 03:34:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000440)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x4}}, 0xa) read$FUSE(r1, &(0x7f00000015c0), 0x1000) ioctl(r0, 0xde, &(0x7f00000025c0)="846c2c965abbced488f947e13f9705534c311a15cd4d9ef71b99fcd4c93e55820713593270879bc75df13ac3d79764a0952cfcba9a6f02be9b5ef16b024a31767337f72554506c87e425d66f8462f6c4e1b309fc2216e676e44eaae83a2434db7c86f5263dd3787df92d23bf7a16c10732cf691aa7d1423e76de9915b897d05d78c024f631da9606abb53997228e8b56bb65753e9db7468412433ec6189f9df293f508fceeff40a534aa8d931ebacbc590b37042475fde97b0121b30f67fe44f3ba00c3f35a05cf79f4ed4ec") write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x1a, 0xfa00, {0x0, &(0x7f0000000280), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x20) getgroups(0x8, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x5, &(0x7f0000001480)=[{&(0x7f0000000080)="f1448cd0c1f6082369154301826dc8976207640d8d7b59fec551f28e3f0c7d62fb8389064113911c1888f2e9c5efb2183c9ce5bdfeb6aeaa4b8cab18c91c74106fb77b460ae0d197b3841642691d6b34fb3a5ca3ef952ff59677aec60d46a5857cb8c70cfb35d53293558d5f59dcc76f6618c012f1e490949c4b49f31f64770f3d051b44555b574091471aab9ae2480e34dc24c452e6d8d68ec34aa1d4dc8593d80912b0b9202392b75c4cf1d06dd47308b316a90b24d70be8e92c123ff930e2c68a16fe57ddf09e36022a720189f2953105", 0xd2, 0x1}, {&(0x7f0000000180)="47be2703d85f2bf55762c74ce5b249c14f3c383ce58db4caa1d81c53e9ff27f0f4502d777d68f3c8c36c0b6cee2ad1f10afbd1d37976786e53104bead95370aaa01726e7c61f96f74dae1f565b57faec704853086b69d0fcd356b5007e8117c051b25713eee4c28d3cd381613904001e72210b211548e17c1296f759b76e03990da7da25a0c7120900cd6521ed8905", 0x8f, 0xc1}, {&(0x7f0000000300)="c3d72c79a7c60085582c4bd0c1ce6456e2acb9be8debd5912bc227aedd52a9a004bc539510f3dbc432cfc65392add81bef39ebfd09ceba19c77344c99be2aaa7d5cea4378c0968e1a748364a3c4c8c0045a9be618ed9e11af7eefa896771c356e6ffbee2f62aa005ac97c9e6e9bbdad8d22da53b1109b187ffa1fcdd2b27ba35d428c9959e50f0407e8a93e4066d5cdbad36a0946cb500fc1760f976d0497e1e1693aa7ef1e195e63c737ed57bd133b830fe714b2e05", 0xb6, 0x281}, {&(0x7f0000000480)="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", 0x1000, 0x4}, {&(0x7f00000003c0)="760b810307fc72e3db5d277df6da248d334e0b59de7a5b25e91c6a95c934f82d03a836292fb62426f863df6a0faed6374836371413cd8c1aece118100d1da07c262ca90fd8604e80de14d46539727108a341587293da26a79058756786a7e2202e0a54a3c4b101b6d5487c9fb0", 0x6d, 0x3f}], 0x200c1, &(0x7f0000001500)={[{@dmode={'dmode', 0x3d, 0x3}}, {@check_relaxed='check=relaxed'}, {@cruft='cruft'}, {@gid={'gid', 0x3d, r2}}, {@hide='hide'}, {@norock='norock'}, {@mode={'mode', 0x3d, 0x9}}, {@nojoliet='nojoliet'}, {@check_relaxed='check=relaxed'}, {@session={'session', 0x3d, 0x4}}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:34:01 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000100)) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x13000, &(0x7f0000000100)) 03:34:01 executing program 2: unshare(0x8020000) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) r1 = semget$private(0x0, 0x6, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(r1, &(0x7f0000000100), 0x2aaaac20) r3 = socket$inet(0x2, 0x7, 0x5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e21}, @in6={0xa, 0x4e21, 0x80000001, @local, 0x23}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0x200}, @in={0x2, 0x4e20}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x3f, @dev={0xfe, 0x80, [], 0x16}, 0x9db}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r4, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7f, 0xb7d3}, &(0x7f0000000140)=0xc) setns(r2, 0xfffffffffffffffd) 03:34:01 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'veth1_to_team\x00', 0x9000}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x80) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='io.max\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000000000)='./file0//ile0\x00', 0xa0000, 0x40) [ 290.291368] binder: 20558:20566 unknown command 1074815762 [ 290.306649] binder: 20558:20566 ioctl c0306201 200003c0 returned -22 03:34:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000b134d3f614f8e28ce32f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @mcast2, 0x6}, 0x184) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) [ 290.363949] binder_alloc: binder_alloc_mmap_handler: 20558 20001000-20004000 already mapped failed -16 [ 290.386660] binder: BINDER_SET_CONTEXT_MGR already set [ 290.392086] binder_alloc: 20558: binder_alloc_buf, no vma [ 290.397696] binder: 20558:20586 transaction failed 29189/-3, size 24-8 line 2967 [ 290.408379] binder: 20558:20566 ioctl 40046207 0 returned -16 03:34:01 executing program 3: r0 = socket(0x40000000815, 0x80000, 0xfffffffffffffff9) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/4096, &(0x7f0000000000)=0x1000) [ 290.431127] binder: 20558:20600 unknown command 1074815762 [ 290.435750] binder: 20558:20599 Release 1 refcount change on invalid ref 1 ret -22 [ 290.458146] binder: 20558:20600 ioctl c0306201 200003c0 returned -22 [ 290.490172] binder: send failed reply for transaction 405 to 20558:20566 [ 290.518257] binder: undelivered TRANSACTION_ERROR: 29189 03:34:01 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'}) r3 = getpgrp(0x0) sched_setattr(r3, &(0x7f0000000140)={0x30, 0x0, 0x1, 0x5, 0xecaa, 0x6, 0x9, 0x8}, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)) close(r0) 03:34:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0)) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x15, &(0x7f0000001180)={@remote, @local, [{}], {@llc={0x4, {@llc={0x0, 0x0, "a2"}}}}}, &(0x7f0000000040)) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r2, &(0x7f0000002e00)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x40000000000014d, 0x0, 0x0) 03:34:01 executing program 7: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xfffffffffffffffb, 0x31, r0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x5411, &(0x7f0000000040)) 03:34:01 executing program 3: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xd7e, 0x3, 0x0, 0x0, 0x3f, 0x100000000, 0x216, 0x40, 0x2d5, 0x1, 0x8, 0x38, 0x2, 0x4, 0x0, 0x6}, [{0x70000000, 0x6, 0x4, 0x0, 0x3, 0xfff, 0x626, 0xc2b}, {0x60000000, 0x9, 0x10000, 0xfffffffffffffffa, 0x1c, 0x3, 0x1, 0x60000000000000}], "9d995a6c2da304c6c13b3d7c404fff6a5877041b4662ee34fc64ad5424e2c036169470a79ecfbf4ab8931d337c1ae227f355560f1fdc9825ad273cf1ee1bfb0490b894", [[], [], [], [], [], []]}, 0x6f3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff00d34f7666692af122677d7bb3568e78dc16ded39a5bb045510eaa03009ff5c4b0b27bf892dc08db61cdbfe54fb93552dbfff3b38190ddb8d4129638edca1280c65e8d73539646fa95140194a180889fc85838b15d0926ce09a30043e50f194a2e8bf75a5b0f75787d47380e78996ddbe0c57dc7730a77d398e5baf20d4ae9c0cd7841b065fc82412d0b8b029b0ee7"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="58000000000000000000000000000000050000000000000000000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x4bb, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xb}, 0x48) chroot(&(0x7f0000000080)='./file0\x00') 03:34:01 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0xfffffffffffffff5, 0x1ffffffffffffc) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)) ioctl(r0, 0x1, &(0x7f0000000080)="dcaa7dd669bb36") timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) 03:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40486311}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x10001}) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:01 executing program 6: r0 = socket(0xf, 0x80000, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100, 0x40000) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x3, 0x4, 0x0, 0x16, 0xb, 0x2, 0x4, 0xb4, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x5, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x10013, r2, 0x0) 03:34:01 executing program 7: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fdatasync(r0) [ 290.604887] binder: 20632:20635 got new transaction with bad transaction stack, transaction 410 has target 20632:0 [ 290.615491] binder: 20632:20635 transaction failed 29201/-71, size 0-0 line 2879 [ 290.626218] binder_alloc: binder_alloc_mmap_handler: 20632 20001000-20004000 already mapped failed -16 03:34:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x600000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000180)=""/112) getsockopt$inet_int(r1, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 03:34:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07071dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r3, 0x500, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 03:34:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x100, 0x0) socket$inet6(0xa, 0x80e, 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)=""/83) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="aff7216e49f7f19c13a6d93b7aea3424220a675d0893302c7d5cefeffd57f58bcbf82722e6d06fb7d2cdbb7d03166171e47c1219e4986c0ccc265161967e61", 0x3f, 0x1}, {&(0x7f0000000440)="c0c5f8e66f586e8a63ef965afe430a9cc02fccc7482170c3c35d349914673c87f66ab462c5a6697fd9f4a1b47938d84e8ce2a663eefbc9d09839d45b2bf08043788e2f69df6e2b1a16fc4e0a824ec4f1cdc7b591c6c31bf1788e564414f2e7b702762f46a8b143285c2a1ded552d49fbb664387594618ac6f3ba948d161d3cddd5649e6db0d449a7ddb0341240ea7d73646b0cbab152fa07f307f2fb31422b264a48070ed1cac2bf6dbe3d8ce542ae2fc7dcfcc500f919800e88b9f6068ee6016391532596a2f906b8", 0xc9, 0x2}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6c61726765696f2c00517008bf2bcfeece600944f21b2d585870014de233fc1f66157cc2a7ba0c0cc2e35591b9321324af986b327053ce6be6627bb02c266696174d7b07fda6401809f70b912e3d4b09a30733e78205bb25f81797acff26cff19396d689c864bc5609cef2fca9dc52cc27ab86"]) mount(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)='gfs2meta\x00', 0x2000, &(0x7f0000000100)) 03:34:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000000)={0xfffffffffffffe00, 0x200}, 0x8) [ 290.654734] binder: BINDER_SET_CONTEXT_MGR already set [ 290.664875] binder: 20632:20635 ioctl 40046207 0 returned -16 [ 290.691849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:01 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0000002006000000"], 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffffffffffff575f, 0x18000) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000140)=0x60) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x1, 0x1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0xc85}, 0x8) getsockname$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r0, &(0x7f00000069c0)=[{{&(0x7f0000006840)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000006980)}}], 0x1, 0x0, &(0x7f0000006c40)) [ 290.707565] binder_alloc: 20632: binder_alloc_buf, no vma [ 290.713208] binder: 20632:20661 transaction failed 29189/-3, size 24-8 line 2967 [ 290.728793] binder: 20632:20635 Release 1 refcount change on invalid ref 1 ret -22 [ 290.736680] binder_alloc: 20632: binder_alloc_buf, no vma [ 290.742342] binder: 20632:20647 transaction failed 29189/-3, size 0-0 line 2967 03:34:02 executing program 6: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x6, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0x78, "2bdc20ef2507483aaf62d379257110a98e6e8b3cc9aab842a9b3ff9e2e7a5d6d8fb6b064741b671a8c190bf8987c629273b5b736ffee235c081339e96eac4f7565d9a30abb3850438c9901c46d6faefc18c385779799bb1c6075333c918d0b40b3096edf2e0eddc206ea08ba58047c495aff74f80ceb602d"}, &(0x7f0000000580)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x9, 0x8204, 0x4, 0x1, r2}, &(0x7f0000000600)=0x10) r4 = socket$inet6(0xa, 0x8006, 0x4) ioctl(r4, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000940)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRES64=r3], @ANYBLOB="b20000003fb4f3c1af7652e276e711c2657a18a5b330d4762d5f9fb75b009abcc7643f9233493b4b23a9013c56e188b1400c41b248534e1d95d6440022b4a16bc8089cf82f1fcbe99871d2f838a3fe9a291e8af2698dcda6a351bc020d6a4e55d57a3efe371d6477104b763ef79123e34f66a1c1a7c4c7616daec459b2c371094cc536214ced0656f922455a7e6489e4b7d71add3f4c77b2f751043ddff6fa34e9a5e54d95bd84f4f5590b77af87958ec906bd4dc5b65f92e192ee722705cd7d488fc239cf036a64d90ee7ef6434360bc23b6ec69929cb8bf271e4c41e84522d44a279072caca24c9bfa89279c2cfd4808b3ba89405ea73b652e47957e602e09d202d2ddfb3e43d8a7ebe10ba89b69263288bc1eb8e8c27a4a6ae2d973513bba3fc06be8f0da4bdbbf48bf69db2c67daf527a33f405ec918868847996c34052c4555c92ced858c592e2e9c49c64cec837e"], &(0x7f0000000440)=0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000001c0), 0x4) r6 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x7fff, 0x100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000240)=0x1000) 03:34:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@usefree='usefree'}, {@dots='dots'}, {@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}]}) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x0, 0x2, 'client1\x00', 0x1, "f78aa76868ada49a", "e4ebdd80097934936efdc347313bbfe697a53245a1dfbdb0c0e7260210347f5c", 0x1, 0x8}) [ 290.757068] binder: undelivered TRANSACTION_ERROR: 29189 [ 290.763037] binder: send failed reply for transaction 410 to 20632:20635 [ 290.770260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 290.816570] binder: undelivered TRANSACTION_ERROR: 29201 [ 290.822145] binder: undelivered TRANSACTION_ERROR: 29189 [ 290.833676] FAT-fs (loop3): Directory bread(block 2563) failed [ 290.840162] FAT-fs (loop3): Directory bread(block 2564) failed [ 290.840180] FAT-fs (loop3): Directory bread(block 2565) failed [ 290.840196] FAT-fs (loop3): Directory bread(block 2566) failed [ 290.840213] FAT-fs (loop3): Directory bread(block 2567) failed [ 290.840290] FAT-fs (loop3): Directory bread(block 2568) failed [ 290.840307] FAT-fs (loop3): Directory bread(block 2569) failed [ 290.840324] FAT-fs (loop3): Directory bread(block 2570) failed [ 290.840344] FAT-fs (loop3): Directory bread(block 2571) failed [ 290.840364] FAT-fs (loop3): Directory bread(block 2572) failed [ 290.876879] XFS (loop2): Invalid superblock magic number [ 290.951378] XFS (loop2): Invalid superblock magic number 03:34:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6a}, 0x2c) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffe01, 0x20000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xef, "5db49b567017eb23d4c7f1798a8a84969985244453323b9cff45f1c70243b370319bce8eb3d6dd3614461eaa5cf075d0544631dbb34126833368c6ae7ed4a86569b89d27e0589a78159bee7bfefdbbe715608cd677a4125a1d6b07a5540946a489b2fce889502cd20f2bb963b48c2becd8939b2ae454fbcf9fd9940c6f175017f73f0f33137167945531a3bd75610504d845e3d97ff0523bf3b3c06e3ae37fa46197fd471327efe921afb9e96abd727ebd7e95515f981ef29c5b123ec732b14d8e0ca9aa72865011925dd0c5e1c79edac4dbe4972ec2d341b4804c23ac1c7a9d634734eb8aa775eda85ccc9a8ac101"}, &(0x7f00000003c0)=0xf7) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0xfffffffffffffff7}, &(0x7f0000000440)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x29b, &(0x7f000000cf3d)=""/195}, 0x48) 03:34:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40086310}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"a627af80924c7320b8e50000efffff7f", 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0xa, [@broadcast, @remote, @dev, @broadcast, @dev, @broadcast, @link_local, @local, @link_local, @remote]}) 03:34:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="080000003e00050100000000000000000a000000"], 0x14}}, 0x0) 03:34:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000400002, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001400)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 03:34:02 executing program 2: r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="a9536bda7fdff51b18c5a14784b26bf2cc63c8f416f17ce270c754c24db7d8d3f8b5fe1df5653342ac6bd1bb75a5e053128f5225c6946b257ef1411fec45a2fa6adb943d7f17b0baea673bc78611e4896962e804e3a92cecd7d875e3513294abb6f472aa488605e7c9e9f5f2700c588befe716a6fd2ca40a8c0a8f084daf19955d698dd4fe76949e02fd77", 0x8b, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f0000000200)=""/132, 0x84) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0xc) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="1eb68b72246c8411960cadc3b73af83159d6ba3a448a8c82c638bee88df33d44232316bca1780b490cfa7a29ff25bc72ea994e9788f274adb4d055360b7aa405777be13d8ef5294d1abad8da6bb3a70a3aa035513c341f2b7686ea6fd165b9d24787ec4026", 0x65, 0x8}], 0x0, &(0x7f00000004c0)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@errors_continue='errors=continue'}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@umask={'umask', 0x3d, 0x3}}]}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 03:34:02 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x4}}, [0x8, 0x4, 0x4, 0x3, 0x7ff, 0x4, 0xc0, 0x6, 0x0, 0xc921, 0x1, 0xfffffffeffffffff, 0x4114, 0x4, 0x1ff]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r1, 0x2a, "90f86120e0dce209c9c5dd5e9667a1dfdede2805c9daa69bdc7717917d902a67619469aa90f07dd42615"}, &(0x7f00000002c0)=0x32) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, &(0x7f0000000100)={0x0, r2+10000000}, &(0x7f0000000140)={0x8}, 0x8) [ 291.549200] FAT-fs (loop2): bogus number of reserved sectors [ 291.555111] FAT-fs (loop2): Can't find a valid FAT filesystem [ 291.580851] binder: 20723:20730 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 291.588338] binder: 20723:20730 unknown command 0 03:34:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x65) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001a40), &(0x7f0000000280)=0x162) ioctl(r0, 0x8912, &(0x7f0000001a00)="025cc80700145f8f764070") getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/113, &(0x7f0000000080)=0x71) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x357, 0x800) accept$inet(r1, &(0x7f0000000200), &(0x7f0000000240)=0x10) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000002c0)=""/4096, &(0x7f00000000c0)=0x1000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/rtc0\x00', 0x10080, 0x0) r3 = semget(0x3, 0x7, 0x1a9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000014c0)=0xe8) lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001700)={{0x9, r4, r5, r6, r7, 0x80, 0x100000001}, 0x6, 0xfff, 0x5}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x5, 0xb, 0x17, 0x1, "d3a63a8be0f5d441b6a5896beb10ae94768423817e36cab70e6242cc6e53a31e2f02eaa1e593a5b07954933723d27099247a4b7f3933d0263f951fb91c42c0a8", "6c8f082e096602a01e3fecd7e5ee9e870a7f5324e14b95699b36a509040c97c0", [0x3, 0x5]}) fdatasync(r1) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000001980), &(0x7f00000019c0)=0x8) setuid(r6) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001780)=r2, 0x4) name_to_handle_at(r2, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000001940), 0x1400) 03:34:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x2) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000001240)) getresgid(&(0x7f0000001280), &(0x7f00000012c0)=0x0, &(0x7f0000001300)) write$FUSE_ENTRY(r1, &(0x7f0000001340)={0x90, 0x0, 0x7, {0x3, 0x0, 0x6, 0x9, 0x80000000, 0x4, {0x5, 0x7596, 0x7f, 0x7, 0x330, 0x4, 0x51b, 0x1, 0x7, 0x4d, 0x5, r2, r3, 0x200, 0x6}}}, 0x90) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) openat$cgroup_ro(r4, &(0x7f0000000200)='cpua.ct.usage_percpu_user\x00', 0xf0, 0x0) 03:34:02 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x79d}, 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 291.602816] FAT-fs (loop2): bogus number of reserved sectors [ 291.608727] FAT-fs (loop2): Can't find a valid FAT filesystem [ 291.630310] binder: 20723:20730 ioctl c0306201 200003c0 returned -22 03:34:02 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="4697e8a469b01c10945ef331fca8c4b6a3c736b601b20a1d3e81b42359ffa3c019fdeeace4fa7f7b27af25fb6aea8e9b91043ee854be4c356ca0aadeda69c69988707f9a65bfe90ed5c59b4a478d111ac5b467825b"], 0x1, 0x0) r1 = msgget(0x3, 0x280) msgrcv(r1, &(0x7f0000000100)={0x0, ""/230}, 0xee, 0x3, 0x800) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)) 03:34:02 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f00000003c0)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x66cb, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) r1 = syz_open_dev$sndpcmc(&(0x7f0000002740)='/dev/snd/pcmC#D#c\x00', 0x7, 0x20002) r2 = syz_open_dev$mouse(&(0x7f0000002780)='/dev/input/mouse#\x00', 0xfffffffffffff801, 0x100) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000027c0)={0x2, 0x20, 0x1, r2}) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x4200c0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x9, &(0x7f0000002600)=[{&(0x7f0000000140)="34745dee4cd06e0a1a24f241128d224f58d4078573c30fc2a90340c8d94a7ab7a21b51a00044195a5fe33a4b951644a6e42ca1cbd447de5a1fe4d88db30e665e1b21939357a296d14a22b41666385c2810551b3b141699d3ff99fed7d496f14ffdb203af70b17cea101e1ab86be7a74a485d66aad2bdf845da96f454edf10418397127bd", 0x84, 0x9}, {&(0x7f0000000200)="870c9c2ea99c893a8ec419ddc403f93b6c24b2ac5f5d230986ad784ac92cd214408201929a08ee247c04c71aa56e80c6aadb8f88711150275e01ef88794ca2f2b17982477708d20e6d57e127fd4e4f287b390f225541409f1ddd08a17e8cda642517023ea48354ca08733b7367376a3b270ac75a4d9cbf55be97066a91e90efb973578f4778ae53514458d6024bd402b8d039360ea", 0x95, 0x10000}, {&(0x7f00000002c0)="1661f0dc77554a3eb4b06b9de60da9ed8f8d1ecfe0b99a988b6b81174271fc6168e53033e8a26c69b34afd78816f6bda65f09d19523ed3db053bc28aee31290e7c60e2c837f842818365d7b5", 0x4c, 0x20}, {&(0x7f0000000340)="eb5e9a858c38f0f3e14d8165059b30115f56b0ebc151f6cfd12f6aef6e4a65c09ed50d4223aea7730b3d8ce3a5dacf872f7a8fcb26f11902c30f2f169448a0f953ffbfabd15b81883a0c071d2f8dfaa5d7b0b2a9615a69", 0x57, 0x40}, {&(0x7f0000000500)="29ae8daf3d5f77938e8d2495cad156520a7b81ea35f6f304282e73b7a147a1b7f594858702bd0da3f206a8f07595", 0x2e, 0x6372}, {&(0x7f0000000540)="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", 0x1000, 0x8}, {&(0x7f0000001540)="be03fab18bbff747995ecdc2e4dff6bab9069cbd9a5c1820d9b9677137b9a2d6062043c32e062b7bd7d180963b", 0x2d, 0x1}, {&(0x7f0000001580)="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", 0x1000, 0x8}, {&(0x7f0000002580)="d0ad7241911519470e5e2e5a6a8a74a3fb1ca6246e42d764c4551850c476645b5fb0ac07ba5204b19b30bb25eb8087d5d2863e274b2c15afe1a8407c06725965a715d29d6b9933e7dbc175c4a187da2a77fa4a8d33a82c089e59", 0x5a, 0xb965}], 0x1000090, &(0x7f0000002700)={[{@noinode_cache='noinode_cache'}, {@autodefrag='autodefrag'}, {@usebackuproot='usebackuproot'}]}) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000080)={0x5, 0x5, 0x1f, 0x5, 0x40}) [ 291.663519] binder_alloc: binder_alloc_mmap_handler: 20723 20001000-20004000 already mapped failed -16 [ 291.678143] binder: BINDER_SET_CONTEXT_MGR already set [ 291.687174] binder: 20723:20730 ioctl 40046207 0 returned -16 [ 291.711915] binder_alloc: 20723: binder_alloc_buf, no vma [ 291.717634] binder: 20723:20762 transaction failed 29189/-3, size 24-8 line 2967 [ 291.729651] binder: 20723:20730 Release 1 refcount change on invalid ref 1 ret -22 [ 291.737615] binder: 20723:20747 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 291.745031] binder: 20723:20747 unknown command 0 03:34:03 executing program 4: rt_sigsuspend(&(0x7f0000000040), 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x200, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000200)={0x1, 0x1, {0xa, 0xb, 0x13, 0x11, 0x2, 0x7, 0x5, 0x138, 0xffffffffffffffff}}) clock_nanosleep(0x0, 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x400200, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={0x3ab}, 0x8) r2 = dup(0xffffffffffffff9c) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) pkey_free(0xffffffffffffffff) 03:34:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r2, &(0x7f00000005c0)={0x1dd, 0x7d, 0x0, {{0x0, 0x1bc, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x174, "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", 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x2c2, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x1dd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)) [ 291.765745] binder: 20723:20747 ioctl c0306201 200003c0 returned -22 [ 291.796374] binder: send failed reply for transaction 417 to 20723:20730 03:34:03 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/netfilter\x00') r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r4, r5) tkill(r3, 0x15) 03:34:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40406301}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:03 executing program 7: r0 = socket$inet6(0xa, 0x4000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x1000000000009}}) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000180)="74775d3338ef2e1ce07117b783f589f3e8c03144c81323e32611006b2470d016b842191335869d81b4061d454eb53ae2eba6d05011a62e96b4b1f51ee671b49371d8d2d8ec2691ee6a3047d340755f5f0146a03679f54e6cfa825f6d2237ce926f2dacfb2dfdb507358e", 0x6a}, {&(0x7f00000002c0)="c735414caebcf7d9fc3bd3e2a779a315bdef0875935d815e5d63e0be068420549fe337824249961e5241370ca1f92516335001c7dbc951a075953393af300e9dbb40d157660b21270ec0bd8bda187eb37dc4070c8dfbb8dfb65bc3725557bd6b34551f63e802b91365df24211e06f3ab72b7342456b94d50e58831e75fb156bbdf5463b8762eb3af5348671e4e39ec7b34eb2e", 0x93}, {&(0x7f0000000200)="a37bd63c3e8b51eb109dcac9d35c60d6f85c2f04146896dc78045032d714e2671c6f569935a659be4d40", 0x2a}, {&(0x7f0000000380)="6bc316fadbc4ee40a5232fb29cf2a15e6c1cdb3fd7cec676e3ea407d99ec6f16fb03371154e2b13f04d8979ad0332d8070a6392602de4937229539d793cf062c40711d350d74f06114c39ae100b56705ec4d7b948ab7c6d504a22eb254ebe4a7d3095084f28bdcc8e7d883b9232a44c2e1bb9b479862e7e3c9a6936b51a52dd18655b3630b84768cf61d0966356e35e9e85581390f4b9e2d811a2233f0eb1b1f17f7efe84e707c803d35edea50a14b9edd812802424a3cec0feb8313befa0c5d8ec6a6ab55", 0xc5}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="2a878f8d59151a6258c1d91001265aa086b397f28ed3028ed4f85c2da584d63083000e32cd3dd6d128d70aedb77e19cdf56e3c038074747dfb7683a48be9f026859ea157875279484ce847e624ef16f479ce81eb3b370c237db434694eb4f4f012957194cf5cfb4be407fb7d3ecc7a4d58cb", 0x72}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="383881be4536d9df7eb24300276b8245d774d1c8262c95a4661d23d2fd4fdc7917b4f02194958d69de2774f96ef16a4ca49eaa6e8b0c933b4a34a6f3c8e52cea998e433110f8696f858c0418af0787dac99f6f5a8fbb2c34b1a618f700a8edd9d33d6a92ea0d23616ae45e8a0ca68d6b48540cb2de32f7efdc79e8026e38292d5533f1cdf0e6c6f98e70f26f013300234ea880467f4dc1a405ffbd528a0ad7c75e242c3296fe2db5c06a2b0b8f1e2742ce8b900c91e115ca9701efef", 0xbc}], 0x8, 0x0, 0x0, 0x800}, 0x20008000) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x898, 0x2) [ 291.813224] binder: undelivered TRANSACTION_ERROR: 29189 03:34:03 executing program 3: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_team\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x8000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x470, 0x0, 0x0, 0x118, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@arp={@multicast1, @dev, 0x0, 0x0, @mac=@dev, {}, @mac=@random="b554238a611e", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'team0\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4bc) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="f1b0081fe00a42b263bf0324cc56f15150ac90489a0b089663bbfbcea2487513c46fb8fe489a9e38cbd853df835b1f087e57b4757b5815117feeec4e0a1a07a117de7d2d02467ace86f941cef46a38067ee7c8f691c3c6") ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)=0x7ff) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000001c0)="3bdc7b95e70667c86ee7fa7a5ad287544ba51053927382e109c12be1049f04d2a9b3b1f72805e73cb1b63ddbd1a27ab6c6bae5db9dbf39f3220f69f9ec52c272cb7318088ea7269e9124a27d9bdec8598a904983a4127d62426a746f3053bf4646436a9b3b17a6170510d62571761b0cd041927e5868ee1cd2c86423a59a9b") 03:34:03 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1b, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x8001, 0x4, 0xd17, 0x7df5, 0x1}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x80, 0x4, 0x65, 0x800}, 0x8) [ 291.888944] binder: 20787:20791 got reply transaction with bad transaction stack, transaction 422 has target 20787:0 [ 291.899750] binder: 20787:20791 transaction failed 29201/-71, size 0-0 line 2774 [ 291.915327] binder_alloc: binder_alloc_mmap_handler: 20787 20001000-20004000 already mapped failed -16 [ 291.932310] binder: BINDER_SET_CONTEXT_MGR already set 03:34:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @random="03017499cf30"}, 0x10) r3 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/cgroup\x00') getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) [ 291.937788] binder: 20787:20791 ioctl 40046207 0 returned -16 [ 291.943833] binder_alloc: 20787: binder_alloc_buf, no vma [ 291.949515] binder: 20787:20794 transaction failed 29189/-3, size 24-8 line 2967 [ 291.959013] binder: 20787:20791 Release 1 refcount change on invalid ref 1 ret -22 [ 291.966929] binder: 20787:20794 got reply transaction with no transaction stack [ 291.974493] binder: 20787:20794 transaction failed 29201/-71, size 0-0 line 2759 03:34:03 executing program 7: r0 = socket(0x10, 0x802, 0x5) write(r0, &(0x7f00000000c0)="220000002000070700be0000090007010a00001e00003c0000ff040405000c008000", 0x22) [ 291.987072] binder: undelivered TRANSACTION_ERROR: 29201 [ 291.992885] binder: send failed reply for transaction 422 to 20787:20791 [ 292.020554] binder: undelivered TRANSACTION_ERROR: 29201 [ 292.026106] binder: undelivered TRANSACTION_ERROR: 29189 03:34:03 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x448580, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x81, 0x0, 0x4}, 0x8}}, 0x18) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) clone(0x48009fff, &(0x7f0000001f37), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000003c0)) 03:34:03 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x800) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x5, 0x9}, 0x1}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000001700)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f00000016c0)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000002c0)='bpf\x00', 0x0, &(0x7f0000001900)=ANY=[]) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x20000, &(0x7f00000015c0)) 03:34:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106308}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000180)={0x13, 0x1}) r3 = dup(r0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26800, 0x0) linkat(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00', 0x400) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x10, {0x2, 0x4e21, @broadcast}, 'vcan0\x00'}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000002c0)={0x7b, 0x0, [0x17b, 0x3]}) 03:34:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 292.471419] binder: 20822:20829 BC_INCREFS_DONE node 430 has no pending increfs request [ 292.474897] IPVS: ftp: loaded support on port[0] = 21 [ 292.483039] binder_alloc: binder_alloc_mmap_handler: 20822 20001000-20004000 already mapped failed -16 [ 292.497559] binder: BINDER_SET_CONTEXT_MGR already set [ 292.502973] binder_alloc: 20822: binder_alloc_buf, no vma [ 292.508571] binder: 20822:20831 transaction failed 29189/-3, size 24-8 line 2967 03:34:03 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\fS\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x81, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x112, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)="ab"}) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200200) getsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000001c0), &(0x7f0000000280)=0x4) [ 292.520477] binder: 20822:20829 ioctl 40046207 0 returned -16 [ 292.527872] binder: 20822:20829 Release 1 refcount change on invalid ref 1 ret -22 [ 292.535681] binder: 20822:20831 BC_INCREFS_DONE u0000000000000000 no match [ 292.542760] binder: 20822:20831 BC_INCREFS_DONE u0000000000000000 no match [ 292.556907] binder: send failed reply for transaction 429 to 20822:20829 [ 292.614377] binder: undelivered TRANSACTION_ERROR: 29189 [ 292.637378] binder: 20849:20851 unknown command 21260 [ 292.653951] binder: 20849:20851 ioctl c0306201 20000440 returned -22 [ 292.671673] binder: 20849:20851 got transaction to context manager from process owning it [ 292.680101] binder: 20849:20851 transaction failed 29201/-22, size 0-8 line 2843 [ 292.712020] binder_alloc: binder_alloc_mmap_handler: 20849 20001000-20004000 already mapped failed -16 [ 292.722846] binder: BINDER_SET_CONTEXT_MGR already set [ 292.729495] binder: 20849:20854 unknown command 21260 [ 292.734924] binder: 20849:20851 ioctl 40046207 0 returned -16 [ 292.746539] binder: 20849:20854 ioctl c0306201 20000440 returned -22 [ 292.766311] binder_alloc: 20849: binder_alloc_buf, no vma [ 292.771996] binder: 20849:20851 transaction failed 29189/-3, size 0-8 line 2967 [ 292.783300] binder: undelivered TRANSACTION_ERROR: 29201 [ 292.791672] binder: undelivered TRANSACTION_ERROR: 29189 03:34:04 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x208400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40811) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:04 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x7ff, 0x200000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x9, 0x3}, 'port0\x00', 0x2, 0x800, 0x4, 0x401, 0x1, 0x3, 0xfff, 0x0, 0x4, 0x2}) mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0/file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000100)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000003840)=[{&(0x7f0000002200)=""/63, 0x3f}], 0x1) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80, 0x101101) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000040)) recvmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0xfffffffffffffd7a, &(0x7f0000001900)=[{&(0x7f0000000480)=""/73}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/246, 0xffffffffffffffbe}, {&(0x7f0000001600)=""/248}, {&(0x7f0000000300)=""/51}, {&(0x7f0000001700)=""/128}, {&(0x7f0000001780)=""/26}, {&(0x7f00000017c0)=""/97}, {&(0x7f0000001840)=""/183, 0xffffffffffffff4f}], 0x1000000000000018, &(0x7f0000000140)=""/205, 0xcd, 0x40000000000000}, 0x0) 03:34:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000580)="b2", 0x1}], 0x1) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r1, r3) fcntl$setpipe(r0, 0x407, 0x0) tee(r2, r1, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) close(r0) 03:34:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x2000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000040)={0x77359400}, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f00000000c0)={0x5, 0x2}) 03:34:04 executing program 6: r0 = socket(0x10, 0x20040000000003, 0xffffffffffffffff) write(r0, &(0x7f0000000580)="220000005e000721004f10f7d0ebd900000000003c18533d3e280000000000000000", 0x22) recvmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) 03:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0xfdfdffff}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:04 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2041, 0x8) r1 = socket$inet(0x2, 0x80005, 0x100000000) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x1, 0x0, 0x0, 0x1}}, 0x26) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/mcfilter\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r3, 0x4000000043) r4 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000000480)="b68e914cb046", 0x1, 0xfffffffffffffffe, &(0x7f000005ffe4)={0xa, 0x10004e23, 0xfffffffffffffffd, @loopback}, 0x1) shutdown(r4, 0x1) r5 = accept4(r3, 0x0, &(0x7f0000da8ffc), 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000001c0)=""/225) shutdown(r5, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000002c0)=[0x28, 0x48, 0x28]}, 0x3}}, @release={0x40046306, 0x3}], 0x51, 0x0, &(0x7f0000000380)="30516119bdb0256705cfc9fc8946c34005d3b841ea08e0e7cdc060259b75980e3f67202c00ee424d34e3532acd1898b2fee37a85778341e1ec55c6bf5f28e1197b7bea21957e24cc3de96468f63d323515"}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001140), &(0x7f0000001180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x9, 0x7}) [ 293.116256] FAT-fs (loop4): bogus number of reserved sectors [ 293.122160] binder: 20869:20876 BC_ACQUIRE_DONE u0000000000000000 node 438 cookie mismatch 00000000fdfdffff != 0000000000000000 [ 293.122584] binder_alloc: binder_alloc_mmap_handler: 20869 20001000-20004000 already mapped failed -16 [ 293.133829] FAT-fs (loop4): Can't find a valid FAT filesystem [ 293.152437] binder: BINDER_SET_CONTEXT_MGR already set 03:34:04 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x224800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x6, 0x7fffffff, 0x5, 0x4, 0x21}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x401}, &(0x7f0000000180)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x800000032, &(0x7f0000003000), 0x3) 03:34:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13", 0x93}], 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="de000000bb7f5ce04c3835307cd919a6cee098e5a3ecd3fc2fb052883e56cfb23bdc186a3d2a5520e6d7c10d19bd98e7e44401ad9a5755ed78d8e80a0cb30d4277b0e34195f705a83eaba47292021d59b423a2e9547f54eb8f3ef459a73b7d92992798c03a11b07180ab06f9330f3ab4ec98c02f50e9aafb031fa8330c19234a5eb4842187420ef68847471c695cfff8d1f950131987b98abbb27a67fd680ec3d13ed1d48a24a22aeafb27edf7b86413d4b914f83e17b65adac347f003ec6e4e33af22d9de1dd1a2d34597cee3a924a623d26fd17ac5a81fc3e12ab83e4d586a360c"], &(0x7f0000000080)=0xe6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x74, &(0x7f0000000380)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x7, @empty, 0x769}, @in6={0xa, 0x4e22, 0x0, @empty, 0x4}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1d}, 0x23c46f23}]}, &(0x7f0000000400)=0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) dup3(r4, r0, 0x0) [ 293.162931] binder: 20869:20876 ioctl 40046207 0 returned -16 [ 293.178094] binder_alloc: 20869: binder_alloc_buf, no vma [ 293.183756] binder: 20869:20883 transaction failed 29189/-3, size 24-8 line 2967 [ 293.202623] binder: 20869:20876 Release 1 refcount change on invalid ref 1 ret -22 03:34:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f0000000740), 0x330, 0x0, &(0x7f0000000700)) rt_sigprocmask(0x3, &(0x7f0000000080)={0x146}, &(0x7f00000005c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x0, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000940)="f2ad594f5334f2d4423c1c2a91f4cb19d178b124a8f5eb0bee785172b0a14ff3d9bcdac1e17c7b06d24befc49a199d8192d4b5199be81c369fe175aa554a957a837037ea4c51e5f490b69dd015664fed25a27e9e0ec9a0e2100443570bc94f6c83dc544edafcca4941ff8ed5a58fb1b27545e961d23979", 0x77, 0xfffffffffffffff8) request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000800)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000780)={0xd11f, 0xe7}, 0x13d) socket(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x202000000802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000340)=0x201, 0x7ffffffe) 03:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0xfffffdfd}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x150, 0x150, 0x150, 0x0, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0x10001, 0x1, 0x10000, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x23d, 0xffffffffffffffe6, 0x1, 0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x4, 0x40, 0x8, 0x20}, 0x2c) 03:34:04 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x208400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40811) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x102, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f000079a000)}]) 03:34:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8000000000000000) fcntl$setsig(r2, 0xa, 0x12) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x5c1c2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4000) poll(&(0x7f0000000640)=[{r3}, {r0}], 0x2, 0x3) r6 = dup2(r2, r3) fcntl$setown(r6, 0x8, r1) tkill(r1, 0x16) [ 293.210530] binder: 20869:20878 BC_ACQUIRE_DONE u0000000000000000 no match [ 293.217613] binder: 20869:20878 BC_INCREFS_DONE u0000000000000000 no match [ 293.242572] binder: send failed reply for transaction 437 to 20869:20876 [ 293.256321] binder: undelivered TRANSACTION_ERROR: 29189 [ 293.292863] FAT-fs (loop4): Unrecognized mount option "9p" or missing value [ 293.352426] binder: 20906:20909 BC_ACQUIRE_DONE u0000000000000000 node 443 cookie mismatch 00000000fffffdfd != 0000000000000000 [ 293.393672] FAT-fs (loop4): bogus number of reserved sectors [ 293.399580] FAT-fs (loop4): Can't find a valid FAT filesystem [ 293.409394] binder_alloc: binder_alloc_mmap_handler: 20906 20001000-20004000 already mapped failed -16 [ 293.435124] binder: BINDER_SET_CONTEXT_MGR already set [ 293.440896] binder: 20906:20909 ioctl 40046207 0 returned -16 [ 293.467559] binder_alloc: 20906: binder_alloc_buf, no vma [ 293.473248] binder: 20906:20923 transaction failed 29189/-3, size 24-8 line 2967 03:34:04 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x208400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40811) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 293.485526] binder: 20906:20917 BC_ACQUIRE_DONE u0000000000000000 no match [ 293.492646] binder: 20906:20917 BC_INCREFS_DONE u0000000000000000 no match [ 293.500136] binder: 20906:20909 Release 1 refcount change on invalid ref 1 ret -22 [ 293.545625] FAT-fs (loop4): bogus number of reserved sectors [ 293.551552] FAT-fs (loop4): Can't find a valid FAT filesystem [ 293.554691] binder: send failed reply for transaction 442 to 20906:20909 03:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x100000000000000}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 293.585981] binder: undelivered TRANSACTION_ERROR: 29189 [ 293.622391] binder: 20934:20935 BC_ACQUIRE_DONE u0000000000000000 node 448 cookie mismatch 0100000000000000 != 0000000000000000 [ 293.659524] binder_alloc: binder_alloc_mmap_handler: 20934 20001000-20004000 already mapped failed -16 [ 293.680155] binder: BINDER_SET_CONTEXT_MGR already set [ 293.685595] binder_alloc: 20934: binder_alloc_buf, no vma [ 293.685965] binder: 20934:20935 ioctl 40046207 0 returned -16 [ 293.691225] binder: 20934:20937 transaction failed 29189/-3, size 24-8 line 2967 [ 293.697207] binder: 20934:20937 Release 1 refcount change on invalid ref 1 ret -22 [ 293.712929] binder: 20934:20938 BC_ACQUIRE_DONE u0000000000000000 no match [ 293.720013] binder: 20934:20938 BC_INCREFS_DONE u0000000000000000 no match [ 293.728614] binder: send failed reply for transaction 447 to 20934:20935 [ 293.746930] binder: undelivered TRANSACTION_ERROR: 29189 03:34:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @rand_addr}}}, 0x94) r1 = dup2(r0, r0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7dec, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0xba3}, &(0x7f00000000c0)=0x8) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000100)=0x90) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='fd/3\x00') ioctl(r1, 0x0, &(0x7f0000000140)="049d074a5fca7cb2be253edb67dfaff9445914ef29d5673e96bae18375b76a35cc") ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000240)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) 03:34:05 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffd, [0x0, 0x7b8]}) 03:34:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000055c0)=[{{&(0x7f0000003d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000005140)=[{&(0x7f0000003d80)=""/205, 0xcd}], 0x1, &(0x7f00000051c0)=""/103, 0x67}}, {{&(0x7f0000005240)=@ethernet, 0x80, &(0x7f0000005580)=[{&(0x7f0000005380)=""/205, 0xcd}], 0x1}}], 0x2, 0x0, &(0x7f00000057c0)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x200) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x2) 03:34:05 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x208400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40811) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0xfdfdffff00000000}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:05 executing program 6: r0 = gettid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000002740)=0x3, 0x4) clone(0x0, &(0x7f0000000000)="37ed9329dd02be7f0f8aeb94e9", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000026c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000300)=""/213, 0xd5}], 0x5, &(0x7f0000000500)=""/153, 0x99, 0x1}}, {{&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000640)=""/178, 0xb2}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/37, 0x25}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000000a00)=""/15, 0xf}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/243, 0xf3}, {&(0x7f0000000c40)=""/88, 0x58}], 0xa, 0x0, 0x0, 0x3a2}, 0x9}, {{&(0x7f0000000d80)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000e00)=""/64, 0x40}, {&(0x7f0000000e40)=""/229, 0xe5}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/78, 0x4e}, {&(0x7f0000001fc0)=""/21, 0x15}, {&(0x7f0000002000)=""/27, 0x1b}], 0x6, &(0x7f00000020c0)=""/77, 0x4d, 0x4}, 0x20}, {{&(0x7f0000002140)=@ipx, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/143, 0x8f}], 0x1, &(0x7f00000022c0)=""/28, 0x1c, 0x8}, 0x100000000}, {{&(0x7f0000002300)=@ax25, 0x80, &(0x7f0000002500)=[{&(0x7f0000002380)=""/92, 0x5c}, {&(0x7f0000002400)=""/222, 0xde}], 0x2, &(0x7f0000002540)=""/10, 0xa, 0x4bd}, 0x8}], 0x5, 0x0, &(0x7f0000002700)={r2, r3+10000000}) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xc0109207, 0x20000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x13) 03:34:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fff}, 0xc) 03:34:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:05 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) dup3(r0, r1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="a58dcb320063dad8eac4cb12c973d95576d397303d58a28a173e94dec0872136f75e7d2ed3f1c037e4d5439a992acd8f899254545d8b86269059c0b8c3394101fa06e20bcf4001ae20c0377cea102cda889b975a77f3be4d70ef6c", 0x5b, 0x3, &(0x7f0000000140)={r2, r3+10000000}) 03:34:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000000000912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x72, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c) setsockopt$llc_int(r0, 0x10c, 0xf, &(0x7f0000000000)=0xffffffff80000000, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8000) 03:34:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x80) tgkill(0x0, 0x0, 0x0) [ 294.279790] binder: 20977:20981 BC_ACQUIRE_DONE u0000000000000000 node 453 cookie mismatch fdfdffff00000000 != 0000000000000000 [ 294.295084] FAT-fs (loop4): bogus number of reserved sectors [ 294.300963] FAT-fs (loop4): Can't find a valid FAT filesystem [ 294.312761] binder_alloc: binder_alloc_mmap_handler: 20977 20001000-20004000 already mapped failed -16 03:34:05 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 294.342379] binder: BINDER_SET_CONTEXT_MGR already set [ 294.353274] binder: 20977:20981 ioctl 40046207 0 returned -16 [ 294.366376] binder_alloc: 20977: binder_alloc_buf, no vma [ 294.372079] binder: 20977:20997 transaction failed 29189/-3, size 24-8 line 2967 [ 294.393439] binder: 20977:20981 Release 1 refcount change on invalid ref 1 ret -22 [ 294.401417] binder: 20977:20988 BC_ACQUIRE_DONE u0000000000000000 no match [ 294.408499] binder: 20977:20988 BC_INCREFS_DONE u0000000000000000 no match [ 294.438856] FAT-fs (loop4): bogus number of reserved sectors [ 294.444846] FAT-fs (loop4): Can't find a valid FAT filesystem [ 294.452102] binder: send failed reply for transaction 452 to 20977:20981 [ 294.470453] binder: undelivered TRANSACTION_ERROR: 29189 03:34:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200400, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000000edff84000040"]) 03:34:07 executing program 1: personality(0x10010000400001b) io_setup(0x2, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000140)=""/1, &(0x7f0000000080)=0xffffffffffffffe9) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000540)={0x7, 0x6, 0x6}) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000900)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) shutdown(r1, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d16000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000240)) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x85000040}, 0xc) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 03:34:07 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0xfffffffffffffffa, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") tkill(r0, 0x1000000000016) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc0000, 0x0) socket$alg(0x26, 0x5, 0x0) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x10, 0x3, 0x7}, 0x7}}, 0x18) restart_syscall() 03:34:07 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0xfdfdffff00000000}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x1000000}, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48b, 0x0, 0x277, 0x80ffff]}) [ 296.524566] binder: 21027:21030 BC_ACQUIRE_DONE u0000000000000000 node 458 cookie mismatch fdfdffff00000000 != 0000000000000000 [ 296.540968] binder: BINDER_SET_CONTEXT_MGR already set [ 296.550481] binder: 21031:21035 ioctl 40046207 0 returned -16 [ 296.551698] FAT-fs (loop4): bogus number of reserved sectors [ 296.562491] FAT-fs (loop4): Can't find a valid FAT filesystem [ 296.573308] binder: release 21027:21030 transaction 457 out, still active [ 296.586613] binder: 21031:21035 Release 1 refcount change on invalid ref 1 ret -22 03:34:07 executing program 6: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) fchdir(r0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x40, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x8800000) write$binfmt_script(r1, &(0x7f0000002400)={'#! ', './file0', [{0x20, "820e8e06e5d78f78a5ea8b029ad9d875b19411b8cad3babea68348ffbbab0b26341b6e"}, {0x20, "93"}, {0x20, 'vfat\x00'}], 0xa, "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"}, 0x1037) gettid() open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:34:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 296.614077] binder: 21031:21035 BC_ACQUIRE_DONE u0000000000000000 node 461 cookie mismatch 0000000001000000 != 0000000000000000 [ 296.618486] binder: send failed reply for transaction 457, target dead [ 296.626553] binder_alloc: binder_alloc_mmap_handler: 21031 20001000-20004000 already mapped failed -16 [ 296.632502] binder: send failed reply for transaction 460 to 21031:21035 [ 296.656970] binder_alloc: 21031: binder_alloc_buf, no vma [ 296.662607] binder: 21031:21046 transaction failed 29189/-3, size 24-8 line 2967 03:34:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="f0eabf3dff345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4da}], 0x1, &(0x7f0000000a80)}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@dev}, &(0x7f0000000080)=0x14) 03:34:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x402841) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) [ 296.680858] binder: 21031:21035 Release 1 refcount change on invalid ref 1 ret -22 [ 296.685296] binder: 21031:21050 BC_ACQUIRE_DONE u0000000000000000 no match [ 296.695739] binder: 21031:21050 BC_INCREFS_DONE u0000000000000000 no match [ 296.720842] FAT-fs (loop6): bogus number of reserved sectors 03:34:07 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 296.726745] FAT-fs (loop6): Can't find a valid FAT filesystem 03:34:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x00') ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000180)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="0bf5430f000319", 0x7}], 0x1) setsockopt(r0, 0x7, 0x8, &(0x7f00000000c0)="be661578c6f41750e67af3dcd637700578589eb5fb12d8f55c4f9f6dd9a393389c2a25db143c7f41180a53f118d006bd9841e590be3b3df5867f3053f68317cd247b24eb99bff592a3c76766b472d2f68521", 0x52) 03:34:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x15, 0x80005, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000080)=0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc0fe}}, 0x1c) 03:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40086303}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:08 executing program 2: unshare(0x200508fd) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) userfaultfd(0x80800) readahead(r0, 0x0, 0x0) [ 296.764562] binder: undelivered TRANSACTION_ERROR: 29189 [ 296.792108] FAT-fs (loop4): bogus number of reserved sectors [ 296.798033] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:08 executing program 7: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x24080, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) r2 = memfd_create(&(0x7f0000000000)='{user(lowlan1cpusetsystemsecurity9\x00', 0x1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000140)=[0x0, 0xee01, 0xee01, 0xee00, 0xee01, 0xee01, 0x0, 0xee00, 0xee00]) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000400)=0xe8) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000005c0)=0xe8) getgroups(0x9, &(0x7f0000000600)=[0xee01, 0x0, 0xee01, 0xee00, 0x0, 0xee00, 0xee01, 0x0, 0xffffffffffffffff]) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)={0x410, 0x0, 0x2, [{{0x5, 0x0, 0x2, 0x8, 0x9, 0x4000000000, {0x0, 0x0, 0x1ff, 0xc560, 0x5, 0x8, 0x9, 0x1, 0x1ff, 0x3ff, 0xf989, r3, r4, 0x1}}, {0x0, 0x0, 0x9, 0x3, '/dev/md0\x00'}}, {{0x1, 0x1, 0x16, 0x1, 0x0, 0x0, {0x0, 0x66f, 0x2c, 0x1, 0x7, 0x4, 0xf66, 0x6, 0x1, 0x90db, 0x400, r5, r6, 0x8, 0x29b}}, {0x3, 0x100000001, 0xb, 0x9, '/dev/loop#\x00'}}, {{0x5, 0x1, 0xfffffffffffffffe, 0x1, 0x9, 0x7fff, {0x4, 0x3, 0x1, 0x80000001, 0x5, 0x1, 0x1, 0x9, 0x7, 0x0, 0x7, r7, r8, 0x4, 0x6}}, {0x6, 0x800000000000000, 0xb, 0x8000, '/dev/loop#\x00'}}, {{0x3, 0x3, 0x3, 0x1e7c, 0x1, 0x7fffffff, {0x3, 0x1, 0x198, 0x7fff, 0x7fffffff, 0x80000000, 0x755, 0x0, 0x5, 0x8, 0x100000000, r9, r10, 0x40, 0xa82}}, {0x2, 0x4ae, 0x29, 0x6, 'securitycgroupeth0#em0selfmime_typemd5sum'}}, {{0x6, 0x0, 0x97, 0x6, 0x20, 0xff, {0x0, 0x1ff, 0x9a73, 0x6, 0x7, 0x100000000, 0x9, 0x0, 0x2, 0x3ff, 0x7, r11, r12, 0x2, 0x6}}, {0x5, 0x2, 0x0, 0x8000}}, {{0x3, 0x0, 0x1, 0x3, 0xff, 0x1, {0x3, 0x3, 0x7, 0x6, 0x6e, 0x7, 0x6, 0x10dc, 0x8, 0x3bf1, 0xd4, r13, r14, 0x9, 0x3}}, {0x5, 0x2, 0x9, 0xfffffffffffffff8, '/dev/md0\x00'}}]}, 0x410) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 296.858588] binder: 21077:21079 BC_FREE_BUFFER u0000000000000000 no match [ 296.862201] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 296.865629] binder: 21077:21079 unknown command 0 [ 296.930335] binder: 21077:21079 ioctl c0306201 200003c0 returned -22 [ 296.960986] binder_alloc: binder_alloc_mmap_handler: 21077 20001000-20004000 already mapped failed -16 [ 296.981195] binder: BINDER_SET_CONTEXT_MGR already set [ 296.986627] binder_alloc: 21077: binder_alloc_buf, no vma [ 296.992272] binder: 21077:21093 transaction failed 29189/-3, size 24-8 line 2967 [ 296.999888] binder: 21077:21079 ioctl 40046207 0 returned -16 [ 297.011048] binder: 21077:21098 Release 1 refcount change on invalid ref 1 ret -22 [ 297.018998] binder: 21077:21099 BC_ACQUIRE_DONE u0000000000000000 no match [ 297.028414] binder: 21077:21099 BC_FREE_BUFFER u0000000000000000 no match [ 297.035411] binder: 21077:21099 unknown command 0 [ 297.040648] binder: 21077:21099 ioctl c0306201 200003c0 returned -22 [ 297.047683] binder: send failed reply for transaction 466 to 21077:21079 [ 297.063040] binder: undelivered TRANSACTION_ERROR: 29189 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) pipe2(&(0x7f0000001540)={0xffffffffffffffff}, 0x800) getsockopt$inet_dccp_int(r1, 0x21, 0x17, &(0x7f0000001580), &(0x7f00000015c0)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x20) 03:34:08 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xfc08000000000000, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x138, [0x20000640, 0x0, 0x0, 0x20000670, 0x200006a0], 0x0, &(0x7f0000000140), &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, 0x1b0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ptrace$setopts(0x4200, r1, 0xb62, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x7ff) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) 03:34:08 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:08 executing program 7: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'gre0\x00', 0x58}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x10000}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000069f000/0x4000)=nil, 0x4000}}) 03:34:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:08 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="fc00000048000700ab092500090007000aab80ff001300000000369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x1c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x200002, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0xfff, 0x30}, 0xc) [ 297.633804] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain [ 297.652054] FAT-fs (loop4): bogus number of reserved sectors [ 297.658037] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0x23c, &(0x7f0000015ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002000ff0200000000000000000a0000000c000000000000000c001400ffffffff1200017ea56a40a6b0884c1c01a7f9e94d6e04f59a8fbe762bdf2144c0a216423fea501136af4a1f2108d28dbdfb7f052bf9f756"], 0x2c}}, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 03:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40086310}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:08 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x41) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64, @ANYBLOB="2225eceaa5c3d65ff673c0542c8a59d62c55ddf60ff06bbbf5f2fbabe8b8643ad9ff8102d5f2f6cddfe625b2e521ce0e2f4879a3a9b4a3b34b61d17480a45416a59a3d52098e46a6df78f54dce394d3331cbd8aa715d231a8a4b82bbd1002b424abfef4810490393bec3bd5a7d6198c74015923236e271d3e09b8b00b527c0b3183c332840bc1c12cfdae5023831486a22f7a368959d4880db09920945"], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="a393ea1fe1fb54cc21508a51a17bd4ac4ff5201949d220a5bd64ab5a5a816028363256a06a3d1a6f4a0d7a8c90c6811893f728a78ef86170e986cf322facc7ef20e68570412b10aa018b01dcd07ba42a1bc35e9997aafb58a54d6ba4fb9b7e3cca934ad801b94c43e660b87831bf993229da521ec5a11a2b4aee8b32a51342cfe201babea975945642efa5f57eec586b99cee0ce7de0566236849cbae20d9ee3fb3784c62bd015beb7ccbd26aa5ccb2debad2e424d64bbab2f1dd579b8c329973021060b50c5653189d8dc39f4cce28c3934c670", @ANYRESHEX=r0, @ANYRES16=r0], @ANYRESHEX=r0], @ANYRES64=r0]) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000080000ee4590000000000000000000000000000000000000000000"]) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) eventfd2(0x4, 0x80001) 03:34:08 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:08 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xff, 0x80) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x12002) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) ioctl$void(r3, 0xc0045c77) 03:34:08 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0xffff, 0x2802) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/108) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x110000, 0x0, 0xff, 0x1, 0x0, [{0x80000000, 0x8, 0x10001, [], 0x2}, {0x9, 0x7, 0x1, [], 0x8}, {0x8, 0x0, 0x5}, {0xffffffff, 0x8, 0x24e0ac28, [], 0x7}, {0x5, 0x401, 0x0, [], 0x1}, {0xffffffffffffff71, 0x3ff, 0xa3, [], 0x5}, {0xd7, 0x10000, 0x6, [], 0xfffffffffffffff8}, {0x189, 0x6c6, 0x39, [], 0x2}, {0x100000, 0x578, 0xa0, [], 0x5}, {0x80, 0xf1, 0x7f, [], 0xfffffffffffffffa}, {0xde21, 0xffffffffffff3483, 0x6}, {0x1, 0x1, 0xbfa, [], 0x9}, {0x400, 0x7f, 0xf8, [], 0x9}, {0x7ff, 0x7fffffff, 0x28, [], 0x89}, {0xf5c, 0x1, 0x5, [], 0x1}, {0x0, 0x0, 0x7fffffff}, {0x9, 0x5, 0x9, [], 0x1}, {0x20b, 0xc42, 0xfff, [], 0x81}, {0x2, 0x1, 0x81, [], 0x8}, {0x8000, 0x1, 0x9, [], 0x3}, {0x8, 0x3, 0x7, [], 0xffffffffffff0001}, {0x5, 0x3f47}, {0x8, 0x3, 0x5f7c, [], 0x9}, {0x2, 0x40, 0x20, [], 0x400}]}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x804) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000003c0)={0x1d, r4}, 0x10) setsockopt(r1, 0x65, 0x10000000002, &(0x7f00000005c0)="c8d63f23", 0x4) [ 297.742680] attempt to access beyond end of device [ 297.747711] loop6: rw=1, want=130, limit=112 [ 297.752168] Buffer I/O error on dev loop6, logical block 129, lost async page write [ 297.757252] binder: 21136:21138 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 297.760109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 297.767406] binder: 21136:21138 unknown command 0 [ 297.767860] binder: 21136:21138 ioctl c0306201 200003c0 returned -22 [ 297.783766] attempt to access beyond end of device [ 297.791178] binder_alloc: binder_alloc_mmap_handler: 21136 20001000-20004000 already mapped failed -16 [ 297.792288] loop6: rw=1, want=131, limit=112 [ 297.803326] binder: BINDER_SET_CONTEXT_MGR already set [ 297.806171] Buffer I/O error on dev loop6, logical block 130, lost async page write [ 297.809303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 297.812109] binder_alloc: 21136: binder_alloc_buf, no vma [ 297.827220] attempt to access beyond end of device [ 297.827785] binder: 21136:21143 transaction failed 29189/-3, size 24-8 line 2967 [ 297.833312] loop6: rw=1, want=132, limit=112 [ 297.839200] binder: 21136:21138 ioctl 40046207 0 returned -16 [ 297.845934] Buffer I/O error on dev loop6, logical block 131, lost async page write [ 297.852368] FAT-fs (loop4): bogus number of reserved sectors [ 297.861135] attempt to access beyond end of device [ 297.864106] FAT-fs (loop4): Can't find a valid FAT filesystem [ 297.869915] loop6: rw=1, want=133, limit=112 [ 297.884809] binder: 21136:21146 Release 1 refcount change on invalid ref 1 ret -22 03:34:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f00000000c0)=0x1040000000032, 0x4) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x366, 0x900, 0x0, 0xfffffffffffffe7c) 03:34:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') syz_open_pts(r1, 0x4800) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0xfffffffffffffd3d) r2 = getpgid(0x0) fstatfs(r0, &(0x7f0000000040)=""/106) ptrace$cont(0x20, r2, 0x7, 0x1e8) sched_setscheduler(r2, 0x7, &(0x7f0000000180)=0x14860e3a) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8b, 0x400000) [ 297.885236] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 297.893412] binder: 21136:21147 BC_ACQUIRE_DONE u0000000000000000 no match [ 297.907881] binder: 21136:21147 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 297.915275] binder: 21136:21147 unknown command 0 [ 297.922047] binder: 21136:21147 ioctl c0306201 200003c0 returned -22 [ 297.930178] attempt to access beyond end of device [ 297.934596] binder: send failed reply for transaction 471 to 21136:21138 03:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40486312}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:09 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 297.935206] loop6: rw=1, want=142, limit=112 [ 297.946501] Buffer I/O error on dev loop6, logical block 141, lost async page write [ 297.946531] binder: undelivered TRANSACTION_ERROR: 29189 [ 297.975190] attempt to access beyond end of device [ 297.980242] loop6: rw=1, want=143, limit=112 [ 297.984769] Buffer I/O error on dev loop6, logical block 142, lost async page write [ 298.030317] binder: 21157:21161 got reply transaction with bad transaction stack, transaction 476 has target 21157:0 [ 298.038709] attempt to access beyond end of device [ 298.041167] binder: 21157:21161 transaction failed 29201/-71, size 0-0 line 2774 [ 298.046014] loop6: rw=1, want=144, limit=112 [ 298.058021] Buffer I/O error on dev loop6, logical block 143, lost async page write [ 298.060229] binder_alloc: binder_alloc_mmap_handler: 21157 20001000-20004000 already mapped failed -16 [ 298.073057] attempt to access beyond end of device [ 298.077135] FAT-fs (loop4): bogus number of reserved sectors [ 298.080336] loop6: rw=1, want=145, limit=112 [ 298.086157] FAT-fs (loop4): Can't find a valid FAT filesystem [ 298.090541] Buffer I/O error on dev loop6, logical block 144, lost async page write [ 298.097836] binder: BINDER_SET_CONTEXT_MGR already set [ 298.109746] binder_alloc: 21157: binder_alloc_buf, no vma [ 298.115375] binder: 21157:21165 transaction failed 29189/-3, size 24-8 line 2967 [ 298.120330] attempt to access beyond end of device [ 298.128004] loop6: rw=1, want=4241, limit=112 [ 298.128561] binder: 21157:21161 ioctl 40046207 0 returned -16 [ 298.133904] binder: 21157:21170 BC_ACQUIRE_DONE u0000000000000000 no match [ 298.138873] binder: 21157:21169 Release 1 refcount change on invalid ref 1 ret -22 [ 298.145579] binder: 21157:21170 got reply transaction with no transaction stack [ 298.160810] binder: 21157:21170 transaction failed 29201/-71, size 0-0 line 2759 [ 298.172666] attempt to access beyond end of device [ 298.177688] loop6: rw=1, want=8337, limit=112 [ 298.187107] attempt to access beyond end of device [ 298.192109] loop6: rw=1, want=12433, limit=112 [ 298.203345] binder: undelivered TRANSACTION_ERROR: 29201 [ 298.205743] attempt to access beyond end of device [ 298.210630] binder: send failed reply for transaction 476 to 21157:21161 [ 298.213818] loop6: rw=1, want=16529, limit=112 [ 298.233291] attempt to access beyond end of device [ 298.238303] loop6: rw=1, want=20625, limit=112 [ 298.248914] attempt to access beyond end of device [ 298.253924] loop6: rw=1, want=24721, limit=112 [ 298.257039] binder: undelivered TRANSACTION_ERROR: 29201 [ 298.262705] attempt to access beyond end of device [ 298.264055] binder: undelivered TRANSACTION_ERROR: 29189 [ 298.268985] loop6: rw=1, want=28817, limit=112 [ 298.273110] attempt to access beyond end of device [ 298.283999] loop6: rw=1, want=32913, limit=112 [ 298.292590] attempt to access beyond end of device [ 298.297568] loop6: rw=1, want=37009, limit=112 [ 298.306253] attempt to access beyond end of device [ 298.311229] loop6: rw=1, want=41105, limit=112 [ 298.323688] attempt to access beyond end of device [ 298.328671] loop6: rw=1, want=45201, limit=112 [ 298.336072] attempt to access beyond end of device [ 298.341022] loop6: rw=1, want=49297, limit=112 [ 298.348470] attempt to access beyond end of device [ 298.353429] loop6: rw=1, want=53393, limit=112 [ 298.360742] attempt to access beyond end of device [ 298.365687] loop6: rw=1, want=57489, limit=112 [ 298.372983] attempt to access beyond end of device [ 298.377929] loop6: rw=1, want=61585, limit=112 [ 298.383495] attempt to access beyond end of device [ 298.388442] loop6: rw=1, want=61929, limit=112 [ 298.597582] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 03:34:11 executing program 1: futex(&(0x7f0000000000), 0x85, 0x0, &(0x7f00005d0000), &(0x7f0000000000), 0x3ffffffe) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x3, 0x1, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100), 0x0) 03:34:11 executing program 3: lseek(0xffffffffffffffff, 0x80000000, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200001, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1f) 03:34:11 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa655845000030000000000000907808000000ffffffff2100907800000000450000000000000000000000ac585527ed000001"], &(0x7f0000ea3000)) 03:34:11 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40106312}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:11 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x4, 0x8040) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000480)="7b44fdbca01dc35abb801e0fa40b4824a9c1d4f6bebb8dc86fa838c09a7e59cd97146e0ebdf0e1da6059873e1f6830b408484a092e115ed1492915d374fb7c1fcd1111d80e8aa55fcd8d9de81da00e6c84618f568dc3f6c31c0f63fca67717be4637febf3dc1a4c840d0c670c21a03bae0ea9a96aaa551934eba0297c5b3c5248fa867695f957970cac60998e539dafe84096fa330c48299f01ed03e14b2125cdc06e9805fffd3ca563a88d50425549a9f1c0712642d19fdea22df35fa336e3061487ac4f6b18eaa72c4d0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) r2 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='[-%\x00', 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000002c0)={0x3, 0x7ff, 0x80000000, 0x4}) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x131e, 0xfffffffffffff67c, 0x38, 0x7fff}, {0x3, 0x4, 0x0, 0x4}, {0x20, 0xff, 0x2df0, 0x5}, {0x101, 0xf0c, 0x100, 0x3}, {0x4, 0x4fd, 0x401, 0x9ba}]}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100)={0x6}, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vord\x00', &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESHEX=r1]}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x9, 0x20004000, 0x1, 0x5c0, 0x100000001, 0x6, 0x4, 0x81, 0x26b5}) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000380)) 03:34:11 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 03:34:11 executing program 2: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@reserved}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000003c0)={0x0, 0x1, 0x0, 'queue0\x00', 0x1000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) 03:34:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x82b8, 0x4, [0x1, 0x80000000, 0x2, 0x100000001]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0xa, 0x0, 0x6, 0x100000001}, &(0x7f00000001c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5310, &(0x7f0000000000)={0x80, 0x0, 'client1\x00', 0x0, "db4d69353cfe0bea", "4fac36b40b7b5604618a899daca7f196ebb2561c301768276b23d225dd12e98a"}) [ 300.679100] FAT-fs (loop4): bogus number of reserved sectors [ 300.685000] FAT-fs (loop4): Can't find a valid FAT filesystem [ 300.696642] binder: 21195:21200 unknown command 1074815762 [ 300.704438] binder: 21195:21200 ioctl c0306201 200003c0 returned -22 [ 300.712025] binder_alloc: binder_alloc_mmap_handler: 21195 20001000-20004000 already mapped failed -16 [ 300.723716] binder: BINDER_SET_CONTEXT_MGR already set 03:34:11 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x4000000000000) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000040)={'ifb0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @random="0657680b377f"}, 0x10) recvmmsg(r2, &(0x7f0000004700)=[{{&(0x7f0000003100)=@ipx, 0x80, &(0x7f0000004340), 0x0, &(0x7f0000004380)=""/143, 0x8f}}, {{&(0x7f0000004440)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/72, 0x48}}], 0x2, 0x0, 0x0) io_setup(0x8001, &(0x7f0000000080)) 03:34:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xfffffffffffffcfa) fdatasync(r1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0xf}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) [ 300.729418] binder_alloc: 21195: binder_alloc_buf, no vma [ 300.735077] binder: 21195:21216 transaction failed 29189/-3, size 24-8 line 2967 [ 300.743028] binder: 21195:21200 ioctl 40046207 0 returned -16 [ 300.750421] binder: 21195:21200 Release 1 refcount change on invalid ref 1 ret -22 [ 300.758241] binder: 21195:21216 BC_ACQUIRE_DONE u0000000000000000 no match [ 300.765319] binder: 21195:21216 unknown command 1074815762 03:34:11 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000100)=[r2]) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 03:34:11 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 300.795630] binder: 21195:21216 ioctl c0306201 200003c0 returned -22 [ 300.813542] device team_slave_1 entered promiscuous mode 03:34:12 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x8000000000000053, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2010) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x81, 0x7, &(0x7f0000001600)=[{&(0x7f0000000600)="8f07933cf32951d0c375219b417d9e811e5c70b1d194eb1dae407d7ad6e7250418030b395c552667240fd124a17b8ed10a21870d25b85bff68bf01ecd9eeb09a697d3f13d59da8eced3c4aded24e033b5c79a4fe54965599ffc5e9fedc76de52b03e1f596768b9f9a9b4ffb4681aef6f449e17cb46e7a85d980316e944f9c0e9f5043b9dcd81a01f2479b8917796e74bb4f3f53204072ac3cfbbc57afe0fdde82ae1914b73d7c41255ed5fb31d8c367d3fd717dadec821f271d4895b9d9d88edbcde8c7717402822c87278b78676b0534b56bd783a5102bfa510e30a8cc8d0264433f583441b3293ce0561e99ce662bcbee495bff0142b32e8f6f09f9a09336b72f448deacdb2ce9585208ec03c37f321a299f3d374ccf9f3c6771bd1a7e4731ccf75e2afd157a4cd526713c140810ff5736c8ac5388a015f256b5e566715e908bc9cbfda27cfa4ba45e3dee4445877e7b37fb1f6a37d32c89a71e577cb54a3abf22a57413124e2256256f45ca0a628c81f38b84151298d7cf226dc3de004a11754fefdd307870813ad2f8e3ccd032f5b0663024a206227b988ecb63409c4cc6b1603efd41f72677b781ca020b1d8e502fdad69ce151f62d8f4e8479764a8614a6c20db57fa8a2614b019b2183c052779727752ba56384064f5935e7df1e126714551a0886ea51e39f1dd6c19f0ad0b91426112fffd695176077ddfce485dd095389cc940cca2fb2e7adedb984f3dbf316edb7bce57e194dc09504d24d61eebca7c0424b8192468528c49410570d6cdabc12210a128468f31df840400bd99e4e051ec66cee00a164d7e529cff8eb5ee2963e65fc2700d3708314bdd652b40017860e74ef49bc0897a1ab4360d41a3768972fd47708ff30fd62d3a0452cef0e7a8f8c2de7d93c79bce6a0460f3e6cd15532fd5d15968c77d9403cbed1d27c6b9c73f07a05c14af310b7e26c9db143d7a93f555f93949791263ca080a678e9703f8e4e343d059a4ba0e28f02ed9366bacab3be8d549c27063a6562eadf1a44aa487bd2c442ac4583a98007ebad7dc66ac65a0a881f0fb1ad219e6498d5d07df3fb9aa5718407c3e8ea05bf2afb881a031de06b63ab5c2dbda08771088b560de198d2a364cffc0ea1e2c0384d8a49feb43a1365397c9d8452ec960bcf20d82834b00eb2966525451737f87fe2dc266e955d339bddb7811a32895bc784c3d92c57d0d6de1c11d854e92cc28c00c19ad2e61a40264cac3b185b44ff12685ddf1c4c035ff55ad18c834c0523d410b44e3dee65b15839817079526b139b86ad809cfc5d1efdfbff9191d71c387e2a031659fbe7d36e10e43d95767db8d639e852fc7d96cce5ca73a6e3b9e74bace64ab1db76f1321ad24a4f9d711bc34f52e0eede773019a39bbecd0da8400c5d45b7b04d3a5baeabf66649cfc11b374b6b2b49ca8c1b279908ca17362864a26866a3f35fcd22d6714252d6fdf078388a38a1460e2fa9dfee20e254ff8f08a122938c4ba88478bf48cf0a328115f03cf51f2ca95b65c9902e6ebf66ee67f1096dcc6e2ba9e149d71fe2953cba5c77aed67bc7620477e9e7002fe981b0cc1a36488009b7b51f6ebe8d9a0290f2a1a9c1c65f4e22898f8eda8371ce3e819e83099323bf6b4bf6081581ff6d56f57769fe64141c8ded8cf48377c5278111de29513d6b7e98df7f929c83fa22ff65015b31f5557db7177182f5475d59a0452c1828fb370e028a6414c6a05dd273d7e01bbbecf21339c055057e6002ab86c95a58bc095f914cbf33a92e76b8324a44e6e97ccb2f18331ce9ad4b28b1b7b13ddf78fda3e81d6f2073cc70872d9c61a85c6505220fdf8d639e5c700aaf48ed229ed3083a78cc0700d9e3676d43bd0a5a3af46b8c02aed1f6f0ff4b848b7b50b62a95f827a29cf21322c0d3184d7d7014100656a2439dec1fa57cef49a4e95925a46137d9d204e1652158544bab8c163f50538c3fd4d717994ef212225d971131d462e10e51a84dd7c3a2f313ff0e52906d358fd8b4fce8a0fc05bbabe624b26d2c70e9e1413b8a224bbf90612e4641b49a39f0d50045aaf0af5571b895d376e991c3e832b6f0509e31b2a842f39872fc8a2c2b9059162a4e8dc4092072e956bfdc04f0cca040502826075eb7e17225d8356df442b7df2e481d51a729764ac322611f68a7ce46722f03bd1b5b0dee4c28ba984e378c3b19edb640b23afbd3801a90a811eb6cc1ba0355d1764254fee65f3d61225a1a66aa7e31f286032b10cab39b4752b143b2fc0c519fab42ebd44b11d162e06453ec677f2f4a5adbe265b49978b26fbc4536fcb9417bee319c7be74a9edcec707b1813110e0147752eff8ba547f27620cc1f7f9b120e3ae12c901826221058013bfa04b3a053d061d366fdb98277a25c47e0a6c9e9d3259d4123de0fe5db4665a8a33f020b32bfbf4ab0f70ecfd18271dfb8fbca5e6ee30bbb25c5189253894781d979df2c0c351a10321a107f93c04f50c5622157a245098ec8dfcd29db6804e92e2ddc1daa7f23de6384040186aa60c04fbfaddbb9d5a14c75b0c47d9215bd25855de3b2f90579b5ad347940e29485458ec57e017de00f0d6faa60364c9404ffa6811009d33179eedbc840b8f96b81eb6726de285f693f357655b19d181282c977cfe6b99dc75cf99c112b89cf05c981c20cdb4c9fd28778430e11ff7ed57e9cd3999b16b1859d7a899e851da617643c8219ecf4766e8b32385ac59ab27e78ce9e16709b5d93c55d7c4643bc1b38fb9e2e0e2674746c1edf447a0dbfd819e5f933ff4b46d81dc9869a4883711db5186a8a09615b607d6b4b61ef48625c105648f6524abd709040a2cc579a7a7461daf0ceb03d812020342862c388460e6b754b38655e26134e2c2d40360b3d13bdaa407350789cad0bae6920181e3ef25caba56b406f024c726a74c35e418766c5ccad75238e955b3bf91228a9bea66c73ed9b6fdd53420b9d52f8642f8764261935444fcfa818678a13eb14b3fdaeac3b22611ab04330cf88df8af898b7d105c0e0c83ba7d2a3d5f8d44b46c5cbc3d80791059ab0c31bfedace5bf85e9eb9116a424056d7ee6c8df4da9c60e9dbe7400132cae7014adf7b799a9bfdecf60ced64c12bcbaa6810469f7e99a88e18a59d7f8ce705ad3d71ce4f4f8393def3c02e955f1bf6ed40c6350ab9456ee5e7605d8d30317d9b1762a2d5ab6ad707373ad97cdd76c8926458f751bdd0bbf37aabd3769dd5f48250915281f39a261c45ffe86bb355f1024e324bb090500c501be78479664d7f755cab5b6c565f612fe8f0c0643b64a1369edde5582d8f3adbf19411ad46a527544f9bcb754b2b2c39295266bbc3b2fe9035f588152b1bd8325863cd2a0263722ced52978a69776f18b583590cfc7220c78bfd0570d4553abd164ae6c2e565251f59cba94eae8280c005ae575d4c20cb18b140fc0de83d065894eb4d1569e9c267e0c29d06e2b564a1a1d552c2ed99f0c629a949baae11f1af890f1e6f2d39fbb16305d7a2991babd317e7aa66014ff3e1f9dd4355c89391a4dd7195ad3133b59103f24bd28443e3f3028d77c1c9b34a6a908dd12d07e4c59da1eab9524b7b8d392dc1ebbcae3917feaf95e4ce14cbe31bf6c4fe7061381533dc1e19ce64e6553c49274f15372b988fc1399d9de3f056e0d0bc29c6b8b74ea992440017ad32b6ebf30f6d26fbfae6d55666f6eb9e155564d66fbbff9eaeefb47f38bedb07fc185cb74844b4426c51e4706c21776a75b3ebc99a5d46f48a8f8e56a8df04b268b290c9d86f6fe598b37b447c0fb26f5b88b4b5b406a261d62c3f66722145f9bcfe1e5bbdde4e064c6c8dbdbb058359b9b86a7f484db1f2f66961504e117423074933f6f8322844a7a9a9808ecfff3868e0cd5539fdaceee0e07797efef3c6c9bffb7fcf7b811b0c0f1305eeedbd7ee880aa4fd90e6266fe52cbfdb428eaa8cb1b494490b076cc905d0bca98f4e7b7e1625f54974616a5657c82fa34c1570b51979218dc5144df4f41608f40ab379ea5bd395037e31095aa51080ef1fc6cdce618c6e437392d5318fbe86e36bc0de8e75c51a43ea612af6b6ee618029dc94c19398a6f629f1af9ac4ca34b467a37131f8fe668f02f9d4044fbd6dcbf4e587c5eaeb10962507b3a555ba777f170d1b68549e516daf309dff2073a510552a565797b0d84f802a52ce8d0f5591cd2de5f8f74d3414e3d20a69de7ec5f18ae607e6cbe6a5bc16d3b728620e1ee5a95b0ee744ced531fb69077d7e64bff36750b5645e873998fe88ac2e6ea0e625ee4d3b5d37b4b1f7f805a04fb719861cac0345c0b0efeb679b97c9dbd387ce942d047b437c77dd3e92c5b67dbbb559cbc8ff7bb479c889fa2117fb85022bdf174eb317bfa9fa72ffd11adce08699f37a89b8e5ac9fecd7884f51b54c3d99120d67e1908018cb1cfc14a09ab9f72c60719dbd0b591caff3dc2fa710640db49df665f7f05fa5af8e6bf49a52e7aff8a753ce3608588635488edf1731ff9dde7ea66892c8771ccbbccdc0ecc06bf4ff4cbb802fba4e1e3f9160dad62b98e6f5ca0b0741c86cadfb87480b80c800bd428e8e4fa834e11054047d58971576bbc2ee311202517d9ab6af401a5cc841b7f165c7c5ae0e7699d498aea06b4e9f31faa93c0319c010ed133dee9fa0e9825bad0758473347f85c550f6fd6470bedbb44d741212f5dfe791a6f34b44d89bf4435d71ca6a228828db06dd570bb0a5e266435e79ac737e494461dc2f8cd05db6679c2cf068a1fb2bf60f76ab7e2cb9dd1b6f8e15561a66db644ea686f75c09a78fc74559c116d4134ad142804806a9f8ab3d6efbf183b227f11f8673e99fe672c3d57ea0cd5ad0ad8c63c537f418f47fdb8ecb1064720632b1c38c7bfe871d70f1dce9e6c366129038a0e305f951e502a7ae3b77c5ebe301339837cc105cce2864776f4e79b025c0453f1b039ba1a8ccbf2f7f631c0d92de077e306762d9c6433288ee31799c73b69aa4dd448cd021efc2f707cd4e1166214ea4148de3e6a6e13d60aff66597157c0c563bd18f16e7692b13ed4852c2b3f459069f241e0b1ea6c81366128281528e41fd686076b75ebce631b8078b4896d5163e1693e783988c2e6579c38502c966ccede1c4aa5fc737c4c9fb01d42e857677058ef70583282b658d3a4e59a22565da2ab86ff385094224791a25a1755eab812eba7edbafd2554e47f9fef3bccb4ea080c197f391f01920c54a59d239556054bc60d6e5c2115e1f132766aebf4c05003a487187434af70222b367ffcb77af5208723d1fa4f157c8aeb807588b7dadf0715b224d16ada96243edbecd8faa70b93bee54b8ca1ca857245c62d3a185f632805c21ea72c3a43b2cef776e011e30726780dc00839f61d48ebf0ac8e2f35a1a64a1c1e0ad65064dee111412fc51e53470e6e3de0f12cb9213f8d7dba0d3c934a0dc28a57576cad5bb3486479a6afdf945ff0e3d0ad2ddc342ae02e862a2342e91182d48d186b836c225bb6f96019a9a9bc7ebd3327572083a4e6e4643a45ad77df2e377c46eec78d99f4d342999b71ccd660d389f895c9f9643845829ae39a26e75c62f818248a8acc1a67262061fa08cb04e78414857b54dc5b30bdd655b7fcb67ef03af9f3ccd9d388d71159ab053a6b13fdd80fadace578c748ed3dec270a488ba33b99d9c9537aab98b0ab36ebd86e534c23399618ee0e4ab199e2d36e48e63e27dad49f8371244b0e4d9d447c9befc4ab8f7e3c5711513b2dd709156e1656d8a3df", 0x1000, 0x4}, {&(0x7f00000001c0)="4e6abe436e25230c22ebed5c98dad2c9ac448bca7245f74828586dbd1eb118714e56e7edb3775084ef26bc8b943b3fcae22bb50f5a2d68a7bee5eea95c4db1fec145e83f0d8432f0c03ffb2b418d6b89b4275120df0c67d56f2baaba085f582a1210a47fd51669", 0x67, 0x7}, {&(0x7f0000000240)="feefc11de96b7dba4752decb4875c7f8e47adceccef0eb467c8f26d49c81db0be227046a94bc8d2fd92415a9e3f891d11a05f99d19153ec50fec26d722bdb04b9f7eb823fa68b64db0c06b4c4d6c31f43e88d2df9dd7f6fe13b13646a161eebe48f369e66564953ff7f1ee8d6b24cb", 0x6f, 0x500}, {&(0x7f00000002c0)="3455559a48efb590b5e88f37020eed4820230839df3fef5f8348d037e551", 0x1e, 0x6}, {&(0x7f0000000300)="f3f4d5ee5c8175f006449e4a84d747de8cc58380d6b5bea1a7eb975d312b43d4ca23f22f637745ab67b64a16b83a6e2b1c60ff3e6333b5aaf40fbc35d23b29b0f8db0cf2483d5d8df17b8ae658a050fb968f5f09239facb97a46a468ee7ba4b6615863dc48ecd5e4204c38c9e3d9f4786654130e2247543bc3984b111a3835ae787552fb23c5a96317f232d558fe64b3ed0704472e3dddfecaae6637ec57e149d13b19157601ea5ed75ec2b5a43e23a31d10843de59352fbbc95d983241093f445e3362b5876cd557980711de66f142e5ec6", 0xd2, 0xb74}, {&(0x7f0000000400)="9e0afcd972a1f19f207fc8c56a459ca8e3d5b24590943cbb8f633ec0a090ad1328b33420e1488cecd5d74a90be75d179097e81dd626cccbe2968071a269b3c2f76b9d8246a1723de728e216757847a5adf4470521da869a66454af859348ab", 0x5f, 0x6}, {&(0x7f0000000480)="aa59b8118f9e618db4097dd38babdf08085b4b0df3b08bc84c35eaaf0965c33be8f2283adbed4cf04445b8e96036a4fd231e7614f4b93b2bcc0d00af1a67c81b35f1e94f4dec297ff0d2f3787ac1f71b9d22d29fad2286ee4b57ffb70748bea3af184992b3b7f2054feb8e729ec1c70df38c44786da013fa025734d91ec64d0b09d080832da7b03b66395021d602dcdc690cdc1ba535629b4665c7edad0c44b1b039d1cda08ecdef4d94f539c320a6bd6b33c2b9267965de7f8361b7d0fc89684d44875a0d1c61ba0847fbc4e91f816e4e7a802a5daa292d956ccf8cbbb5c87ec45a8b071cd2ee7f8b317c2768a765908fe3c64b073b90ae486b998f359a", 0xfe, 0x6}], 0x102000, &(0x7f0000000580)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@tails_small='tails=small'}, {@notail='notail'}, {@user_xattr='user_xattr'}, {@noacl='noacl'}, {@nolargeio='nolargeio'}]}) 03:34:12 executing program 7: mq_open(&(0x7f0000000000)='\x00', 0x0, 0x88, &(0x7f0000000040)={0x7, 0x8, 0x5, 0x8c85ab8, 0x12e5, 0x1, 0x7, 0xba}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) getpeername(r0, &(0x7f0000000500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000580)=0x80) dup2(r1, r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1a, 0x4) 03:34:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x4008630a}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:12 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffff7fffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x3}) read(r2, &(0x7f0000481000)=""/128, 0x80) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x101, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) [ 300.839903] binder: send failed reply for transaction 483 to 21195:21200 [ 300.851888] binder: undelivered TRANSACTION_ERROR: 29189 [ 300.864027] FAT-fs (loop4): bogus number of reserved sectors [ 300.869910] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000046, &(0x7f0000000040), 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) getsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000), &(0x7f0000000100)=0xf48c16dd2d2c38f) 03:34:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xbc, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r4 = dup(r0) r5 = eventfd2(0x0, 0x80800) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000000)={0x2, r5}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r6 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000ac0)="5a1606d3d72c7033", 0x8}], 0x1}, 0x8080) sendmsg$alg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r6, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x200002dc}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) r7 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0xc0046209, 0x703003) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:34:12 executing program 3: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x3310, &(0x7f00000001c0)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xa040, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0xd, 0x3, @thr={&(0x7f0000000040)="46dc99dcceabe0091cec18838101403401ddd84ed6d9c79b8d8f07575c7cea6667c5b3c678af706548cc53067f30890ff88015", &(0x7f0000000080)="3e6ec9e50961f059682aee3117eca4efdcbcaa1467e8001f492a32d087af5b05f676c5464a4efcebedf315c795bff0f7d26f26a9abedfdfa355f079fbea516b1e07f088541ef7e25c9f72cbe19c3cdad0f216021649eb02b2706d76da24d895b60cf3460dba87a42eccd2425ce8633058b6d2cc0c7b06d1a8a888efb7f88f537c244d809e78d9dfb8c453508bf14d24994d3d8ab5cd27d4c304f90a64d09de3fdd8469bc796ffd1284"}}) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000200)='vmnet0cgroup\x00', &(0x7f0000000240)='/dev/mixer\x00', &(0x7f0000000280)='/dev/mixer\x00', &(0x7f00000002c0)='/dev/mixer\x00', &(0x7f0000000300)="70707031e821706f7369785f61636c5f61636365737376626f786e6574316370757365742d2b657468306367726f757073656c66297472757374656424292a6d696d655f74797065747275737465642500"], &(0x7f0000000440)=[&(0x7f00000003c0)='/dev/mixer\x00', &(0x7f0000000400)='\x00'], 0x1100) [ 300.965358] binder: BC_ATTEMPT_ACQUIRE not supported [ 300.973873] binder: 21252:21256 ioctl c0306201 200003c0 returned -22 [ 300.990219] device team_slave_1 left promiscuous mode [ 301.045262] binder_alloc: binder_alloc_mmap_handler: 21252 20001000-20004000 already mapped failed -16 [ 301.058381] binder: BINDER_SET_CONTEXT_MGR already set [ 301.066803] binder: 21252:21256 ioctl 40046207 0 returned -16 [ 301.077248] binder_alloc: 21252: binder_alloc_buf, no vma [ 301.082949] binder: 21252:21281 transaction failed 29189/-3, size 24-8 line 2967 03:34:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) 03:34:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x927, 0x8008, 0x8, 0x5, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x4}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000002ff4), 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001a00000000000a000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001400020000000000000000000000ffffac1414bb"], 0x30}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7c00000036131257fb2146aaf829d544d0749133b7bd5d05a0f04ce294be995532bbcdd663da6e0725f3ddf1e68493ce361f8e54fff3beb57330770e0a2538709ed77afcaf2df66fb1d0f96f3e7fe4428b8560d8850cdf7a1234cdbc74fa0ae6fdb26e490caa0f6c1538fb8351e084ba1eceb356b974f1417a03b0be883f8fa664d56c680de10ca94dad0000"], &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x6}, &(0x7f0000000240)=0x8) 03:34:12 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:12 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x196) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="6d656d506e90d1737761702e6d617800ea43e2051642e159ac1f6809767f02125babe4bc8aed0597211bbd9f9d504ca4b757fdb86185314ed223ee703b39da728ad4d7b775", 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180)=0x2, 0xc) ioctl$TIOCCONS(r0, 0x541d) 03:34:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r2 = geteuid() sendmsg$nl_generic(r0, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000001680)={&(0x7f00000002c0)={0x13b4, 0x12, 0x802, 0x70bd29, 0x25dfdbfe, {0x5}, [@generic="f2c0bfb91ac941cd85659b69b9fc968b3a0f7264cd0234322ab56f44a6d2bcbfdac7bdb1d964e7d73377ec56d092b82b963d7e8fb4e59c9034ce7e52cc5d370a85ba00d88f6f541af78a34535f5a690eb3a6bca6398da2395234677446c928057eba7a2b0d84214234bf5a518c59876c2e9cbdf30d18d8058f7e4ca04f83bfd52d109597f18a006c9de1c1a8ba56176053c0c5211ff6ac7f85ba12c8264322408c304969e3842a91c0661231bf3fc1b005d04b2bcdb3d8feac1634acb45b4d160d888239c7f81e6095ea3949ccfd080a851758781a13cb571965acdfa3555e43aed8b15b29418db998c272500fa331820592b2afaad355d1486887e823fc7b15c5e04efcc69a21de9eb5dfd0389173a37ce84d22035ac2908f285e4aedbda2d748939e65002b0e56bc9eacbf6dc5383f8608cf047a11a7da047536b54540a31e1e761aa4e11651f5233f03425c4859cafded38232e642288e89987a3f7b3d11dcf746676f8ebe184223701a16f95b3316680234fede3a486c454a3466d11804c5db97b491d4d05fea72ff56db9333e8d3ff454dd5896c1d854946504c20dc5378e4b47208f9dc54984a725f4fb447567f9f5b99b3da2e4650a0012778573270805d64e13aa33eb6ecdc83847ef50137b7ea286fbc7526d45dcad98e280042cfab723bf606f63387aae4ae357cc6ae0266743eb199876a49b9243e5627e67bdff8b2b7d6ed2c6ba0fb111a90c214df1f041069bf5bee902c2d6a785e11cac5588b9df0d4e836a172d130bcc66b08e129b5bc9beacd54f4c5ed37ad50a459c4d0b00a4b91d90ece09dc122ce23eb84bd607ee427a2fa6864c465f4b58ba562b04c8bbca752ec6f31a8ed8403419f8d3f0c2d42d834782c1e0c3a927ba7742b548df92331fdb4d4bad7feb1ab74d9253c1789db49302eb9de39cc2581c2caf13dc3473fcce44cacb0b86389e8c45f2c1c78dd4bf181ad31d6187eeb1b6cbe244af3217321c61f5fe4182564529fd10cdf55a4c3c95c2b83387bed1a6887cbaf26408c13397885c7be0b279d55533898657fba7d45df561ce3be35c113099befab6d57b1acce9ec3076402a575a4a14018c3d0d6574b22abc46625e6bd5e676f64fe78c33f62eddc4a97ac0ff052de24b7db9f125728624fc23093c0ea6fbc0ed1c0730d25e7ed6208e42046cbe4ad761f539eb25464f0e5bd2905480af21f66998340cce0ed3d1c47027a45c4ee1c19062c34d9deaaadae00c1d04ccef1fe416487a0cba7d95f8783dbaae652e86dac6bdb96c827ac0e5cafbf4d3467f1b47c445b8da4802b4780ae0278d068de0a24bb3ab18063fb486f359952ea2cdf78304aebed44c2ea6c8eb6f94f7f8d8b017155b07445c30eaac3e5a86dc8abbfb052583c0f200ce6aa3081e0aae28721ba093c6535e0f0920f46a012a08ca21861fecff4ca029dd47c1c6567655ab50f4e1056a462104ce97082281165151dfa18c9481d991ee9017e0e1a922f5e2dadae7aebe2a0ffbf07b55b22264444f271560a1f6ffe5f72c68c9bc9707b7717b6da9c3539035e26bd5d92fe9b2806a8494c6b75aa7f1c21272aaaf56f3aaf542c401056da8adcc19fd63fde1daa0026e09a72a1bf0c42276215c4dc13cc9db27f7f10dcc0515e787d28ace557557ff09785bbb86b804fe6b899eff971e11c57527572dcc23fb4477b93ab4514f62e5b0d41bb7047f658d34f6a7a17231e562bcb6db73d772dc6783a178a9af08bca2701b756fe4fd4a54278e3649be359183c84e5ed69e21858513ba0886a4d062ca55112f8cc84a501c53d3ebfff039b885001457d77ad40bc834a065335e45381c673339804781883d76c49549a4e76b7b5ee06f71eede1627b1584b78907ad97e6f95cd4bb77f6da7845cf736649c49a972a09bc8ad9ec433ec9e26f59fe318f81b3a5860a8ceaaf2dc58165f701409dab498a642e4580d66744d2ee111a55f80dbc9ba40fcf9ec93eae7c20d78a2d9b520505514d41d1636b8ab1d8f570d4b60c6f8e51d050cd764665e03190069d20649e0ea40e561ed4b4d79e5718feb9eb0f77b90ff61d8f20a18497dbaebf5aba1c782647e8a520d50381fe6b3be86fed47290dd23fdd43d59fd8c19a6645d6ddb394ae22319518fc5151d49224e918c00af1012948f687998398bb4f8ae21d6e0aaf76ce337d0508fd0dac745952eec868c9328f6865f102a6f0d9bd4c8463e10cc8e5894878bddc9181302ffd0816227765415f342d0dee492546059734ea34b9a102993af058e66c878b708606d566b2f829d9b154dc8a18bae548d7bf59e79ecfc3fb2a6c9d37999d47aa775c165d98c312d282c7646ad8e552ed81407983a5bc368787b0cf5dd1f30a9e461ccf1f0da91024c04ca0442af7267b4970e7ec6ce70bc38bd3aef434a3f8deccb90c456ab109844e8d7340fbde8293c653ad0e184f8810e980f950bf77c475f858bf819bb7eac807f4e748371846da7f0785226cc739ea92903bbb52c884a7f1bbc4c775384f668eb2e5feb4eb40cd03050570137f64ddeb88aace14174300638011787c4b6ae6162ad6d8586788c49777a81993d5806f06962b6a3dbd7b74aed84f8be2c41ee3d81c1d005475e6cb13572153a75c53aa414d865f29e9aeb0529e608f86cc99cf1de0f11d24ab478b73228e2668f776a086f11060d41f0e1a2d2a40205bd167c77443f074a3e2f2e2f8ed14cb4c9ebb31c0632adf7f5c9ddcf52ed85f7c0290f1fe7d8a48a3a06770e70ab6674a17659afead90df0d0d66807a7bff689f126d154f7682dcb9b509efdf0c56b88ff41538cacf64da84cecd93ae1c4bbbcab3f498e0884a38ff3b989b0025f41187a1093809d85753d3e8f13b4a53be9291fa18093a6006812132fa14ad8edb296583dd5ebdad8699d5534259ccbdf114e7cc8e5afb7ba84c53acf2f2bfbe3b2df0a392528b36ffd95956d3c4ac0664f043a1a8bf4d4a6bcb42ff58e1b985b6031f90e75078f0186f5128070ab42b182b44a8859ca0c9e60af7e43838936f0c6a3ffc9bcd4d22e9ee2bd11fa0dd62eaf7ef9a87df0578f4b750aedc5b9f900c4de9405ab03f311f82f6d311f0ea0f108b318dfeef5fce527405c6623410e06391007f9bcbe15764f7d02e10ee77bd70696073f017efda37a99af3563d3fd3629e37620e9882ecad1c790160804cf66aee7ba2c798ff2e3a3cc0d7bc4ed427a0f177013a7b48afe61c2c09dadeb7d04501bb97c5ca85a91d824af9643aac313f2a799dbda3dde9543a251911c6cebad445da6e072cec31ed827758e608ac7acb096470dc78dbf5cc68c41721eb4b7f40d7e4db6b9946737f37f29f3052cb3229d0b77c8b3a508905be93c6a6499c7e4c2c3b6ff775025defcd5a92f60b10ba9b2baaa88671254b97fb223be49cb9a4e889b6a9e3b1f723fb4256b496b617867b7ecc700a8e7531e23174cc228a34ef1cee12072433cd5d3273f7dc9f25470b62b8e785373f3ce62d7b5db376b5d3706fea5d9a4eb9acd37589a318ba841005e3d861d6137709ff3a0cc8a80e836880f4be709f2a82db726151ff6ce3586e60c1b68d36d387fc2a0eb9995eb3b17dac871df308f339f9d3f889bc937ac2e96e378f182031c47716892a8fb17adeb5ab9adf3de6b30d1a60c50ef02f09f0d32472633af0a6d1fb500b725144eb9525f83596bd5808bc00262dcba45cb222113f91c778ee1374729ec65220e3db7ba689c4bbcbd086c59b560a27f18ddb54d878a7b1af19ceb52289f7c5209cecc3c902ce83f8380382eccd98eaa7152da45bf5d2d82c49fc6fe8f7fc55982a7842bd7c76be1f752f57d8e1fc2530ccaddb0feaf23c7ff9589d24e6cd849cffe754506036a6606c21d80923f0255f96eb0a25dfdbaee7f8689cdc95c2a15ac2b997e6fbfdd373e8b619effdb78bbba403ad1474ceddfeca4f69b4faf45825115cce687eebf3438b2633564e9e1380fb93c491e03e889c8fd4d5915ecac9b8cd82f17f5ad898020938209fafbf231de5efbab21849d2414c7e36fac77c3f0f51af55e73d13ee060288a600358dcc490d93c0bdc5e9ad97f8d4516ce74259d57e3b6af356404c5e3eb8991e8f20114c841d87ade6b43d58897464afef9130410254a90eadbe8120b645bae60f0b6e1d07a5993d950b33f3d4b1df77b8365c01c90079239bccb7b398e243e3672feff4c97d4475e74c2e3baaaf80e0dea090ebd7164a595b172eab776e5bfb13b32817920af70eec8be14fe7dd4624a01e13604432a5ae0d699158caa95fbfd7d71955f079d11e627aca437e762b4ad22e2b57dd2f379c3063e0e522fe1dc7e66eec34c536a4d9ca36d3787acb631983c9fcc6f7b0663501cb9b23eb4880a906e76ee1725292f763333a6f16804120d9bc88cb2b69573aa6d6b9716bce5aa85b197cabf3aa1eb6a8f4a125da8a84d10eef272bfdbf116d45e2ddb58b32cd246570ffed504024d92be6596c90022fafa7bab0c2c662d33347c5f2240c968ec474fe82604af328ce8111f971c788410bf2815db3099dca91732bc98bfc91b205a484dab9b4eb12b8b46345a5c70c55e1aab94fd2d04423ce39a218fec2704ad7eb05911ec72befc3010dc647792c90e4f2d8d4c50356d3f9dd6f841a5269ca14bc8ac6288ee88d9b81e595da55399157bb2c7043ce33374d9421993f73d54f0d46f75ff805b93e228f6ce3d93dc02203946b0aeb1c1986041070973f9953d4870aa82992b201d64610b0b2938b8725166ba841319a0a398ef436a623252f6f3ed765772ccfd97dcc0883d584c1d583549db33f8d08c1129da29c372c4b0de0d270226f22bec251f1abcd7f6c8960c32cef2e29cc6f41bf7eb2c3e862a5b1a1df6fcad896b18014eb7d1a073ea242905641b40dd40fa0da66e27017fbfa6e887699bfcb6a47c95a907b21c3c1604dfd9948fe5a58f41fde68f900c2835d602be502bb05d3f057f10a8376faa17326203a691c479372703a9c82832e7d8c3412a0f060f6dc6a9d946805106358cb32e0824b198c8f29070c296738992dbd981df986ab2139c012a81e9ac35c44eff3b62dadd7e2360e50139a39bd185a4798bb35b7bc829df514277390f1c07f1de07875a61d096dc457b0e3afa2097d3deb47fcee85fd32aa6b289b08be7a2499517a426d03bc545c0676ae30e868f883df9d6ac389e804c3ad9bdcd47514b2f8af27639b6ce867d324f752bd46f06bb40a09ca135d109b1f023923b1ec32ffe2e6d27b9bf79603ff09bbbbc1368c730dfcebec70bd60017e2e57835a8395f1857e409766c0eac82a58379f7358d74ef32e71630a47ebaa9919f9094e526d52868d10d3a0b37ecc36c38a39cf759a073701ea9439eb7c92879b3ebcad7bf5f605cd3f04224d14ff7a352f0894cf9b5fea7d38850625d3417b3bbfc08caddd603a137ac7b2d57df27ee4e1e1c0b2c11eb53acaa2333ff5a961fd1414a800049187d87dad0e8c8286f3c90e04e2140b13e8e7f535ff6c45975652f331c9457d5eb7cf4203295ec9cc65e2b9bdbda2feedfae95fc139cdfbc20e9a29051a13c1a6b8a5e231d5cd75051d4ab1ab4d6bb5ae05cd36310cc5fe9b68a96a08036fda7cf3d9207572558eaba658902d5a580f582f5225a9e0122465dd7dd6c33e96bb4d499051889faf4a68c290cbf91f91b0e1ff6550b0b9d6e2a88a7b4ae26df3c461aeb75a609133145bec5897abcd37b51204286c7f9d78492f4d4bae0753d7b43d49c7582c4947bf8c326101202cc577ef648e44d8c4", @typed={0x8, 0x5d, @uid=r1}, @nested={0x1c, 0x74, [@typed={0x4, 0x4a}, @typed={0x14, 0x95, @ipv6=@mcast1}]}, @nested={0x37c, 0x59, [@generic="2388321414456dd745c96a404e8cfb6e9f627b5a6a62733bf6d4c8c8ae4b988adf0e0053801ae7ede1b1160d981b030a12213563c2336e093f73db9aee576b6a1944bd429d0debd28f7e42dc4e1532c3f3188d19ab0cec18673ad60efa6f873917cff499ecd47da9a9a99493ad9d67806c532b07aca68e3e2de6fa141288b30e155d6c9f6e3444a89026c9ec1da23db6cc82ce07295e5f796bb8816dbea2cf345d257c4997003798f9d6a30777347c483908066f3edf4ac13a34b4c8eaa9483eba8ae55ca4c1b7fc6da525ab99aeb7e2b30074390300a6842a1f4b21c86f0b17e05a63f30c2ea1b7c8d23999", @generic="e031d4a9bedaf3c28a36306aad1f3b0c5a03595848128dcc835e059e9cbb2303e3225390c6e3b0a557557d4e716521ce76a95f23080848c3ae4f719b7b9e2c3d166ec0f0c10542399c27ab534a4c8dc565082636dd63c7c5f5e2bc21e92670dd5f3427499f57a920d3ba84b3424893ad8916e64a565f286aa3e8aa3e006dc33ced1bd08db1", @generic="7792096bcd60a860751b9658461a6e4c46e40f17d0e2878dd158c709b90b24e24a75c657d5b11c3da660378ad17604da52538b2df3c34c4d768cee52d6a1a65866ea1f8084199b9959c610cc4406fa2d93518cbd537734110ace868304ee54a3b662be55df817b56425dfde3e12dc862553c8480dd55ddcbf7707806312bc141a5df3451d7117930d22cdfdcfd958e310c528e5cb3f5dfc73fbc057a840d897c3112a3de628a737eccb8e9feb91e74ac533f6cfed2d2e4e92fd04e18e55639838514", @generic="34489a87865d25487c59777e729cdf12c41ff6e001a2bdceb4e1588b8f", @generic="ee8f5d01e7673c5de5c580659c24c401ce44024cec9240b4b8d2646178b073ec4b054d1bfc1c230dcc23d7a328a916", @typed={0x8, 0x2b, @u32=0x1}, @typed={0x8, 0x7a, @uid=r2}, @generic="b8a3a5ebe4e030beed5135dd631d428d2a9a27634b85644581883faa1f5002107fb22d22801c05acf11779eb95395a794ca0d0dc2b4327683b26f23832fd33dd2bab7381bf3223c42b050d408c41cd0dbdf23e7f2512281cecc29d3162593b7b833bc90b8dc26ada334f1bdde04f6b410657465c3d1d82c9a1621e46c485ead6384e7711415632cd2c2301bac5f9d6728a8ec742ddfcca8934412413f7f04b574de11f1eb929cb5c301b003c3fe4aeaedc4afe4dd07af9395aeacf5b8065b7912ef8e553f1728054", @generic="0e8b1cd5e3eb952a239dbbacab0f9a49fc7c81b3d3132c1118891bbcdcecdd"]}]}, 0x13b4}, 0x1, 0x0, 0x0, 0x4804}, 0x40d4) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10, 0xf}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24007bfc93f26800003000ff0a0000000000000000040000008506000000000000000000fd6ea35476b3d8c1c0b952b154e2e8e4cd3afa4ee909600168d5c1d620648220e36ac74447c0a436d8e7f783431a536f202df8875a6e7ece9d04216be2321d3144b8688852d4be5f3a7840ac6453b4e84655d07dc87e653896cf1b2213439bb72d6794fe788e8a75277b17aea937382ef1ac9ea808f74824af56317daaedc78ac8249513673d4d630ed8ab23ef2d5819cd0825eabc231be6bae0c84184392af4742b40baa6c22267a0f808d0014b73c314166225016167bc"], 0x24}}, 0x0) 03:34:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x400) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003380)={{{@in6=@ipv4={[], [], @local}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003480)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003580)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000400)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003dc0)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) sendmsg$netlink(r2, &(0x7f0000000640)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x81000a0}, 0xc, &(0x7f0000000540)=[{&(0x7f00000007c0)={0x134, 0x14, 0xb03, 0x70bd25, 0x25dfdbfc, "", [@generic="66c0b4d8c77ba28911cdad4e15fe2a35d0873e3e3446beebe4904b270d80947193ac7a4b42b708cb68d2fbad548547bd1b932c475b49fe597e51b5b205ddb3b291409b46dc6c5d46a06e524147ea3c807b2e74a44a6d2d90f301", @generic="2ac52c51274e78255ab522663de3d18d304268aab5704a014734b7fd83dc832b2569a357b25d043dfcb5d9ce0bd994711a57cc43ffa978f955b0149f9b7e57a002a121b1597dd32e9f4a0e03c6460876f536c240819460167e73a43768b0893b2492a7cafe853a44e829be78ab2458aba81f6bcbe377e35e22fb7afcc78cbe307948c7099a3d79d154cd3ab017b4b8e7e57872be68da432ac324859d281a6c4b64c9e1ac3c4b3d382ae53db0043a7e08c6f1816501cc12d224c88670996fe342680839ec94c5d9"]}, 0x134}, {&(0x7f0000000900)={0x2874, 0x33, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x1f8, 0x61, [@generic="f256bd0061b295b6f897aa4350696500d4c51460aaa9d397f030271191804f8dde6a9d401df88d4037c0d1dfa7b90fe6889aacffe9806c6e7994286acfcfd6a813ac1b8018b56dca61f75f015214b589cc6a0cf65fc7579c1f31f7136f30a30a5cadd307ab38dc2e7f99a67e54be4395e14883723a49e11589f131cf0563551db5371142f709837ca23a96b5e86591b29e130a735d4965cb105b921a176e89504fc5dacfecc21eaaf5f83a53c6bb419de14956e4ad8a163f2d9ce8936d063cd2880bfcb4bd79417e3eb2e3854f2ace77086bab04d8940031bfd50ae7ce2443e9f03328ebe6f04887f6893d0d42c8bc", @typed={0x8, 0x70, @fd=r0}, @generic="c91b47670ab8555bdc7477bc7a908afbe1654e3b4a581671d8292d383f0a64589166689036a44d529edfef9283d5c172389e00e3fe7217188c5faf950b9f93cd8cfb3f56a4a32dd94644ca6bc7f7e5dd1cd5ad8a5aa5edb6c7f422ca100266b1439afef1094798809aaa34842c1333ca5a375a6936add4217fd0939251e6d68a4fe2ef85fe8bfef4bc3b9016cd86750d533189bec10cea6f4734063856714570495a80e87fe112", @generic="9e16e0aff71072b7702b72011e57a31b6169b8f9be805b3cb1786022caea45c3088ae36504981da92acf7a530982ee01626b3db65d07defad2ede2d44f22e737b6fcabbb9d96a6ff9e8bb0f9cd6664b74416c1a6a1f2"]}, @generic="359635df371c2e2983cc38161c1314801149b6f5a099159f5dfa2a95c479e92c3fbcaf5ae384ab4df6beb0a3d33cd3cf70c92239132b954f8fb145ff31729e208d2bedd7c170214af507779a72b4babe4cefa50ec272019f0303b06a136f71c49fe018a54f685caa1a62bb45b61ba99bd3b71da8432a6e4125b55424c44aaac539d3d4eef2190c10cb5222c57e435ec9771fab8be77429aa09abf5f044dd2ada9d6bdc8d0225b4ff6830b57398", @nested={0x430, 0x33, [@typed={0x8, 0xa, @u32=0x101}, @generic="7f4ae1035e77133f9fd192c1e394053326d9917b14350afc72c7df078b95008b717e05a5d36b466d6fad7100ed48ac6c4d03c6583ed6b504304fed508bc9ba288362390efcfa67ad07c78f7eec1a8cc2336d5720b5cb842250e7081c456ab21adb93dd0fddafe4ef476034ab68b3337785dc0dccc89771f87fbdbfa4f20d1f03741c4619ef5342f92ec2970488c5dc28", @generic="e4081e638efb21c8054401ea36eabe19948eab4b79bead0ef8f7897e789694ea25c714d71d8339d177057047221901c5fa76c75d634b8ec3aceaec7a52c9a21c6be6f0527983b56e1b4d84d12b3e94710190d20d1a8ab43442589354f7477f106a9666b63283f0ee94ec0b721cb0c820d17ba11d9e9b7ef97bad66889a24119bc8d9e8c6f62e24d01ebfd85041c43da618f022883c863088ecf1fbdd3592aad476eb43b5a1ee582c5212a133030b63e3764f4e486d755bc1ee6fe36dd58aec1b32cd7c56a35e8027b149d75f50cabd51bd244ee82d4c1f615b25c759b47d47d1936de58d", @typed={0x10, 0x94, @str="7b0a232365746831a700"}, @typed={0x8, 0x6a, @uid=r3}, @typed={0x28, 0x81, @str='^{eth1ppp1!+vmnet0vmnet1mime_type\x00'}, @generic="b9b183ab5d9b9cbea9930559a40c38cfa514290ff7d2cb4298226ca4427ede29954ce8a8fcb0a262e2ccb04d825fcd56a80c3d2f36e05ed57d75f640ecc763d552cd6aa08094abef64be8d572c25c0a6447ba9a64c79ebcee89b0935ffb216239c6579f4209234fada8ae983c8b4853babb72a851c77f7c9abba39b68f5d2f423406f73974ed1f6cef7aa9e1bcf575f1410b454e0b86295c3866f22f4a5af52b27edf12653cb3282eda5ffb353fd8c33363051a7f6e96df4d9c79f1e636fbf845bfa832d81f5398199dae7228f203336e245e870811478a973", @generic="46825f1729b0eaad007693b25796f30f426d96daa8d27286529207d3581b323993cf67ac99f402d11c11f9b8c3a25e3ca167be1bde41765fd42d0481a3b2b168e8a02e00d5ea151445e191e4d727cdb71e002bed228cd6672092458c87a9e0876a06989fcead7d845150e223cff43c53a4385627813cbae4f24937c85a4bae", @generic="db2ec191ff7bd28b0e5dd0796e164f8a674b65f5f8cdec6712456570f1a0b64ba573cf97c39ca1cc3f179b275c56542bdc28bee26d7fd398ffba34c96370d7ea19451000e39690d0c3cf7528887b6bd08b7d1718e8ce5ce67607f8d8e9b4544155b98548d285aa014d516b2915e78cd8ca8073caddf0020be255b466573dc6eea05ae82b1c48c04cd1c9679838d1ad92a1c0724f7843617dbe6546c47c81ee04a2d9e4a35c0df18014909cc27a71aa29", @generic="0b4d74a8649cd8a57e8477a848cb17e9c201586a2681399e9ed6e3e0f7ad997fcfd0b1141b294928017af3edc3fe96ac7567e491e71e99274f44303256fa9b937fc51961c3f9942eca9c755028120fd805e817808f08e15b5fa453ec09808042eaa0f64e9dce"]}, @nested={0x218c, 0x6a, [@generic="9df47e8ecaf41116be730084a24d800cc7f97d00a2bd8d9168491eb8002ef62882ed147f886378c1218f9697905ec0baa730107b9eab6b7e5e882e82f327e2910d096191e05092e25cb168da7c0070b0ceeffda1cbf90ca4dfa545bb1bff876a0451de2277d2cf5e4713323be0e2662d7a28cee9a90a2f59c7832ca3bec9ae6475cb0f94ffab0a4578cf7e7b37d80a364a53f75e75ee573ce1dde069ae36d0e939ce6ae2e535b38da11398dc7fad5cd232836de2cff524871e1d653f0ed74a697cd028a8ce80e01b10bd60839da6681efbba7798bb77b55a89d7009a0393909651e12b5b7cbd378d063ddd0e43f0514f64bc458511ab930dc88cf41b0a556a58fee6d8df81a5ce4df43cb2c11cd6896eb5be87c41b519df19e2879992470fafd9119495f2472b1c9e50c8274e0826bb00d75374b47e2af27a1f34071c652efc0357abb1ed86e25d994ad1296cd591cdb5ef97173d646c1838313fd0d4e4c98344c6fbb3cb9662069fa34d022e4d9e1f4e9d7eaddddab9b32cf1ffd4c80f0e349c40af892b91e33b7d53354b720d5e19632d1b1859cf883f3facd10d435bd21ddbbf55544b0e0176c246db6abea2101aeda3bda4c379a9c0acb6701393767d9791af2d03fab368d5d58ccaf07008126c2adde4ee60d14455c9cffc1035c8149c52bec3a8b28583930cc3301db70699fdd0afa46c734223cbb04af86a8252db352a8cee2c6bfaf4a6af0a983a2b589253a0913010129aaa64840e1ffb057c84bf15246a5a65d42a0e122d07f7434b7f0c017f2dd43f4533c4d3e35349584b98753c88e043f2da342537b8efcc0f2083c90b7831789c657ab428a29dcc69264a8bad0dd873b67e75d7ff783979f5ace595f2dca6f5df946f789b219edd150da0264e1fd577241566dbdc265b78eaa41aa8a79d486963e249c914004b547df0366efa0936392d62edbe0a562a78dd5a56ef0ccb897203ebc84f6126929d1aa728b05ffb85e511f07f8e41dfda2e11b9d9554a1e9dc7949db9055e1846f6dd0aee59c8ebd724e91175abd2b1b7bf9dc67b79418234baf7a80941a0eac9daf124052d8ab75dc2bfde7afddce9d8c065682ffe5d615b1b2bbe336688756e89179fff3a10b31bbcf8209c5b706a0659d57bfe647abcadf611d139d2ab9236a8208c44d41a2424e59012ce0438b1b447886d509ec0f0d1316ebc0b00ae06faa06155d603b768f62992e94a5a07f3ceaf89d1cd35d7857a1a38d04d9fba8711cbc0f55ccea78772a94cfab10dc95358dcd54bb8b0fd918499e55f07d0fb002d77de09a01e00535f35e0563fe313f529a83a1fcdec5e9120739d998b15ef3a270f5d96dd9ba5f87f550865f257f2be38b0dab8b6675ddea953bfdbb39c8031b4a23d2fee6595f997b95987c936689353c8f43b245186e3f420e47140b548a3cefb0b7fe4473896d68fb9091ecb888c45787d013ee2d1485c214c699f17a45d0d6c36d2ffb19d8a6555de949418f34365ee913a0c1a0805a17c8e4c76562b7c8a4c11fa0841234e65508b95743695dbaffdaeba8a1583be809827b3de7e5f312c469a63928b1bbf2d4d2c5352ba1b363125f903a986a4e78918c43d5dde5827eed41c0e80d25a41efdffe52ee6fbcb28e551740016e3dd56ba1fe70cf94e12caca1286db0f539ede5876419743f89eadc3c9861d2ab8631dbeb9b6b1a6885a1b192de849b6afa2714d6e203618a9e18b41cac432cd0785cfe5ef977ee8d89818b5dce8aeef4873345cd7916b78fb2dbbaaf5657c89602ee530baba350ed36b3f7d1c93aaa2e6acd1d2193d22f5b0b732cac45625ee102c208ea6b71588ff22b19602fa5c19eee673d7e11bbf7d0f78e7b2f16003849d03b4209e387a9f2214a3a42f98f83c4f5ef3a8a9e03f84917d32c18029d6359d358095cf884d715115fa6a111b3e814dce181406692b1ab6827f181aeca51efec76ca48fb6fc9db2f89cf58c5e83dca49b09481395098de386e71b4401a630b9ef847f1a1283589f1f35aaed15c241b9252bafbb4bc74f846a564250e790c81e61b1f44337f2a2236848b3d927e758a148c6b6ed4e5b5225c54513b649bba72f064414db73f932c01afe475120901d467eb063b59aa75b7d0d26e5099873bec961bdd3b2c70f7a29fe04398a8f665c8e952144361eb8664d2505c21e1872708bf8b30aacb2ef80e8522727a33230e04e9822711505dd94b3e2aebe428d60d2f6d87caed59c5587812ac20b84ef475de3377f4ab81bcbe129575033e8e2dd11aa8fa102f0beec930fce6de3797e6d4abe0b9d7b26617506f9156d823b250a6c96d3902ddaa05ba55f865842864ae8bff7a41dc98ed9f88cd2e95686082c20245dfeb3d22cdafb6b44ab2aa93ae586b9659f458c387255ecb55a1e109696b71a7da12fad2bf932ac42972fc0e889104183113584ba78629356877ba74313bf51a719d952fac32b41d4a4b387d39f57e14b4d0344fa0959f5fde9ff4fbb513673fa9c39cf4ac193f66d47d8386ce5a7c75ca7b93315490a0819d6c1cebfa8ba1fc0ab54dafbe8c441c1683f32aa68ce2112fd46222ae3ca98627394f2ebd6ff38661d7d110893edb52dcb988aa7f07da9452b35533f411550b43dd4b8710179a88bc9673904ed2a9f4c68d46dc79284c3be7c62ba3f12b39c4b4199313a9f6d7e77de9a43333be97529abac6f7c973ef95209ab71489a1e6a1e473849a389cf85c2acc5bc0208791aa0768e861e0169708250a75db36b5f8de9776dabd2111a24eee535151586e4a702b0c4302cd51705e896b636175614e82fc1af4aac8ea80e09efb6c53bb616158bf37d0706c7f063edb161ece804500fc7bcbff7887acf10d0cfcc1e567d61f9143394ed657d93f099264cf51a12111861c38a2820fcadc6290e9cfc6b07ec2e71618a9af5a7015b6787624229573aea07067cf57c650ffd275711219524158bb260bbe6127cf446b6168133abb0ee6bc253b0a1221bae470a02ffe81a4fbc3e4fb9765f47d75e083dad0d9e57bd5477c5512bf385390210bc71860e6c2e939bef72683c646b80bb16994faf4910cf9c58d769eefddd6935d2ceb7800e9e219f95e053bd39eae7b3bc42f67dd7cde9a272f1a97668fc1314ff2352971b9fff6e5b565be72a405cd82f8c615b768b8ddebc7032ff563642add879c391d672fc746f87043595954da0b327b9449e3342e8fee279863426ec4e62a0838ec7e36f94bbf265fadd0f3334b0165c0590ac69175333442a841c981191c9d477ee4cbf53af918473b2303e30d75e925675ce9a42b6ec09ceaeb5f8a87440da5d0555980e8eba8e5094d3465b4b2b9b0b2aef1a1374b2b0773849f0eee2f0e5ccf53fa75cb39b8b1d86c9e20beec33614322557d5141088360701f71fb3928809861cfe15e00484d55c545a150e0294b1f137c6f50f8464541363a3e6d894aa584236c6fd67f06211df7b86af610722f7c123eed6dd6a99c5beb392727c247bfb6b026d350a475e7009edc0d19062de91aace3c4baff487958697bed4b7c9d094966000b68969dfaf96952f94b683ea0c2bf5dd1abca7d1a7bf641a104c79e3bb4d174ee35e8c6898889e966e9e09fd37f92670580c299d370cf833221ae52c728c75536cc7176470009b2281a748ffebcd0235ee155fdb30015b3f48208d24cd0c8be3263633f40f959f18e559d52dc261566460ca4eb216ca64e4172b174af2898ce92e4608a015f4cc3989142ee500de065809203dc3ac1933900c198ac0a21c1e54c8369eaa7edd085c5ea616d5b160c006051c5cf9003b6b52826c1f2329d606c27956cb6a77d107a959fd5ac7560931a189501891842c8ec290b261f03c467d613d9053c9e19c1dbbd01f8ac3d3b9c0793287353be3aa0cfe7c4317704bc03d6a2cbd1831ec000652d46d077919a566fc588ef357dd8c00cb01636e04f9aa4c9472fb10650a91a617d75242f6bb8937bac1d40803d1949bb29691f0a119d7f994ccae6710c77869d163ae7b40a3fd195310dcfa16baa64248fafa6bd9d65dc977a475199470c54ffbf36fd9d2c3004f73e108b0b9293581ed7a86dd63f4a6d1eb205230488f26fe99942e871ddb9ef2a33c628b3324328dddcb53e8a5d34d9d5a089aa4b076dc5863676babe03570b6610ab4406c5933d6b1d19f8174da06f9cf94c0aaad8ed381c69dad082b4e19f01a372c0742a3c1c1f68c49e226bc95b08e5424dc36184e0f99b154e87622629d53764e198ad1e2943c6f63a79349efb7d65a360b0b973705210c7ed7c8628287337ab1226d454fa4ed2b691860bc506c636448f004375813b02c098565c51c992372dc94d523bd241993fcce3e62bdf66dc50832790cbe546d43f870824be7144444c136fd975e363d882d7e10d703fed0dc7abca9ad50d6d7ff7de57704cb3be4334c46c154d5e05f476c52951fdb4f32d26e704841c7cbf08c8484145d1a1729f749f06755875920b37a5afaa950f25f6b53c7fb34bf540e851352d473d6828b6f6776d5b2d21ba084f58f79edc153dc973ea94f02f84cbb0aa6cd44d5316b5999e272c177f2b899f1b5f7fab4db021f6140cc1d376ffa4b0bba2fe304c3eebaae92e8884f4bde1bb23c158b9240b6668914f99767da3ff3e3853859f409f6bdf2b7300b46028a878e2ca2019e6945008a451c9a3e4df9fdea85306e69edf1f5b47dda7430c51ba3628ef9c2ac437ed7b3c5a675724178f5391ebfa1f7223729f4fa44162318bdd0b05a69bb43895240025cf322fd9eb10baa90a698b63e00565ecfd19936ad1bd83b6d81de225160addf43b15153faecb8b28a620d1e56951007da7141dddd7a61827c259dec57afe4d85e5ab8e0be59bccf2ebbfef7c3a3033b656a82a277084f09f1ed29323d4d260189fce79b01cd0e0f5dc7527a3d3435e547f7d28483e6c641e80ac1eaa61c8bacc92b02e8768b4dc879d2d298a77f3f81ec74f14fc44dc69ef3600330a21df65452435e65a7af46865d1d4afb49a1c01aca8152cb3e8b119264f9135feed88a7d9d64bedfc8c927359658f11b8e837c2d9187bf5b00438547cdabed041a7b461990b3f2c33f5eccf84b041b244a96f425cc507758067de758e1b20891aff991600006db4e283aca4f8822cb3dcabcccf125ca3972a18bdc74c3f062e822a1659f4ed309f2495e48e1c1d347fbbb75d2897318d50f771480b580c8c5ca15c45a193a537e00314abd59f2ff7085009cf3a60f5bf21616fbe1ea4d3e9201f5937f7df70f17d2794f08ccef68f2f56d218173474a50bc7c61157a62f2e72ec97006a3559039995074724ac6fc68dc02d013d59d31818a41963fc722737b238b06ea9348e7a8b1a4d2d2daf1c8d3d9b22d8d5dcb28f5308148333b16d70a0b4e2639ffc419834b17f996b85fa9cf44ca47726def5fdcb19762bbdc2d910dcc1eade4bdfaafbf2e554b4e4077b0b0b0f2d42ad90219033ea25a10080dd6965cdab020091f64b85298f9606d903aa612876cec49900b4cded8b0c9f6f28ac13582cb47120ebf09866c9f7661a5315950da1755e379c304ce0dedc0d6db847f8b7992289830e98a16876d4d9f7422c0e8023eb8555d507796be02fb17c3ad42f9d7419e5099325990c822a67190e6f4d0024cf14f4f9145c5ed518a764ecd8b44551a01c424999e4ba934139fdd6f113ec3d977e115976d1613b2f6ef7063e9bf8be6a9722f55113fe3fe656d82216b3ec68e4250fdcb8a20baf3dcc3c71afa1127d92f1759b2c3f6fe8f579103", @typed={0x14, 0xd, @ipv6=@mcast1}, @typed={0x4, 0x1c}, @generic="f247523de52a35ae002ab44b5d2fd131ebfe837c1cea42a07ae052cee9297d1c617eabede9e16e2558d1dffe9bcbea8b712ff6dda98cc567a39994eb12ea8aad4feb15a800e5604fe3a650b9fff8d999cd1a0acaf1e7430d933673cb2131e6966c87432cdae50cdaf6a8c9226eb8f5e9a74191946fc52e517db36fe1939eb85b389f9fd08852843a8eeb0db6a333c31bd3a5fb1ca4966962f2", @generic="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", @generic="eabde4bbfb00568f39ce40e552086136471d34b6567e0be8b37c89bea7dc495ee8cba28ebaaee69b0e849e7912cf796ffca399180ae43fd68bcc107e54c0387657001f2d14189aaf60af80b37ca26937a4cafbe209f88f8932ead70da14e152b09756476ad17adffea3a511a01e6c1b7060459185d2de8fcf00ae9b021d95647c78715f7caa82a04515c5502caf1bb52eeca038cb39d66dc2209f5f637d09093a0c0507be9b10456a3018f738468c796ece2360c7d70f88fd438ff732d4b75f6497dc9575593693a48251c537c80dc084790fc6843"]}]}, 0x2874}, {&(0x7f0000003180)={0x1fc, 0x2d, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@generic="208beac0e63bf630dc3d1f353057fbce5ec16e2b5222d561acb00cd491ba6e1cec4492b185980cf5f2541c3d0ab9e1aefa6a6522c385ae5f1af7523ad6903e599af7ae1a295c4c6ff1b8aecbff22716ed1c7e1b78e2e914f521bb6d94216b9c4156411660ff1eb5aa0fa35bf17bfffe8401cc8a2361cfd362002d3fa92783963835f897cd5db5fb6681f704d91483152c9dc159bf52f7e2afef40105517e076d68bc0fac5190fcfcf3a268137ba26ee03d9e974942bb6031d78e9a4161297ad1d5e7dec027f15e2465b9e4c2de9557659bcc2bc5a6b055947eba573fc208d0e4e4d9df242c8551902b04f2cd", @nested={0xc, 0x19, [@typed={0x8, 0x53, @uid=r4}]}, @typed={0x8, 0x51, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @generic="d258741719833a85f630025da659b84791cd08c241e708ace068d37084a50f4b9641b5d869b49d5bbc8246f6fc4cb276b861cf45bbaef05864c94d372c07a72f1ecaf17e5ee1ec8319f7a614270574bdfd12ba1ba49edfa7f543f4bbd74153f3ce167df328cf452bf4c4da807eeb9f9c2132e7491f6d0e1a4fee2f30d71c13e7aa5215919f68e1ab73843f62744b02257f922008181dbf2c040c9f652b46330e5eab676fc7d08220505caf4703970fa6d7d6917ed4d1181141f245e51cc0e81bf7f2844e98bd36af57d12febc682df55b9d3780ee92a3c792e50424b7ef2bcd088a8dc36ff70a208237c70f2"]}, 0x1fc}, {&(0x7f0000003680)={0x35c, 0x15, 0x200, 0x70bd26, 0x25dfdbfd, "", [@nested={0x14, 0x30, [@typed={0x8, 0x8f, @uid=r5}, @typed={0x8, 0x7a, @fd=r0}]}, @typed={0x8, 0xe, @fd=r1}, @generic="5a2f7c952b4e95a58a576237ff2aec29b2ec8a340e597ba45621fc962e2c1afeffad562377b4eb3548d7154c0cd57c10e8584b92cada54dfd2d3b8c12fdb7acddff839966a67bee0e8dfa31b36591924dd7357f60f3dc2d65a194e8e18de43a785197f2cb0185ead999beb5ef30d46ec83386a079f1e877cb21bfd2988e03a59f108", @nested={0x108, 0x5d, [@generic="6433b2662e81d023eccbd45d5d263c351e957bcc762b44e4b4916d5f3f68e67acd48b35d685454fe8d2602b22e15243336e8ca1010acd4a2544d33699445c8329e138786fe8d25d1beec92fa93270dc4bd768e2ea86a9db5d134e8def47ff8c1", @typed={0x2c, 0x21, @binary="a642a7d22f8fefc0167fc90b12a51451618ff8d9020ef6404a2dfe514e09579e04423526102a"}, @typed={0x8, 0x51, @uid=r6}, @typed={0x8, 0x1d, @uid=r7}, @generic="db1007e3d7fe608d0b8b2a985f4c23f82622f40c1a85dbeedf2c098b3a15527d95fc64f908fa9dba9a4abbc784785e166cf6e2a12832816a52fc8462db5bc845df25ea6de3446feef053f07d2e5452dec280d915906f2be8a0cc0ba7d8ae4b", @typed={0x8, 0x3c, @u32=0x400}]}, @nested={0x1a4, 0x8d, [@typed={0x8, 0x6e, @pid=r8}, @typed={0x8, 0x1d, @u32=0x9}, @generic="87d1b6f832a115ed62434e1b74d37c62f26b7dcee5c684b7fdd82fa2d39d47f2d179c3af70ce82fcb50ca6f6fdf0139232427c56a4df7ee99cf13b3f38998ff3fc719bd7dc85e7fbe9b108be102c6c33b6901404944265bf7064f94e1c16a5071e1405ef052314e090d93f4e6f2786fe", @generic="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", @typed={0x14, 0xf, @ipv6=@remote}, @typed={0xc, 0x2d, @u64=0x3f}, @typed={0x4, 0x73}]}]}, 0x35c}, {&(0x7f0000003a00)={0x26c, 0x17, 0xb28, 0x70bd29, 0x25dfdbfc, "", [@nested={0x23c, 0x72, [@typed={0x8, 0x72, @fd=r1}, @generic="e42640faa183e7f90c8a1a3ab6e5394d0d7d8fae4e538093316872ee0ae0759a5b10b2b6a1250e2d903c52adb1f3195173413d73c8255e436dc054a87beb1ca25e93334feaa07c7933fa534de2f9ecb21c96d3aae8b996de0dd8790f510f6b0b0fa302b2bcdaeaf5c3dec1583163f4cbf99c3685d6adae03c6310324ddb7b3f036f534bdf08d110a554e9b7891ff5529ed653cfa94ccfca63bfa260291c3f7d72ab7825b7acf2eaf29b761a1208d331c2f14cc4b04e817c6d1042eb2506321198111112907ba9ecca42f8362331b2a075a4603a8a134016c27f46f462fc0da53022753eec8a4f98ae93b0106eaf790257516597a2382", @typed={0x8, 0x1e, @ipv4=@loopback}, @generic="f21dc45c093ab8bc1f45d62f5bff02876db0d5afad3deca6b216ee5fffade06f62d71e9f964c6ee4c75c64cf691c170d06338957e8983667", @typed={0x8, 0x3a, @fd=r0}, @generic="263fffbe5b7712831fe93213c22ac9272ba58e842ffbf5f116c434e9c23273ef609662979ebc67f21da7594e441ec138a6dd1e932f0ea67b6cc48d3e717536d6ff687e5afec250c1f446c360fb24d951e075026489bd6b6da1ad2e4a3c78d6833e817d72acad09da968be26759f0dda1a93318be687d5827df7ef20c21cc8ec2f52cb495185a0aa228534e441f4f5bf445d91750fbe7a7105ca23fed6e62f85486beae2440d2881dad0ed9ea2543482cdd4d436abdc0427734233e1e8c85435d960699fdd2f444283924dd5610cb55c200258bfc3efe42b2c57dc42cb8ff39189180c6a2bc60", @typed={0xc, 0x27, @u64=0xfff}]}, @nested={0xc, 0x6d, [@typed={0x8, 0x7b, @ipv4}]}, @typed={0x14, 0x13, @ipv6}]}, 0x26c}, {&(0x7f0000003c80)={0x10c, 0x41, 0x200, 0x70bd25, 0x25dfdbfc, "", [@generic="b30620c90851a27f31014d2d590ff06a2cefc9e230cc", @typed={0x10, 0x3, @str='syzkaller\x00'}, @nested={0x40, 0x2f, [@typed={0x4}, @generic="81d932f50eb59016fb8cc3bc1814ea398d942434dad36488f571f0cb7124207bb477e2cf7a9289272fd972d00dfbd91e880b35ac60664994"]}, @typed={0x40, 0x17, @binary="823b5f9e8f81e4b0b503ca5f4865913465f572f85695aee58b4af45ea748ef8923749d0a2f9a344c4d35155ea94b36065dca6922662fa8ed3059"}, @typed={0x8, 0x96, @u32=0x2cd9}, @typed={0x14, 0x9, @ipv6=@mcast1}, @generic="d7b19869aaca91abf8737978dafcf7b3dbb9ad6041a8ff4c6c7a2ef9cc29636f0f7577eade0befb3da0264f34fb0da68d6b79b14e1236ff6"]}, 0x10c}, {&(0x7f0000003ec0)={0x130, 0x2b, 0x1, 0x70bd25, 0x25dfdbfc, "", [@nested={0xd4, 0x71, [@generic="437e199ee86dfedc529a3c3d15c3cbf8135ff94b3c74c0e2bd21440ba6e46f4bf3ae99482aae36bb4388d2b3e56c81b0831b247f9747dee9aeba25ed18a57afa08812d9bc39201419d7e842f0efd41dc4cf9ff4d4d68de7d2c0c1bb259be9e200cf3915ebfdd60eb2acdea2442971b2b6f541763e471d3dc99541156b2379236e3304da658d83db1f7905556b9beaffc7e7fa4d4d76a85ec4cfaefcfc6418863eeaa30df5a9ae88f38a4389c8a674387665cf597f40f9dce08", @typed={0x8, 0x76, @pid=r9}, @typed={0xc, 0x4, @str='system\x00'}]}, @generic="7c85d0767d2436e5f8a69f8de78c97af11633645cd313e3bc7639f95ab2b76ab4a0ad7ea426cb7748385dbe7cc82852229234a82e1c6a77df1d544", @generic, @typed={0x8, 0x81, @u32=0x40}, @typed={0x8, 0x43, @uid=r10}]}, 0x130}], 0x7}, 0x40) r11 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}, {}], "a68d651dc5db5f4a8d842fbd9f26f303d2ded605bdc65a8f4a0bd15bd18114fcfd9029f6d26093fe669fae4a2b294ea4e0f0dd6a94e548d65f631bfb31591b7aa2d4d3470dc504840a16e78ee2b892927bb6a4747dc208da8017829b1431ca49aefea869dc622c0a4369fd4a6609b5b9285278ff10fb82a7a5f983cb4c4cda2c8605d4515bd5b560c715eb01c982c850484d279f1897eebcffef359f896c3a3d7421"}, 0x11a) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r13, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") recvmmsg(r12, &(0x7f00000001c0)=[{{&(0x7f00000005c0)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0xf1}}], 0x70, 0x0, &(0x7f0000000200)={0x77359400}) 03:34:12 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x1) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000001840)='logon\x00', &(0x7f0000001880)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0xffffffffffffff9f, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000500), 0xba, r2) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2000000000000005, &(0x7f0000000940)=""/91, 0xfffffdc6) r3 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0xd5, 0x70200) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000640)) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0), &(0x7f0000000480)=0x8) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) socket(0x0, 0x0, 0x403) getpeername$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0xc2318b8493992447) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r3, 0x7ffffffc, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000880)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x2710}, 0xfffffd21) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000440), 0xffffffffffffffba) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000500), 0x164) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x84) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000740)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[]}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB="581f29382feeef0863291067d9b7a2ef9948a51b02667d1084c87a7b7fee9a53902afe5e428c778f7535020380b4ac9164a288d55718c3ab956b85445135bcce033ae9cbcab8537bca2ad226ffc2dcb0a62f0d0d40cb4106cf30166a0bb62010426f25c18693c2dd6f2a8f3645675c71c348f451320a710e10249854c1386b819f4cc18b0f"]]], &(0x7f0000000600)=0x2) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000400)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000a80)="6e65742f6d6366696c74657200d570a0f9f7cc1ae99a47aa60a8ab291fc86e7561730c7d9aa764749c85e9a2e05346f0a5f68e1c3f8ba06b536b985e206f5b1143b95ba75899a4c3608a683419f280d0425e2038ee1651d1b1210c08e75aee03b514c306f1b5a186b84daf4de7e7137f5297d26e6a833cc1b0114f0915c4a86c0d1895576900738703b75474caa3f8adc10095ef736e9076b591ec3187b9e706f36e1ad96ca2b6ef5a254ede4763017aad3c1728382bd147aa3590432813eb7b34e59544c25c") r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendfile(r9, r8, &(0x7f0000000000)=0x10, 0x80000003) [ 301.108089] binder: 21252:21256 Release 1 refcount change on invalid ref 1 ret -22 [ 301.115909] binder: 21252:21274 BC_ACQUIRE_DONE u0000000000000000 no match [ 301.123062] binder: BC_ATTEMPT_ACQUIRE not supported [ 301.129789] binder: 21252:21274 ioctl c0306201 200003c0 returned -22 [ 301.151198] binder: send failed reply for transaction 488 to 21252:21256 03:34:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x400c630f}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:12 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = eventfd2(0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000000)=""/42, 0x4b}], 0x1) r4 = socket$key(0xf, 0x3, 0x2) r5 = dup2(r2, r1) io_setup(0x200, &(0x7f0000000480)=0x0) io_submit(r6, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r3}]) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000040)=""/7) [ 301.159979] binder: undelivered TRANSACTION_ERROR: 29189 [ 301.184250] FAT-fs (loop4): bogus number of reserved sectors [ 301.190158] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:12 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x100000000000006) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c562c064c00010400004001000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000240)) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000003000000000002d52ae868c35bdb"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) [ 301.204550] binder: 21305:21306 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 301.211613] binder: 21305:21306 unknown command 0 03:34:12 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 301.262607] binder: 21305:21306 ioctl c0306201 200003c0 returned -22 [ 301.272478] binder_alloc: binder_alloc_mmap_handler: 21305 20001000-20004000 already mapped failed -16 [ 301.293559] binder: BINDER_SET_CONTEXT_MGR already set [ 301.299086] binder: 21305:21306 ioctl 40046207 0 returned -16 [ 301.300562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 301.305220] binder_alloc: 21305: binder_alloc_buf, no vma [ 301.319170] binder: 21305:21312 transaction failed 29189/-3, size 24-8 line 2967 [ 301.333221] binder: 21305:21321 Release 1 refcount change on invalid ref 1 ret -22 [ 301.333585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 301.342288] binder: 21305:21322 BC_ACQUIRE_DONE u0000000000000000 no match [ 301.351657] FAT-fs (loop4): bogus number of reserved sectors 03:34:12 executing program 6: r0 = socket$kcm(0xa, 0x122000000003, 0x11) r1 = socket(0x10, 0x2, 0x0) recvfrom(r1, &(0x7f0000000140)=""/133, 0x85, 0x10000, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x1, 0x4, 0x4, 0x3}}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(0x0, r2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/33) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66206baa68754a30000000002000000000000000000000000000000000000000000c00195c1e2d4f32ebdbed8285538dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x4008800) [ 301.356639] binder: 21305:21322 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 301.356652] binder: 21305:21322 unknown command 0 [ 301.362483] FAT-fs (loop4): Can't find a valid FAT filesystem [ 301.394900] binder: 21305:21322 ioctl c0306201 200003c0 returned -22 03:34:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x29, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c) r3 = getpgid(0x0) write$FUSE_LK(r1, &(0x7f0000000280)={0x28, 0x0, 0x7, {{0x4, 0x4, 0x0, r3}}}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac53a751f6f97a5f406473879b8171ae0d09086cb18d602ee628a185531290242710b99b8401772c02989f80629dc1d9e"}, 0xd8) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xf68) 03:34:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) 03:34:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40486311}], 0x0, 0x0, &(0x7f00000007c0)}) [ 301.407245] binder: send failed reply for transaction 493 to 21305:21306 [ 301.426931] binder: undelivered TRANSACTION_ERROR: 29189 03:34:12 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 301.466467] binder: 21338:21340 got new transaction with bad transaction stack, transaction 498 has target 21338:0 [ 301.477053] binder: 21338:21340 transaction failed 29201/-71, size 0-0 line 2879 [ 301.499417] binder_alloc: binder_alloc_mmap_handler: 21338 20001000-20004000 already mapped failed -16 [ 301.510468] binder: BINDER_SET_CONTEXT_MGR already set 03:34:12 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000200)='/dev/ppp\x00', 0x3) timerfd_gettime(r2, &(0x7f0000000240)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x418000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xffffffffffffff64, "73705e0eef3aced4cff3bf348e1d2930148001aa1e83dbfa6aa79c14e23fd8695c41ea68399ec3bc8a9c68b0b0d1277186796eb1a2d23e6d253c1f384dddc90cc6ee38f80e696545e7c9090b3e9b61b741594f45f6b47b8d916643ff58c6dd4ad1ac6c77897e5af4cdff41d2951c1f2a2aa57bec1badfc70f0392630e91f587074a4a68f90e41d4918637731969d847c092d18bcdba636a8c0e1acdf62c3c4d360e6d72864baf3637498ada6d86f1f8c055eec9fcd3f313f18d0a82e90ed050d89989610c8261c971ec83d8bd8a54d9577a6b4fcb80eee48356af0f525dd32e2a3e44c411de4c45ec7f3429e782efc1ab636760f9295f841dee3c4b9e2f25bf2ba7156941bab39cae59a72e6750de9a0cc2da870bc2503a7c4b396a50fadee3869cc30ab09853e5308b288a3a71cab721ee08266eb9458759a721993ef0a8af6fe2fb5f2f0b74262b9104e465f3a7d3c49a3125deeb68524b8b73db03c2760c5451da1fed9da0483769ff157e934aea6979ba9266db6479bf5303692a6925fb87073444815f5e4a51ffa9497d81ba4f731a9fe754ee5e01ecc456a9d08429da14ad04dc310b46e7b4f812de10e99c856e4dc6bac32ab652b27be"}, &(0x7f0000000100)=0x66) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) tkill(r5, 0x3d) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r4, 0x1, 0xfffffffffffffff9, 0x7}, 0x10) [ 301.510483] binder_alloc: 21338: binder_alloc_buf, no vma [ 301.519444] binder: 21338:21340 ioctl 40046207 0 returned -16 [ 301.521442] binder: 21338:21342 transaction failed 29189/-3, size 24-8 line 2967 [ 301.536368] binder: 21338:21342 BC_ACQUIRE_DONE u0000000000000000 no match [ 301.536534] binder: 21338:21340 Release 1 refcount change on invalid ref 1 ret -22 [ 301.543884] binder_alloc: 21338: binder_alloc_buf, no vma [ 301.556833] binder: 21338:21342 transaction failed 29189/-3, size 0-0 line 2967 03:34:12 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x400c630e}], 0x0, 0x0, &(0x7f00000007c0)}) [ 301.569238] binder: undelivered TRANSACTION_ERROR: 29189 [ 301.586276] binder: send failed reply for transaction 498 to 21338:21340 [ 301.603806] binder: undelivered TRANSACTION_ERROR: 29201 [ 301.609416] binder: undelivered TRANSACTION_ERROR: 29189 03:34:12 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) fcntl$setpipe(r0, 0x407, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4000000) getdents(r1, &(0x7f0000000500)=""/244, 0xfffffffffffffe77) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000400)=""/213, 0xd5) [ 301.617948] FAT-fs (loop4): bogus number of reserved sectors [ 301.623877] FAT-fs (loop4): Can't find a valid FAT filesystem [ 301.662756] binder: 21355:21357 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 301.670003] binder: 21355:21357 unknown command 0 [ 301.679571] binder: 21355:21357 ioctl c0306201 200003c0 returned -22 [ 301.711928] binder_alloc: binder_alloc_mmap_handler: 21355 20001000-20004000 already mapped failed -16 [ 301.722967] binder: BINDER_SET_CONTEXT_MGR already set [ 301.728514] binder: 21355:21357 ioctl 40046207 0 returned -16 [ 301.728696] binder_alloc: 21355: binder_alloc_buf, no vma [ 301.740096] binder: 21355:21362 transaction failed 29189/-3, size 24-8 line 2967 [ 301.749083] binder: 21355:21362 BC_ACQUIRE_DONE u0000000000000000 no match [ 301.749886] binder: 21355:21357 Release 1 refcount change on invalid ref 1 ret -22 [ 301.756278] binder: 21355:21362 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 301.771111] binder: 21355:21362 unknown command 0 [ 301.776024] binder: 21355:21362 ioctl c0306201 200003c0 returned -22 [ 301.783950] binder: send failed reply for transaction 505 to 21355:21357 [ 301.791307] binder: undelivered TRANSACTION_ERROR: 29189 03:34:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) socketpair$inet(0x2, 0x806, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) r1 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RWRITE(r2, &(0x7f00000002c0)={0xb}, 0xb) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:13 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:13 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl(r0, 0x8916, &(0x7f0000000180)="025cc80700145f8f764070") setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x4, {{0x2, 0x4e24, @local}}}, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa77, 0x0) get_thread_area(&(0x7f0000000140)={0x100000001, 0x0, 0x1000, 0x2, 0x7, 0x1, 0x4, 0x5, 0x8000, 0x2}) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast1, @local}, &(0x7f0000000200)=0xc) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000100)) 03:34:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) 03:34:13 executing program 3: link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') 03:34:13 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20100) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) socket(0x26, 0x4, 0x401) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x4, 0xffffffffffffff01}, 'port1\x00', 0x8, 0x81000, 0x20, 0x7fff, 0x0, 0xea, 0x400, 0x0, 0x5, 0x7fff}) 03:34:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x630c}], 0x0, 0x0, &(0x7f00000007c0)}) [ 302.286723] FAT-fs (loop4): bogus number of reserved sectors [ 302.292712] FAT-fs (loop4): Can't find a valid FAT filesystem [ 302.300921] binder: 21389:21392 unknown command 0 [ 302.306312] binder: 21389:21392 ioctl c0306201 200003c0 returned -22 [ 302.334129] binder_alloc: binder_alloc_mmap_handler: 21389 20001000-20004000 already mapped failed -16 [ 302.355877] binder: BINDER_SET_CONTEXT_MGR already set [ 302.361531] binder_alloc: 21389: binder_alloc_buf, no vma [ 302.367233] binder: 21389:21407 transaction failed 29189/-3, size 24-8 line 2967 [ 302.375199] binder: 21389:21392 ioctl 40046207 0 returned -16 03:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000180)="7461736b007bc69d494c9f65f3b084e202a47b845732930545eac90c901a3094b8fe22de36f0d85ae8ed6cf33657b87939600f316d9207fef2affca874ab2970005b201ac657862684e017ca2d02b4e7eecb5dbbe28425dfd4f3e8d16ad62c9faa667d1be6f4550d41861a4ee765a004d1f56bd1692912ca861ee315a57ec3235299fcdf532fce597402296c9ccd54bb43653cef30e1a118788256f8f4ec3567e8821c44a734babbe7250da2cc5a872b3bda93ccd543425d18dc617d7f6abfbfa0c66dbcc69f753894ee34") getdents64(r1, &(0x7f0000001380)=""/4096, 0x1000) fcntl$notify(r1, 0x402, 0x31) exit(0x0) getdents64(r1, &(0x7f0000001340)=""/57, 0xfffffffffffffd64) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000000)={0x81, 0xc, [0x8, 0x1, 0x800]}) 03:34:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x0, 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x20000, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000300)=""/87) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ffee0000", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf250c0000000c0002000800090009000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) socket(0xf, 0x0, 0x8) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_ivalue=0x1}) 03:34:13 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff"], 0x7) mkdir(&(0x7f0000000100)='./file0\x00', 0xc2) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7}, 0x7) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 03:34:13 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:13 executing program 7: syz_mount_image$gfs2(&(0x7f0000000680)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f00000005c0)=[{&(0x7f00000000c0)="87d3eb355e7c6cf0f3ccfeb389469d00e150e2f85caa61fda8025e78b2bb063fe063365f7932ed38c043dd896ea17208daa93e06ab285665918fe45090a3617fe51b7be6c7b1cdc39772f3e06cc73132c2ab3684fce16ad6a1237ed8e04a1ec435b21fbd95851a3c2a252e6341494125d9853391e1570736a4c63ef125120ba634e7594fdde44748dc7575f5edc9f48ca241fb6c0c1e69e04bfa5160037557e9573aef1640ec2aedc248f30537e8879082efe02b6c874caff2a94fb419faf91a32339e3c9ae429b1c16e40af2cd3d9b71b1949cca9e7291b9443031d01f4e4f0", 0xe0, 0x6a}, {&(0x7f00000001c0)="28a627ad32a89d03a7", 0x9, 0xc3ed}, {&(0x7f0000000200)="e51f7f7afe2f0b665ceabb3e9ab4c47a", 0x10, 0x6}, {&(0x7f0000000280)="849930daece4a125a7317d3bdbea0be31d824fbcd2602ed79c9a5947ad61619ddb898aa316c1cde269f7d5831ccd5ae37b1ef153fb8fce765f2627bc6b349a9329e491cacba8cf99080110fb220a687c02106f47396a5dba57cf058c72a9a003a0a05f5169fbb042fa8a692b5a5d083d676e4022c017ff76c284e2", 0x7b, 0x401}, {&(0x7f0000000300)="a6a670e61cb740d80e0e63b1f98c7e7cfb2b025dc99a507ab5a79e465015b25bdc83d63ee0fc9985df5abdf4cd92d4b8678a749b25e9d645c929af67ba56ebf2ba4657e8f8d921e363efbcbd0cc540f0fd45940c463a12a29429a92e3a1be29c9c577f90232091a85f432a8d5d8f8586500ed08f8be8336f6ec205a086947d1aa7a1868afb0bd3da04f3e18de8c1aa7d646d626937", 0x95, 0x3f}, {&(0x7f00000003c0)="db842e5671f254cce127264bd8361cd6e375ceb0026fc0c435996dd48c4da90a4d7622ed8cf643fa8fc285d7749d1421661519ef463898c26607b59a41bf0a49cce508cbf29a6706bcb548b74779e88166d700d98456337186d814d7cccc66e2e6a574ec4b177d9005a6d472e00f954b5d80b75d5774347d8eaa2145d53f9574a4c20278dd95d9ffed19295affc5627b03346ff0619e1369052bfdc7289ce3cd52c6659abe91ab3fec27c76bdb35569ba2af3ad09e8da0c46d4e17d02de3485f4dc0acfc1caf7557418b72a509819285740bf8dd88826c536b1496df48cabb104d6fb0f3d75a7f823538e88869bc1f", 0xef, 0x2}, {&(0x7f00000004c0)="ca374b694c8206d7cc99a8010a76274b977efd7a3dabcb98d2cea91380f55e9c7a1bfbf48e5acfe9dcdeb7ce8ffca82fd76332d51ab8ec5d8b7cb571aa60de2b26aa0875ee831f05691999bb97ef06d4e75d40f4e34390854da328cc1ba2db2c207104a016fcf519a816c40af07b179b51399d685c5c30a426afe101d8f96f7b198eddb72c6240a67ba2bf", 0x8b, 0x10001}, {&(0x7f0000000580)="7f9ea6434f3ebc9884140a3ce23a4f30cef2a59c03a0c9031c6386d9ec11e10ef36e56572530d94a3c92e826b2bd076dc3ce65748142775a6d3756e1", 0x3c, 0xfff}], 0x0, &(0x7f0000000080)={[{@quota_account='quota=account'}]}) [ 302.396384] binder: 21389:21392 Release 1 refcount change on invalid ref 1 ret -22 [ 302.401583] binder: 21389:21407 BC_ACQUIRE_DONE u0000000000000000 no match [ 302.411216] binder: 21389:21407 unknown command 0 [ 302.417812] binder: 21389:21407 ioctl c0306201 200003c0 returned -22 03:34:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40046302}], 0x0, 0x0, &(0x7f00000007c0)}) [ 302.460600] 9pnet: p9_errstr2errno: server reported unknown error [ 302.468477] binder: send failed reply for transaction 510 to 21389:21392 [ 302.481518] gfs2: not a GFS2 filesystem [ 302.489945] FAT-fs (loop4): bogus number of reserved sectors [ 302.495512] binder: undelivered TRANSACTION_ERROR: 29189 [ 302.495928] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:13 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x7fffffff, 0xffffffffffffff00, 0x8, 0x3}) ioctl$TIOCEXCL(r0, 0x540c) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x4, 0x80000000, "f99f83b71396627ec1cca4bfa530809b921c7aa4a2ba5104c3cf52794c0005a603f2a112824dcf64aa72851552915158e0254fefa53d78b3edce1f5beae6a6", 0x3}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)="5244f94271d2261eaa1891f5a8c9604c132414c1583961b4aff5d278f5697b6fe75b206568861f2f2c5df569a8859269f55b954c1fa50d8f5fb04f7de710751ea72829e14e4e1817f138ddf363f86b2768c138a4db0b7e6c54842de9b8b58e3bde3a9fe785cf4ebba181081f2289", 0x6e}, {&(0x7f0000000180)="8390d3fee00d40ec95a6731e2315a6ce774096982c0d735efde73f4e0bc8a9dc8d2d0404b11d87b74ca9a6fe8467cec41daa515c28f9a9a28ce10bc6f04e5871815f529f8f2d58211c45dac63a65a14e89356688e5a8a154d4c74c92d874b7c61c71f7ccc57c9e23e81b77db74d61a2cac3d123e477125d32c37f72c7faf0d9714188c109ee18cd1e0d55c12337e4760408ac9aca020ee66444bdfa4bb6ee4b240cf9129920179732788586e7a", 0xad}, {&(0x7f0000000240)="d9bb113798944ab560cb55ca05ebe94c84f3bf3cb8de325a5a2adc20c38a8c4c91dc2d5434d5518e9af6c57f1326ce058ff06c9713b6e2201cc45acd5697f7bc27a9f886299e78f928955f34c1026dbe79c39b8452e5cd891d3082db7098b53fb263c9e4c811bfcc9b7c25c316eaf257134040d4b06b6765cf6c456a2e9d4718e79331c8db", 0x85}, {&(0x7f0000000300)="98bd0d5c9ac000303eb2078844ba431ee76432fc932fb6d17de3c64eb550e7fbad35ebfdfa2687ff7bf18bba3784ca2cb9e5a446166a274e19e4aad7f8e283f4", 0x40}, {&(0x7f0000000340)="c4f1291963eea5c8921b72f521543e16e721b820dc45426fef7e47b2c80158bcf9c690b92e4117fda1ff78458fdb31e805c803f33a1deca57ee58e365a139d0b90a22dfb29cb1648a80e8b839899f0b8526c684c52ba4df7f778d58f4a2f8b3a7f7acbc50102403a60fc883e1a7b81073007ad154c7d3c58d3eaaf08e6dd00cb34564f761ff744d04cbdbadf63002da91e67d8292b7ddda5d4e400edd905fcb67b25ec83f62a1e350ef815036e1e4f2c4bcba2ab275f11fe3c692123fe837f57074a39ce27086e81a8cbd6a3e700aced423b4652768f6b1deca76fc98991d989e63a1bb6b9ee7f01739a4d965e", 0xed}, {&(0x7f0000000440)="42dc5f1b1e3c2dcef332215364923d8bb6cce4942232d12ba712afdbaaff0aab65976af0ad8131b2c272e3779befcbf6caf7f2e7a96e35b7c3cf421ed7e020227501d48cca1fcf90a13207885ded312f05b0525adc67f2e3081676b153b3f8368527087da1d144f8c385bb4cd2f4be6d1def4a99e7fb5f52611083887370d6006c10dc8cff43486280c42aa8295e09e2c65310ac6983302f7d276513410a5f5128538dc4ca89a5d100e283564e291860f8ffe86cc3137802d065119ddf1f336027929ce9761042bcfb62622ceb55fcb945f1cbdec9792dee026bd37cd8051f9f44b2d5a0d0c6e3", 0xe7}], 0x6, &(0x7f00000005c0)=[{0x110, 0x10f, 0x7, "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"}, {0x48, 0x10f, 0x1, "0e5874498a48a925a028c69edadc13ba5ed35b93c92b30f844a0dd8a2eafdae05cd17da4570f300a4b9d6522937d78552ad141"}, {0xe8, 0x102, 0x2, "cc6089ae7e725e96860af40884a17f49ded062bb81274c93601662e142dc8cfaed8b185f1bf12dbad0326e8e1a3740988ef43caece1e90155de3b7e1e8ef535528ea3ebbb9593ff3317d6467fea41243397f6d56939f391cfccc462652d8aae5019e84fe2f1671973e94cebf6ab48ad1fd780b089b5e693595a23be8326bd96a78ec24130a4e678b2d92ea48235a318e6273355b40faac5438c0fcff4f311fd0c27f7dd2ad11bd10177dbc2d5ea533dbd14148a015ff50499d56f9f908635b7633ad27005de6c2072f3e625eccd465990a96ff2b823870"}], 0x240, 0x40001}, 0x80) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000840)={0x8, 0x1, 0x8, 0x0, 0x5}, 0xc) r1 = syz_open_pts(r0, 0x80000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000880)={0x8001, 0xde, 0xd5}) ioctl$TIOCSBRK(r1, 0x5427) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000008c0)={0x6}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0x238, 0x0, 0xf0, 0xf0, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000900), {[{{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'yam0\x00', 'nr0\x00', {}, {0xff}, 0xee, 0x37fb80cb0566cbee, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x808, 0x10c, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x4, 0xd, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x9, [0x6, 0x7b644cf, 0x1, 0x7, 0x6, 0x8001], 0x5, 0x3, 0x400}, {0x2, [0x1, 0xbf7, 0xffffffff, 0x300000000000, 0x9, 0x7a84213], 0x4, 0x100000000, 0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffff00, 'veth1_to_team\x00', 'ip6gretap0\x00', {}, {0xff}, 0x73, 0x1, 0x4}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0x9c) semget(0x2, 0x4, 0x402) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000e00)={0x1, r0}) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) shutdown(r0, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000ec0)={0x7, 0x97}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000f00)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)={0xe, 0xffffffffffffff29, 0xbe35, 0xe62c, 0x22, r0, 0x401}, 0x2c) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$mouse(&(0x7f0000000f80)='/dev/input/mouse#\x00', 0x4, 0x2) write$FUSE_INIT(r0, &(0x7f0000000fc0)={0x50, 0x0, 0x6, {0x7, 0x1b, 0xfc97, 0x88000, 0x401, 0x2, 0x5, 0x6}}, 0x50) set_robust_list(&(0x7f00000010c0)={&(0x7f0000001080)={&(0x7f0000001040)}, 0x1}, 0x18) r3 = memfd_create(&(0x7f0000001100)='REJECT\x00', 0x1) openat$cgroup(r3, &(0x7f0000001140)='syz0\x00', 0x200002, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000001300)=0x7, &(0x7f0000001340)=0x4) syz_emit_ethernet(0x32, &(0x7f0000001380)={@empty, @random="d270910dbd94", [{[{0x9100, 0x1, 0x9, 0x2}], {0x8100, 0x40, 0x4, 0x4}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, @local}}}}, &(0x7f00000013c0)={0x0, 0x1, [0x68f, 0x402, 0xec1, 0xa82]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001400)={0xfd, 0x200, 0x5, "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"}) [ 302.526053] 9pnet: Insufficient options for proto=fd [ 302.537149] 9pnet: Insufficient options for proto=fd 03:34:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000000001, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000080)}}], 0x30) r2 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc05c5340, &(0x7f0000dc5f98)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000140)={0x0, 0x1, {0x0, 0x0, 0x4, 0x3, 0xffffffffffff2e25}}) 03:34:13 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:13 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000ce0052d200000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) [ 302.573175] gfs2: not a GFS2 filesystem [ 302.585205] QAT: Invalid ioctl [ 302.594168] QAT: Invalid ioctl [ 302.599730] binder: BC_ACQUIRE_RESULT not supported [ 302.612689] QAT: Invalid ioctl 03:34:13 executing program 7: socketpair(0xa, 0x8080a, 0xffffffffffffdb7f, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x80000001}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0xe7, @ipv4={[], [], @remote}, 0xf0a}}}, 0x3a) r4 = socket(0x9, 0x80002, 0x0) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)=0x1) setsockopt$sock_timeval(r2, 0x1, 0x18, &(0x7f0000000280)={0x77359400}, 0x10) bind$packet(r4, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) setsockopt(r4, 0x107, 0x5, &(0x7f0000001000), 0xc5) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000), 0x1c) ppoll(&(0x7f0000000180)=[{r4}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200), 0x8) [ 302.617723] binder: 21442:21447 ioctl c0306201 200003c0 returned -22 [ 302.625678] QAT: Invalid ioctl [ 302.640429] QAT: Invalid ioctl [ 302.643854] QAT: Invalid ioctl [ 302.650487] QAT: Invalid ioctl [ 302.656295] QAT: Invalid ioctl [ 302.661167] QAT: Invalid ioctl [ 302.674471] QAT: Invalid ioctl [ 302.677807] QAT: Invalid ioctl [ 302.678690] FAT-fs (loop4): bogus number of reserved sectors [ 302.686890] FAT-fs (loop4): Can't find a valid FAT filesystem [ 302.689954] binder_alloc: binder_alloc_mmap_handler: 21442 20001000-20004000 already mapped failed -16 [ 302.699077] FAULT_INJECTION: forcing a failure. [ 302.699077] name failslab, interval 1, probability 0, space 0, times 1 [ 302.713523] CPU: 0 PID: 21473 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 302.715897] binder_alloc: 21442: binder_alloc_buf, no vma [ 302.722013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.722017] Call Trace: [ 302.722041] dump_stack+0x1c9/0x2b4 [ 302.722058] ? dump_stack_print_info.cold.2+0x52/0x52 [ 302.722079] ? trace_hardirqs_on+0x10/0x10 [ 302.727658] binder: 21442:21474 transaction failed 29189/-3, size 24-8 line 2967 [ 302.736960] should_fail.cold.4+0xa/0x11 [ 302.736978] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 302.736997] ? d_splice_alias+0x7c9/0x11f0 03:34:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffff, 0x3, {{0x10000, 0x8000, 0x0, r2}}}, 0x28) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0), 0x8) sendto$inet6(r3, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:34:13 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x2) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x200000008) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x7, 0x100000001, 0xff, 0xe9, 0x1586dabc, 0xcc8f, 0x6, 0x0, 0x85ef, 0x8001, 0x7, 0x3ff, 0x7e88}, {0x9, 0x9, 0x6, 0xb4cf, 0x40, 0x8, 0x1, 0x0, 0xffffffff, 0x81, 0x1000, 0x7f, 0x5}, {0x80000001, 0x3, 0x1, 0x7f, 0x5, 0xacf2, 0xffffffff, 0x7fff, 0x3, 0xffffffff, 0x9, 0x8000, 0x40}], 0x7ff}) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) [ 302.744976] binder: 21442:21467 Release 1 refcount change on invalid ref 1 ret -22 [ 302.748373] ? lock_downgrade+0x8f0/0x8f0 [ 302.748392] ? d_instantiate_anon+0x30/0x30 [ 302.748411] ? trace_hardirqs_on+0x10/0x10 [ 302.753497] binder: 21442:21474 BC_ACQUIRE_DONE u0000000000000000 no match [ 302.760153] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 302.760168] ? kasan_check_write+0x14/0x20 [ 302.760180] ? do_raw_spin_lock+0xc1/0x200 [ 302.760197] ? trace_hardirqs_on+0x10/0x10 [ 302.760209] ? task_dump_owner+0x311/0x6a0 [ 302.760226] ? lock_acquire+0x1e4/0x540 [ 302.764300] binder: BC_ACQUIRE_RESULT not supported [ 302.769364] ? fs_reclaim_acquire+0x20/0x20 [ 302.769380] ? lock_downgrade+0x8f0/0x8f0 [ 302.769395] ? check_same_owner+0x340/0x340 [ 302.769412] ? rcu_note_context_switch+0x730/0x730 [ 302.774419] binder: 21442:21474 ioctl c0306201 200003c0 returned -22 [ 302.781331] __should_failslab+0x124/0x180 [ 302.781346] should_failslab+0x9/0x14 [ 302.781361] kmem_cache_alloc_trace+0x2cb/0x780 [ 302.781379] tcp_sendmsg_locked+0x303b/0x3f20 [ 302.781396] ? lock_acquire+0x1e4/0x540 [ 302.781409] ? lock_downgrade+0x8f0/0x8f0 [ 302.781425] ? tcp_sendpage+0x60/0x60 [ 302.785853] QAT: Invalid ioctl [ 302.789959] ? __fget+0x4d5/0x740 [ 302.789979] ? _parse_integer+0x190/0x190 [ 302.789997] ? lock_acquire+0x1e4/0x540 [ 302.790009] ? tcp_sendmsg+0x21/0x50 [ 302.790023] ? lock_release+0xa30/0xa30 [ 302.790039] ? kasan_check_read+0x11/0x20 [ 302.796446] binder: BINDER_SET_CONTEXT_MGR already set [ 302.801355] ? do_raw_spin_unlock+0xa7/0x2f0 [ 302.801369] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 302.801386] ? kasan_check_write+0x14/0x20 [ 302.808786] QAT: Invalid ioctl [ 302.810271] ? lock_sock_nested+0x9f/0x120 [ 302.810288] ? trace_hardirqs_on+0xd/0x10 [ 302.810302] ? __local_bh_enable_ip+0x161/0x230 [ 302.810322] tcp_sendmsg+0x2f/0x50 [ 302.834601] QAT: Invalid ioctl [ 302.836843] inet_sendmsg+0x1a1/0x690 [ 302.836858] ? ipip_gro_receive+0x100/0x100 [ 302.836875] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 302.836891] ? security_socket_sendmsg+0x94/0xc0 [ 302.844756] binder: 21442:21447 ioctl 40046207 0 returned -16 [ 302.845352] ? ipip_gro_receive+0x100/0x100 [ 302.859401] binder: send failed reply for transaction 515 to 21442:21447 [ 302.860977] sock_sendmsg+0xd5/0x120 [ 302.860993] __sys_sendto+0x3d7/0x670 [ 302.861010] ? __ia32_sys_getpeername+0xb0/0xb0 [ 302.861028] ? vfs_write+0x2f3/0x560 [ 303.004685] ? wait_for_completion+0x8d0/0x8d0 [ 303.009260] ? lock_release+0xa30/0xa30 [ 303.013234] ? fsnotify_first_mark+0x350/0x350 [ 303.017810] ? __fsnotify_parent+0xcc/0x420 [ 303.022122] ? fsnotify+0x14e0/0x14e0 [ 303.025919] ? __sb_end_write+0xac/0xe0 [ 303.029884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 303.035409] ? fput+0x130/0x1a0 [ 303.038681] ? ksys_write+0x1ae/0x260 [ 303.042473] ? __ia32_sys_read+0xb0/0xb0 [ 303.046527] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 303.052056] __x64_sys_sendto+0xe1/0x1a0 [ 303.056111] do_syscall_64+0x1b9/0x820 [ 303.059985] ? finish_task_switch+0x1d3/0x870 [ 303.064643] ? syscall_return_slowpath+0x5e0/0x5e0 [ 303.069655] ? syscall_return_slowpath+0x31d/0x5e0 [ 303.074575] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 303.079589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.084425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.089602] RIP: 0033:0x456919 [ 303.092784] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.111677] RSP: 002b:00007f4ea4626c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 03:34:14 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7d, &(0x7f0000000140), 0x20) 03:34:14 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 303.119982] RAX: ffffffffffffffda RBX: 00007f4ea46276d4 RCX: 0000000000456919 [ 303.127242] RDX: fffffffffffffd43 RSI: 0000000020de1fff RDI: 0000000000000013 [ 303.134498] RBP: 000000000072be80 R08: 0000000020db4ff0 R09: 0000000000000010 [ 303.141758] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000014 [ 303.149017] R13: 00000000004d3048 R14: 00000000004c7cde R15: 0000000000000000 [ 303.215659] FAT-fs (loop4): bogus number of reserved sectors [ 303.221583] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.250059] binder: undelivered TRANSACTION_ERROR: 29189 [ 303.260602] 9pnet: Insufficient options for proto=fd 03:34:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x64, 0x0) sendto(r0, &(0x7f0000000000)="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", 0x176, 0x0, &(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x9}}}, 0x80) 03:34:14 executing program 1: memfd_create(&(0x7f00000002c0)='}\x00', 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)=0x0) sched_getattr(r3, &(0x7f00000003c0), 0x30, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg(r4, &(0x7f00000016c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e23, 0x3, @ipv4={[], [], @broadcast}, 0x6}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000018c0)="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", 0x1013}], 0x1, &(0x7f0000001200)=ANY=[], 0x0, 0x1}, 0x100000000}], 0x1, 0x8040) 03:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40046304}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:14 executing program 7: exit(0x0) socket$unix(0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x447fa, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000080)={0x0, {{0x2, 0x4e22}}, {{0x2, 0x0, @multicast2}}}, 0x108) 03:34:14 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f00000005c0)) getgroups(0x0, &(0x7f0000002780)) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) gettid() lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@local, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000f00)="2f64c2cdae36ad42646754934ef73ba7c58f603631d01d0f966cdc660137a845e6c091", 0x23}, {&(0x7f0000001fc0)}, {&(0x7f00000021c0)="b8f86d588148eac1d7265a7e4db294aa87b64699246118ecd589225c6965b45c1a43721527ee830e54ed47a349671603b42f70f8f5330d99ed7112be479efaea9628247db4cf2846db1da2eb777bb84c96896f789cb1e5e76a53286b132880a440f9fc", 0x63}, {&(0x7f0000002380)="afc9c731af27b8d239f3b623138ca77dde9f02fa6dc46ad82ff4c0d1882bb0dd735b8fd199338f209cf3e9ce5be0357c12ca70e4f128f5a21fe3c0676737dd651c58566d22971d58ffb9306caa62e3c6a59261b2dab773fd7c3ac6c581371ad1b1310fe8208fc3e5735f4c9fb7b7cc2409034a5461dd6ea7272452242d9006f973d5a8ec75e069a414d6969bc40f6d52cc4c7ceb91ae30d6dc4e33de35e43896c50c35733e1b22e67ed60aab2caaadd27372feb02eba0bc1b73588247a66322fe1b1850210a6cb4c31ca085a23fe00d9a17c3b580c13", 0xd6}], 0x4, &(0x7f00000025c0)=[@rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r1, r0, r1]}, @rights={0x38, 0x1, 0x1, [r1, r0, r1, r1, r1, r0, r0, r0, r0]}], 0x68, 0x4000000}], 0x1, 0x8010) 03:34:14 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:14 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:34:14 executing program 1: msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) 03:34:14 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2001001, &(0x7f0000000580)=ANY=[]) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000300)=ANY=[]) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, &(0x7f0000000600)) mount$bpf(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='bpf\x00', 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000040)) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) [ 303.424893] binder: 21514:21519 unknown command 0 [ 303.434107] FAT-fs (loop4): bogus number of reserved sectors [ 303.436108] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 303.439987] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.459792] binder: 21514:21519 ioctl c0306201 200003c0 returned -22 [ 303.469942] 9pnet: Insufficient options for proto=fd 03:34:14 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x208000000000010, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f0000002b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/38, 0x26}}], 0x1, 0x0, &(0x7f0000001540)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) [ 303.504502] binder_alloc: binder_alloc_mmap_handler: 21514 20001000-20004000 already mapped failed -16 [ 303.522484] binder: BINDER_SET_CONTEXT_MGR already set [ 303.529988] binder_alloc: 21514: binder_alloc_buf, no vma [ 303.534472] binder: 21514:21519 ioctl 40046207 0 returned -16 [ 303.535606] binder: 21514:21535 transaction failed 29189/-3, size 24-8 line 2967 [ 303.555879] binder: 21514:21528 Release 1 refcount change on invalid ref 1 ret -22 [ 303.563697] binder: 21514:21535 BC_ACQUIRE_DONE u0000000000000000 no match [ 303.582736] binder: 21514:21535 unknown command 0 [ 303.593423] FAT-fs (loop4): bogus number of reserved sectors [ 303.599326] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.605446] binder: 21514:21535 ioctl c0306201 200003c0 returned -22 [ 303.613611] binder: send failed reply for transaction 520 to 21514:21519 [ 303.630422] binder: undelivered TRANSACTION_ERROR: 29189 03:34:14 executing program 2: 03:34:14 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @local, @multicast1}, 0xc) 03:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40046307}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:14 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x3062, @loopback}, 0x10) 03:34:14 executing program 3: 03:34:14 executing program 3: [ 303.841998] binder: 21556:21562 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 303.848908] FAT-fs (loop4): bogus number of reserved sectors [ 303.849798] binder: 21556:21562 unknown command 0 [ 303.860524] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.873706] binder: 21556:21562 ioctl c0306201 200003c0 returned -22 [ 303.927799] binder_alloc: binder_alloc_mmap_handler: 21556 20001000-20004000 already mapped failed -16 [ 303.945281] binder: BINDER_SET_CONTEXT_MGR already set [ 303.950914] binder: 21556:21562 ioctl 40046207 0 returned -16 [ 303.957050] binder_alloc: 21556: binder_alloc_buf, no vma [ 303.962678] binder: 21556:21576 transaction failed 29189/-3, size 24-8 line 2967 [ 303.971936] binder: 21556:21562 Release 1 refcount change on invalid ref 1 ret -22 [ 303.974049] binder: 21556:21571 BC_ACQUIRE_DONE u0000000000000000 no match [ 303.986870] binder: 21556:21571 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 303.994639] binder: 21556:21571 unknown command 0 [ 303.999548] binder: 21556:21571 ioctl c0306201 200003c0 returned -22 [ 304.006540] binder: send failed reply for transaction 527 to 21556:21562 [ 304.013538] binder: undelivered TRANSACTION_ERROR: 29189 03:34:15 executing program 7: 03:34:15 executing program 2: 03:34:15 executing program 3: 03:34:15 executing program 6: 03:34:15 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb}, 0xb) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 03:34:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x630b}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:15 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 03:34:15 executing program 2: exit(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x447fa, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, &(0x7f0000000180)=0x80) r2 = dup3(r1, r0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) 03:34:15 executing program 7: 03:34:15 executing program 3: [ 304.415849] binder: 21587:21592 ERROR: BC_REGISTER_LOOPER called without request [ 304.423521] binder: 21587:21592 unknown command 0 [ 304.455204] FAT-fs (loop4): bogus number of reserved sectors 03:34:15 executing program 6: [ 304.461097] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:15 executing program 3: 03:34:15 executing program 7: 03:34:15 executing program 1: [ 304.497401] binder: 21587:21592 ioctl c0306201 200003c0 returned -22 03:34:15 executing program 6: 03:34:15 executing program 3: 03:34:15 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:15 executing program 7: [ 304.576057] binder_alloc: binder_alloc_mmap_handler: 21587 20001000-20004000 already mapped failed -16 [ 304.597284] binder: BINDER_SET_CONTEXT_MGR already set [ 304.620157] binder_alloc: 21587: binder_alloc_buf, no vma 03:34:15 executing program 1: 03:34:15 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000020002000000000000000000180000000303000000ff3f000000000009000000030000000100000000000000ffffffffffffffff20010000ffffffff58020000ffffffffffffffff58020000ffffffff03000000", @ANYBLOB="004944222410f3496300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e80000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd8e39353ceb6fa36f84737de9000000000000000000000000000000000000000000000000a80049030000000000000000000000000000000000000000000000006800090000000000000000000000000000000000000000000000000000000002000000000000000000000000736e6d7000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2) [ 304.625603] binder: 21587:21592 ioctl 40046207 0 returned -16 [ 304.625846] binder: 21587:21622 transaction failed 29189/-3, size 24-8 line 2967 [ 304.646568] binder: 21587:21615 Release 1 refcount change on invalid ref 1 ret -22 [ 304.662193] binder: 21587:21627 BC_ACQUIRE_DONE u0000000000000000 no match [ 304.669353] binder: 21587:21627 ERROR: BC_REGISTER_LOOPER called without request [ 304.676997] binder: 21587:21627 unknown command 0 [ 304.692903] FAT-fs (loop4): bogus number of reserved sectors [ 304.698888] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000003}, 0x10) 03:34:15 executing program 7: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f000060c000/0x3000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f000074a000/0x1000)=nil, 0x0) 03:34:15 executing program 3: syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) [ 304.722329] binder: 21587:21627 ioctl c0306201 200003c0 returned -22 [ 304.730367] binder: send failed reply for transaction 532 to 21587:21592 [ 304.748502] binder: undelivered TRANSACTION_ERROR: 29189 03:34:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4480, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)=""/167) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)=[{0x10, 0x117}], 0x10}}], 0x2, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 03:34:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x90) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2001001, &(0x7f0000000580)=ANY=[]) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000300)=ANY=[]) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x5890, &(0x7f0000000600)) mount$bpf(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='bpf\x00', 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, &(0x7f0000000580)=ANY=[]) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000040)) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) 03:34:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40406301}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:16 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) setgid(0x0) fchmod(r0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000740)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '\\'}}]}}) fcntl$setflags(r0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f0000001b00)}], 0x1) write$binfmt_script(r0, &(0x7f0000001d80)={'#! ', './file0/file0'}, 0x11) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001f40), &(0x7f0000001f80)=0xc) 03:34:16 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:16 executing program 3: msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x4000000000000000, 0xa4a3ad41a879dde0) 03:34:16 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0x1007}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, @ib={0x1b, 0x80000001, 0x5, {"c2db55074c81f4848ea5cf4a80094f23"}, 0x7f, 0x1, 0x9}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @multicast2}, 0x3f}}}, 0x118) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') unshare(0x0) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:34:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000007}, 0x10) [ 305.462073] binder: 21663:21666 got reply transaction with bad transaction stack, transaction 537 has target 21663:0 [ 305.472839] binder: 21663:21666 transaction failed 29201/-71, size 0-0 line 2774 [ 305.482042] binder_alloc: binder_alloc_mmap_handler: 21663 20001000-20004000 already mapped failed -16 [ 305.492101] FAT-fs (loop4): bogus number of reserved sectors [ 305.493796] binder: BINDER_SET_CONTEXT_MGR already set [ 305.498031] FAT-fs (loop4): Can't find a valid FAT filesystem 03:34:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6(0x10, 0x3, 0x8000000000000000) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x600}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150003000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 03:34:16 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1000, 0x80082) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xe40}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x1, 0x8}, 0x8) [ 305.503350] binder_alloc: 21663: binder_alloc_buf, no vma [ 305.514740] binder: 21663:21676 transaction failed 29189/-3, size 24-8 line 2967 [ 305.523988] binder: 21663:21666 ioctl 40046207 0 returned -16 [ 305.538644] binder: 21663:21680 Release 1 refcount change on invalid ref 1 ret -22 [ 305.547565] binder: 21663:21681 BC_ACQUIRE_DONE u0000000000000000 no match [ 305.554742] binder: 21663:21681 got reply transaction with no transaction stack 03:34:16 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x7) getsockopt$inet6_buf(r0, 0x29, 0x7f, &(0x7f00000000c0)=""/7, &(0x7f0000000040)=0x7) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000200)=0x1000, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x109000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) recvfrom$llc(r2, &(0x7f0000000100)=""/155, 0x9b, 0x10100, 0x0, 0xfffffffffffffd9d) [ 305.562232] binder: 21663:21681 transaction failed 29201/-71, size 0-0 line 2759 [ 305.600633] binder: undelivered TRANSACTION_ERROR: 29201 03:34:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='coredump_filter\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000080)={{0x5, 0x0, 0x8000000000000, 0x8, 'syz0\x00'}, 0x0, [0x401, 0x7fffffff, 0x3, 0xfffffffffffffe01, 0x4, 0x7, 0x80000000, 0xfff, 0x31, 0x4, 0x1bf7f15c, 0x9, 0xe8, 0x0, 0x6, 0xfff, 0x0, 0x2, 0x1, 0x4e, 0x9, 0x3, 0x5, 0x0, 0xfff, 0x5, 0x7fffffff, 0x9, 0x3f, 0x100000001, 0x8001, 0x4, 0x7, 0x464abce, 0x5, 0x44, 0xfff, 0x3, 0x8001, 0x8, 0x9, 0xb0, 0x7, 0x80, 0x100, 0xfff, 0x3ff, 0x0, 0x3, 0x9, 0x9, 0x0, 0x1, 0x3, 0x9, 0x3ff, 0xc4e7, 0x400000000000000, 0xfffffffffffff610, 0x3ff, 0x8000, 0xfffffffffffffff9, 0x8, 0x0, 0x9, 0x7fff, 0xfffffffffffffff7, 0x1, 0x80000000, 0x3, 0x0, 0x6, 0xfffffffffffffff8, 0x7ff, 0x5ef, 0x0, 0xf30d, 0x7, 0x8, 0x6, 0x0, 0x10001, 0xf2, 0x9, 0xb5b7, 0x8, 0x101, 0x7, 0x4, 0x7f, 0x401, 0x3ff, 0x1f, 0x0, 0x8, 0x1ff, 0x4, 0x2, 0x34e, 0x6, 0x401, 0x63f, 0x20, 0x5, 0x8, 0x7f, 0xe000000000000, 0x3ff, 0x4, 0x2, 0x7, 0x9, 0x80000000, 0x9, 0xde33, 0x9, 0xeb5, 0x81, 0x8, 0x8, 0x3ff, 0x36f, 0x1, 0x8, 0x3, 0x1, 0xf838, 0x8], {r2, r3+10000000}}) clock_getres(0x0, &(0x7f0000000600)) sync_file_range(r0, 0x5, 0x3, 0x2) getsockname$llc(r1, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000005c0)=0x10) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4), 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xe4, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@ipv4={[], [], @rand_addr}}}, @migrate={0x5c, 0x11, [{@in6=@loopback, @in=@multicast2}, {@in6=@mcast1, @in6=@mcast1}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xe4}}, 0x0) 03:34:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x630d}], 0x0, 0x0, &(0x7f00000007c0)}) [ 305.602769] netlink: 13 bytes leftover after parsing attributes in process `syz-executor6'. [ 305.613065] binder: send failed reply for transaction 537 to 21663:21666 03:34:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000001c0)=0xe8) setreuid(r1, r2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8993, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @dev}}) 03:34:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100006ce1fc70475f1bee0eec0000000000020000000000000001000000000000002900"], 0x2a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000000040)=@raw=[@generic={0x1}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 305.654409] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.659953] binder: undelivered TRANSACTION_ERROR: 29189 03:34:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") writev(r0, &(0x7f0000001880)=[{&(0x7f0000000140)="2304ab0161bd1dbb04b2da82c7e00e46aabb153f47bb7b4899978275360ab12082ac0e2c25d0d832c11db6d967d4714ddcdaa1e940748efacebe04216a3193f4b072b3d4c35285d6837234e274afe5367f0561f06612e821704a2085fa648065e2586e9264aebc53cba08f1d2fe427bdaf6bc90c0f45ca1f5f4bbea0539ffedbd7d5a31397", 0x85}, {&(0x7f0000000380)="524d0cecd068a29e04c58a6fbaf0044c907deb7798bcab5b5e90151605e57a592f8de8b71c93baa02a3024e433ee036fa3799f52df86032626044d9e0fd676ad0aa92303b674022672e0db039ac65b3ba61bc0dfbbe72ee88e61e718d7a2388572f186bee2d12d17497dd57e7eb3e7a438fc05c76ea29e0f9e252d647154b18d55ac9d71f9ba458473b741b78b7ded773d47b09d64f776c66a65388689bd006ad7792b24630192ba5b67f44f23b5a47c4e250fa201d4bfb2c9ed1d1c2fc91ce9ccc7", 0xc2}, {&(0x7f0000000040)}, {&(0x7f0000000480)="43ca8b4d55c3458226608c54e91f8736c3f611f8b704502ceed739c6eab018216c246f8856a41f17e0f28cba0f79a39c92fe8a4af5b6c6480d6c760c4fe602dfabf2731f535baefea134595992bccefe73e707f93cc29eea007b5b05f113377533038f97299346497357cfbfcbca2c4859d8edb80ecfa7e50f03a735d15efb925a385788ce39450ae7f146ef35533119a9dddef51963a83ef82d2543b9d8a6198609752f60f303d8aaeceb92a7a858", 0xaf}, {&(0x7f0000000540)="4d5685952a675cc6c36d93d353693245612476216a960615524bd0a669cd903312896b2d0741efa7ea52ba531134e5b05f5dca36f46ee439ddaaf720ea55a5e9efaa78056d94bd669f399c984820a13d2d11077e32932789f823e82788072dfac8ed8ff8572502a0e1643e2e6ce767440aa0cc0ef74b", 0x76}, {&(0x7f00000005c0)="3771d0495fe623d28da61c9782c9efef12b4a970e8e1770ddfda65ecdff73bd7083a351071513472a0a2e5d2281e018378b8cb8e74307de3aa670c5b2c29b1d322eba625770e9bf599e6e806bbf8f506c623704fe8f91070168858811bdeedb02f62f2f472b19b91350f2d2be2d06ecd3a3e53dc05bcd3b8aea26965d453ad8b89aa11bb51945274e4998b4666d87d32da7ad44ac43b135ca17d7a69c9186bcc6a3d0ce6b2da6c59", 0xa8}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000080)="ed8d6edf2cad58add06b588b251c69148d5c0a01d1ec5916de9bca9ab530aa6f18e38e9ff6d06fa057e8b18b71e05d8cc6", 0x31}, {&(0x7f0000001680)="d9987fc7dbaf3df87e2e6becea61c5a55c6981064d781fae66042cc4ec43f720e2a7d8b07c1ce7e8db46a504dee2a24f99d65d33c08b46b43f3c7523b1d3921122611fbce24c6e7f7b548a093948c47b25ce07564f6b3d7b2ce2df31d6224aacc1fa255d8f456192ead11591238391aa6b34809d58861b08c0f13f4f55de2f2a3b70b7400d9a0a351d6f9ae25db98bcc7b7f7f4b3458627ac2579fc912f358c89cb147d17f5227a17031060bd373585880619778d097e919b8241517fcbca7c956c37ed049721240e20d7ce5d20e865e018d4c709b9df7d61a3e38301c64bb5f2d0c38cb2f55ca32d41948d7968151bee395f9", 0xf3}, {&(0x7f0000001780)="a93d9dcbd5b33ea22a0f5a4644a63b203f703ee1a13e694af9ddb6c3f3c3891bb0c79df2fc12395398e5d069e3e890a40945cb4833965be81074838f184d178e2fc0aef3d06708618ab8a33fedd31a94703167a1d2de6d01509e1706a2f825410dc5386e575bd5bbcf854765a6b5403e5b81be1adaa356fcbce2a201e6b41dab4ecafdbadb907b894fb8012f23ba5853b23745f6e1f71cb70ad612c423ee02452ead08bb27822afcf1567702073c15598338f807ad36dffc10846de57c363446c09266e82d0b2bb4f03851e64675659a8e07c6ccc15d5c1ccb29680daeee4f6d75b3be4afa1697a79f3c62c2cc42ac", 0xef}], 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000019000100001f000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a87a5a43200000017c65d9eda8da0ff0bea0108b5219ad9a5203f3c1854e8de12dcc85bd64ea1c4a2c315d7fc3d3195c1a0be7af9cb5b9679cc05f875c68a6329fcdb7c0c609781b9e89760d1bce85a7bdc3f20a7bf3142e75cf01c9d784599b0fabc4e72387e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000169834a557d920b9000000000000c105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000b39ff8058eef0b16000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev, 0x0, 0x2}, 0x20) [ 305.702996] binder: 21697:21699 unknown command 0 [ 305.714716] 9pnet: Insufficient options for proto=fd 03:34:16 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x100000000006) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x98, 0x7, 0xe, 0x200, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x4}, [@typed={0x4, 0x7b}, @generic="0b1c474ee122e20cc3952cb12c205635d85c69bcebc54238eb4ad36d1498ea20fa4dcc0c053a76d9e7c126d6bdc525a89ad464b181d7aa6ada712162d995a11d24d3bd094859cf6e19e1a9aae8396380ac59fcd524d6ec42dd4c67ca467cfd715152d380763af695", @typed={0xc, 0x6a, @u64=0x4}, @typed={0x4, 0x38}, @typed={0x8, 0x2, @uid=r3}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) sendto$inet6(r2, &(0x7f0000000280)='\x00', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='\r', 0x1, 0x0, 0x0, 0x0) close(r2) r4 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="136ab48b860a346efabb67a7cfc7a395792c059d93d297919c21b9f098b2ad9be0b932c171262e4f1634368c099a7ba984b839f81426eb05c1d4bc3472d8f3c0f62b3d7cd1c5395d"], 0x4) 03:34:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f000000c300)=[{{&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000002480)}}, {{&(0x7f0000002400)=@ipx={0x4, 0x0, 0x0, "527fc4f4b987"}, 0x80, &(0x7f00000057c0), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e21, 0x7, @empty, 0x81}, r2}}, 0x38) 03:34:16 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 305.748186] binder: 21697:21699 ioctl c0306201 200003c0 returned -22 03:34:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x8f, "25af1ac6bc39d49224cf63b7ca9e14bf4a87b36a1adcaf7e63b34426e007c5fd173b95600f61d0f0649dabe8451b75547b7263f529f95b64247bd72144195799105d73727d21bdd8822f6a33524478af866ad4d47f064466da4446378075e2b0e6ac03b95e09e8c2469f9099f4ddc44ada97303a9236a64460e06e5d2b9e52d88d567be4996676816c05a8ef4a1cf9"}, &(0x7f0000000240)=0x97) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000500)={r2, 0xf485, 0x5, 0xd67d, 0x3f, 0x29, 0x26, 0x310a, {r3, @in={{0x2, 0x4e20}}, 0xffffffffffffff00, 0x8, 0x6, 0x800, 0x2}}, &(0x7f0000000300)=0xb0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000000)={0x4, 0x0, [{}, {}, {}, {}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000e200000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r0, r4}) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffffc8, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0xa) [ 305.798385] binder_alloc: binder_alloc_mmap_handler: 21697 20001000-20004000 already mapped failed -16 [ 305.820730] binder: BINDER_SET_CONTEXT_MGR already set 03:34:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000008916, &(0x7f0000000000)="026bb443aca36c17860faed6efaaa2e8c94d7013fd57e2f15b1e0b7bd417187054d059632f9866488fdfcb2cece92f9fc21b193d1927c2c2ffd1f93b6fdb18c6218f4750fca31c73fcaa441928eee8ec6d877da00e704fe1683f60ce9887a9dac619fe211147883b0fe08afe1952fd5fc7cc35c34a52c881fa505f43d0b3700dce1f41b9fee40d2f2d1a6d42ff5050e1a1e30d6def81b61e48876daa574c0228cddc32a6dbe6eee5f52d9223c48d19dc4e1f143a64d6") r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffffc00, 0x420000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x208, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd9000000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000280)="6b60c3b5b4d98215593a434193463c8b29b81bbc817bac3b68aa7aca5187b6de21ae927d379c43566e00ac770df20ae05d99dd46f7d028a378f62a6be03ff725905a353388451d6b65b212979babab497ada2b833e306b6b5d0c7396e82d3d5ae41a59b5e9277b5d0c3bf1e75bad2948feb2b7", 0x73) socket$nl_route(0x10, 0x3, 0x0) [ 305.843752] binder: 21697:21699 ioctl 40046207 0 returned -16 [ 305.866897] binder_alloc: 21697: binder_alloc_buf, no vma [ 305.872713] binder: 21697:21740 transaction failed 29189/-3, size 24-8 line 2967 [ 305.884261] FAT-fs (loop4): bogus number of reserved sectors [ 305.890215] FAT-fs (loop4): Can't find a valid FAT filesystem [ 305.899646] binder: 21697:21699 Release 1 refcount change on invalid ref 1 ret -22 [ 305.907514] binder: 21697:21721 BC_ACQUIRE_DONE u0000000000000000 no match [ 305.914583] binder: 21697:21721 unknown command 0 [ 305.945805] 9pnet: Insufficient options for proto=fd [ 305.951186] binder: 21697:21721 ioctl c0306201 200003c0 returned -22 [ 305.981083] binder: send failed reply for transaction 544 to 21697:21699 03:34:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000008}, 0x10) 03:34:17 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000a80)='/dev/usbmon#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x408001, 0x0) 03:34:17 executing program 6: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f000012d000)) r0 = getpgrp(0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0xffffffffffff14ec, 0x80000001, 0x8, 0x4, 0x8, 0x81}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x121000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/11) 03:34:17 executing program 7: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030393030303020302c00b1ccdc65bc2c1c1066695f27bbf7fbd150bb43ff0631af81a0e1940e7a3c197fad95c4fee629303213700a6301ef0f1c11b379b43373dbc7184c6c2bf0c57caef6fd8b2b12241b099d984957b35ea2997ce917b72c49f3c2dd50f2bbfa63a79531c9ac87f6bb7cfb89c10cf3f6902527554417ba3411e34e4ff1e4cc7983a40435931abd8fc1be81bb36732cf905"]) 03:34:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200), &(0x7f0000000240)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x29, 0x829, 0x0, 0x0, {0x3}, [@generic="16057fd08b9863cd5cc4e7a1257db2440f37c66bb6c679db0a4964353c66dc1e092cc1ec434fb54f0e1a781ae626a8ce5e86434b0207cf799da5d929a600e790dfe49db23c9f240bf29832817c043f7fd0151c4ecacf32b23047fdbfaf3f09bd85069fe91311d1f3ad3277"]}, 0x80}}, 0x0) 03:34:17 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40406300}], 0x0, 0x0, &(0x7f00000007c0)}) [ 305.997142] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.042787] FAT-fs (loop4): bogus number of reserved sectors [ 306.048695] FAT-fs (loop4): Can't find a valid FAT filesystem [ 306.058748] netlink: 108 bytes leftover after parsing attributes in process `syz-executor1'. [ 306.067843] gfs2: invalid mount option: commit=0x00000090000 0 [ 306.073751] binder: 21768:21771 got new transaction with bad transaction stack, transaction 549 has target 21768:0 [ 306.073894] gfs2: can't parse mount arguments 03:34:17 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x7, {0x92c0}}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000), 0x4) [ 306.084430] binder: 21768:21771 transaction failed 29201/-71, size 0-0 line 2879 03:34:17 executing program 6: socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0xb720, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000065000100000000000f100002b8000000000000000000e5009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 03:34:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x8000000000004, 0x362) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet(r4, &(0x7f0000000140)="82b32e41719ab163b473d945b49aa4820bd67dfc66ddf61095f9f0b11cb2da848a17a179e006e668a00e6741b9cbe063bcbe30fb6fff4e0ec57a2fc90030cad6f850426af467d7fbf7368b6667da03c319980a997ce5aa8cbbebf18c040e19bf0664a45d07ce0d7f794b3059bd998574793eb7da1d117316ae67fb690b854f919dd092fa6aaf87b5cf5c0ef810a45f9a8851acc2e4a7d01f8d076c6040ddf0cc73bfe16f85f7f891a9d31c633e4f00a4de03348214a3f27df2541cf906249b93f7fce53883a177b42773f3d9a41ecb0c2a9262c1cecf0d723083d444aec16172afb9c9a3675ca77c813c", 0xea, 0x40, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) [ 306.124419] binder_alloc: binder_alloc_mmap_handler: 21768 20001000-20004000 already mapped failed -16 [ 306.135859] netlink: 108 bytes leftover after parsing attributes in process `syz-executor1'. [ 306.148440] binder: BINDER_SET_CONTEXT_MGR already set [ 306.156559] binder: 21768:21771 ioctl 40046207 0 returned -16 03:34:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) memfd_create(&(0x7f0000000200)=':]wlan1\x00', 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x8, 0xffff, 0x7, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r2, 0x1, 0xab, "a5268530c4f57d4d857e41ec489dfaabde7e79026991f44c7c27c7333471e4264cda437c3232e8d6e1ee742d43ca3a6e54f2a1783a7c4d2c94cc3b6d87ff879cb539775cfeef485ed6dc644791861f6207113ac16c49fa3265e96a484041e021d95ab5dde98a798c3a34d79715c7d8c99a4c58995d524a9772c1f20190f3493ba7d0dc35df1e4990bbd9fb5d020fe4d57e5b23c1fb6469ec7170edb0bc385106b6c0f05a0f1d96b276dee6"}, 0xb3) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="0bf5430f080319", 0x7}], 0x1) [ 306.184859] binder_alloc: 21768: binder_alloc_buf, no vma [ 306.190551] binder: 21768:21789 transaction failed 29189/-3, size 24-8 line 2967 [ 306.212886] binder: 21768:21771 Release 1 refcount change on invalid ref 1 ret -22 [ 306.217835] gfs2: invalid mount option: commit=0x00000090000 0 [ 306.220981] binder: 21768:21778 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:17 executing program 4 (fault-call:8 fault-nth:0): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:17 executing program 1: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) mlockall(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) readahead(r0, 0x8, 0x5) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) get_robust_list(0x0, &(0x7f0000002600)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f00000025c0)}, 0x0, &(0x7f0000000240)={&(0x7f0000002580)}}, &(0x7f0000000300)=0x41) [ 306.226718] gfs2: can't parse mount arguments 03:34:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1000000000002, 0x20000fffffffe) readv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)="2f70726f632f7318002f6e65742f697076342f76732f64726f705f656e74724f1d9882ebf7cf9d498fb0f8b6d06e7900189b317e7acdc714b54d4e01cf80ba3bbef6ebd26bc752b1b72ff9db3b4fca1a89c72afe65075a3ad674bfa518f67e7c8ea61b0be862fd3f556b5ae9a681fd94e49447b4cddb60317eea481bd1574798d161a63c9a0aa62559df36efacbf7e18dfc26f369991aa0964c26514287e9bc642538be8506283677f0a1a27", 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='smaps\x00') sendfile(r2, r3, &(0x7f0000000280)=0x62, 0x2000000004) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) [ 306.269887] FAT-fs (loop4): bogus number of reserved sectors [ 306.275836] FAT-fs (loop4): Can't find a valid FAT filesystem [ 306.291692] binder_alloc: 21768: binder_alloc_buf, no vma [ 306.297423] binder: 21768:21778 transaction failed 29189/-3, size 0-0 line 2967 [ 306.303757] FAULT_INJECTION: forcing a failure. [ 306.303757] name failslab, interval 1, probability 0, space 0, times 0 [ 306.316205] CPU: 0 PID: 21801 Comm: syz-executor4 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 306.324714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.334079] Call Trace: [ 306.336698] dump_stack+0x1c9/0x2b4 [ 306.340354] ? dump_stack_print_info.cold.2+0x52/0x52 [ 306.345572] ? mnt_get_count+0x150/0x150 [ 306.347189] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.349648] should_fail.cold.4+0xa/0x11 [ 306.349666] ? chown_common+0x730/0x730 [ 306.349685] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 306.364909] binder: send failed reply for transaction 549 to 21768:21771 [ 306.368258] ? lock_acquire+0x1e4/0x540 [ 306.368279] ? __fdget_pos+0x1bb/0x200 [ 306.368314] ? lock_release+0xa30/0xa30 [ 306.386976] ? check_same_owner+0x340/0x340 [ 306.391308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.396845] ? _parse_integer+0x13b/0x190 [ 306.400994] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 306.406548] ? _kstrtoull+0x188/0x250 [ 306.410359] ? _parse_integer+0x190/0x190 [ 306.414510] ? lock_acquire+0x1e4/0x540 [ 306.418483] ? fs_reclaim_acquire+0x20/0x20 [ 306.422820] ? lock_downgrade+0x8f0/0x8f0 [ 306.426969] ? check_same_owner+0x340/0x340 [ 306.431287] ? lock_downgrade+0x8f0/0x8f0 [ 306.435438] ? rcu_note_context_switch+0x730/0x730 [ 306.440373] __should_failslab+0x124/0x180 [ 306.444610] should_failslab+0x9/0x14 [ 306.448412] kmem_cache_alloc+0x2af/0x760 [ 306.452570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.458117] ? cap_capable+0x1f9/0x260 [ 306.462007] getname_flags+0xd0/0x5a0 [ 306.465804] user_path_mountpoint_at+0x27/0x40 [ 306.470388] ksys_umount+0x1c9/0x12f0 [ 306.474198] ? kasan_check_write+0x14/0x20 [ 306.478452] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 306.483375] ? __detach_mounts+0x430/0x430 [ 306.487610] ? wait_for_completion+0x8d0/0x8d0 [ 306.492185] ? lock_release+0xa30/0xa30 [ 306.496171] ? fsnotify_first_mark+0x350/0x350 [ 306.500760] ? __fsnotify_parent+0xcc/0x420 [ 306.505098] ? fsnotify+0x14e0/0x14e0 [ 306.508900] ? __sb_end_write+0xac/0xe0 [ 306.512874] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 306.518413] ? fput+0x130/0x1a0 [ 306.521693] ? ksys_write+0x1ae/0x260 [ 306.525501] ? __ia32_sys_read+0xb0/0xb0 [ 306.529568] ? ksys_mount+0xa8/0x140 [ 306.533278] __x64_sys_umount+0x54/0x80 [ 306.537266] do_syscall_64+0x1b9/0x820 [ 306.541164] ? finish_task_switch+0x1d3/0x870 [ 306.545655] ? syscall_return_slowpath+0x5e0/0x5e0 [ 306.550581] ? syscall_return_slowpath+0x31d/0x5e0 [ 306.555504] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 306.560530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.565378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.570659] RIP: 0033:0x456919 [ 306.573846] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.592742] RSP: 002b:00007fba9d65ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 306.600443] RAX: ffffffffffffffda RBX: 00007fba9d65b6d4 RCX: 0000000000456919 [ 306.607703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 306.614960] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 306.622216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 306.629481] R13: 00000000004d5b20 R14: 00000000004c9273 R15: 0000000000000000 [ 306.713788] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.719338] binder: undelivered TRANSACTION_ERROR: 29189 03:34:17 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffb, 0x400000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r1, 0x5c, "6bb59be8fe76a69dae709e9969c1cda45545024173fb189e30045a788001a8732633aa7d40dda3fe14411de20cc02b884c81e4817bd270f8492db2bc3bd0364adbced9825499fe6e7d3fa408edf15f3c97059bb8ce98a2e80e35fa1d"}, &(0x7f0000000440)=0x64) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x800, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @local}}}, 0x108) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x3, 0x80) ppoll(&(0x7f00000004c0)=[{r0}, {r2, 0x80}, {r0, 0x80c0}, {r0, 0xe080}, {r2, 0x2000}], 0x5, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540)={0x6}, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x8001, 0x3fff80, &(0x7f0000001040)="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", 0x9, 0x3, 0x1000, 0x5, 0x1ff, 0x6, 0x0, "47fca7091d123a5773e9769ccd250eaa05225c6c5dc2fdd54c09911cdbf9e325203e9ce0668ebbca674a1f6b5e602c9c5df1f21d6ee769e2048323b9afa7f7dadade0ca96ab472799028e7ba4014f1b3920cede36e5bd66220d877254983c6bcfe5468c1a38e7db33d0a2f482783b8a2db3e8b4d7e00bf3af41fedcc53cff1e887e2ecc7e8743d1edfa23e84321086958114d5b7eaf839a01837cad0f642c419c7f5b4ad01d06626c67493c0ca80340cf65575224345f400dbb4d749b9adc2ea595754b46f65c3dcf66d0958e504fd7adbab0ad94ca7a8b60da5b52b76bc90f98fd2ce"}) r3 = socket(0x11, 0x80002, 0x0) setsockopt(r3, 0x7fffffff, 0x2be, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580)=0x2, 0x4) bind$pptp(r2, &(0x7f0000000480)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000180)={'ip6gretap0\x00', 0x200}) 03:34:17 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_read_part_table(0x9, 0x6, &(0x7f0000001f40)=[{&(0x7f0000000240)="0fb9bfaa0d17fa918987ef6c67d5bb01fdba4c1ea3b75b5cbf62f3f4898fe7a5075bddc2c686dfbc2c3fa043bd35418ba5bd3e321167b0d09d4da132cfc716ca28f2dd005e6866dcb2454420325ecb91141b7e1ad729e936e67fa72f8260c4f2c23ca898a5e33d1516e85e54c4af2070a692d8bb80dc4a87f4c0465fc820b4a563335ff6392a8d3c903fc5b0c1995b376a974a7c28879e6c91a89a653588589d7dbfe8c93709f0c7110af5cf37261c049897b6b2187e728a0114800f94577585280dc622e5be2954dcdaf7ecd393cd045fdb1bab95ab321f44ade230023990436b889cc142aa73f74d78d20303ad13c01cabaf9e089b7ef232f3", 0xfa, 0x81}, {&(0x7f0000000340)="865e6cda7f2cd8b930db80a12db4802e1cc6bc48d966db84b95555d11efb43dddc2578599444e639ef2d286027fd6cdf25780f1f203c0e76d61205af37d17feff9e603ed9d90eee7dd5d0cca2418da0dc75b5c822a62411b31b6911f0e88c9662234dbc884f9537c321d0e68b4b7aedcfbc602c0c5ef74a5b2394f80d4dae93eb52ec0b9b6713c1df5007e3ec558920231be04b7685781e7810806384c6b2dd269c8", 0xa2, 0x9}, {&(0x7f0000000780)="aee87f4336b332b913b03d7acda0663a98cf01b88f2ddb09faa14a098d313ad71fc0c19e544c3611ce60c8b2a3a80fb1cefae4815a899002e028316149dbef287699f79d6c243b92219c9031472a6dc1f4ef217c4bf820a367999f36a4a0a77a92b1c8aa5d38be5361bf58fdc1dcd63f0f81bc3c630e234c454ef671fb91fd8f5f2ab264ccc171b845431c3e742540084e2813a5b2983eb7f51f7ec7d5c60df8a99bc2218652bb28225c0931d60e61", 0xaf, 0x4}, {&(0x7f0000001e40)="33d299b8d5735614b3e93088998b4c210b421585c6eb3624445b4770bbadf60ebb138c9ec24ce27cf12f14e86f6f900b7a972870c696708954bedd50c4c79409ee4a700290276b941a9cc508b466d2ca6087aced40f1f69e17e8eadf31484335f9f0da51b8937b90e388c58e5c7f222935c0b4c47b7d959081f28136e7e07644b7809508088b55ee33e7d461909340b8c520da7e09b0cfcdda838a8dab22503ae9e4245c58a680f8593562912b153e81e490d7557f1811c0a6b4278927093e2f8546857646", 0xc5, 0x1ff}, {&(0x7f0000000140), 0x0, 0x9}, {&(0x7f0000000400)="f7dbfa2991403ee0c0626343a738490d7a87ee8f35c19d130b51d52666ce44ed56febafcb907ba0a75a89cdfc55cf542878f36895daec891cf0bbd70e345", 0x3e, 0x6}]) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/111, 0x6f}, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000540)=""/10, 0xa}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000001d80)=""/153, 0x99}, {&(0x7f0000000840)=""/204, 0xcc}, {&(0x7f0000000940)=""/127, 0x7f}, {&(0x7f00000009c0)=""/212, 0xd4}], 0x8, &(0x7f0000000b40)=""/247, 0xf7, 0x6}, 0x200}, {{&(0x7f0000000c40)=@un=@abs, 0x80, &(0x7f0000001380)=[{&(0x7f0000000cc0)=""/198, 0xc6}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/248, 0xf8}, {&(0x7f0000000f00)=""/153, 0x99}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/156, 0x9c}, {&(0x7f0000001180)=""/117, 0x75}, {&(0x7f0000001200)=""/123, 0x7b}, {&(0x7f0000001280)=""/30, 0x1e}, {&(0x7f00000012c0)=""/158, 0x9e}], 0xa, &(0x7f0000001440)=""/134, 0x86, 0xa1}, 0x3b7}, {{&(0x7f0000001500)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001580)=""/144, 0x90}, {&(0x7f0000001640)=""/92, 0x5c}, {&(0x7f00000016c0)=""/103, 0x67}, {&(0x7f0000001740)}], 0x4, &(0x7f00000017c0)=""/193, 0xc1, 0xa8bd}, 0x4}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000018c0)=""/250, 0xfa}], 0x1, &(0x7f0000001a00)=""/117, 0x75, 0x7}, 0x1}, {{&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/81, 0x51}], 0x1, &(0x7f0000001bc0)=""/74, 0x4a, 0x7fffffff}, 0x6}], 0x5, 0x0, &(0x7f0000000480)) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x401, 0x501402) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) 03:34:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40106309}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:17 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) creat(&(0x7f0000000d80)='./file1\x00', 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x3}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 03:34:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x236, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e0000000001000000000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x4, 0x0, [0x486]}) 03:34:17 executing program 4 (fault-call:8 fault-nth:1): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f001300}, 0x10) 03:34:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) quotactl(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f00000002c0)) read$FUSE(r0, &(0x7f00000030c0), 0x294) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000180)='./file0\x00', 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[{0x4}, {0x7, 0x9}, {0xb, 0x3}, {0x6, 0xfffffffffffffffc}, {0xf, 0x9}, {0x2, 0x4}, {0x0, 0x7}, {0xf, 0x7fcb}, {0x3, 0x7}, {0xb, 0x3}], 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000001400c6da0000000b000000000066ce656d316e6f246576656d31000000000000000000f386616a1a0a3c0000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000500000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f00040000000000"], 0x90) [ 306.874734] binder: 21827:21828 BC_ACQUIRE_DONE node 557 has no pending acquire request [ 306.890141] binder_alloc: binder_alloc_mmap_handler: 21827 20001000-20004000 already mapped failed -16 [ 306.909839] Dev loop6: unable to read RDB block 1 [ 306.914790] loop6: unable to read partition table [ 306.921407] loop6: partition table beyond EOD, truncated [ 306.926962] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 306.936135] binder: BINDER_SET_CONTEXT_MGR already set [ 306.941591] FAT-fs (loop4): bogus number of reserved sectors [ 306.947513] FAT-fs (loop4): Can't find a valid FAT filesystem [ 306.957153] binder: 21827:21828 ioctl 40046207 0 returned -16 [ 306.965441] binder_alloc: 21827: binder_alloc_buf, no vma 03:34:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x0, 0x2c51a9be, 0x9, 0x100000001, 0xff36, 0x100000000}) write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x20, 0x8, '9P2000.L'}, 0x15) bind$bt_sco(r2, &(0x7f0000000100)={0x1f, {0x9, 0x2, 0x8a15, 0x5, 0x8, 0x8}}, 0x8) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0xa9, 0x30}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000400)=r5) r6 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000) shmdt(r6) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0xc2267414d0e524d3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x1}}, 0x18) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000740)={0x7, 0x8}) r8 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r8, 0x2, &(0x7f0000000780)=""/24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000007c0)={r4, @in6={{0xa, 0x4e22, 0x7fff, @empty, 0x100}}, 0x2, 0x400}, 0x90) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000880), 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000008c0)="32802135a2c63d6396eb0a82fba9be42", 0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000900)) getsockname(r0, &(0x7f0000000940)=@un=@abs, &(0x7f00000009c0)=0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)={r4, 0x74, "bbbb78a37685ed1ea4a58900643398d4fe9530d294fee5b24277a62e364fc396d8de7e580bec9740ef1b8b3bc21f8eb92b11bb26f5ce4b23bba089b225bb241839994eb842d9f0cec6b33ceb15fa6083c1a31bad6547a0be89811159b55996a6ebbd9aba2ce95e4f8ec66872dfd649f1a90837ec"}, &(0x7f0000000a80)=0x7c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000ac0)) pwritev(r1, &(0x7f0000000c00)=[{&(0x7f0000000b00)="cae3baf6081c77117b5c18830ba3ada4409bd984c34af701c7d5ce6745f27fc397c59d6203c47ce60bc8d67b7ccde7a133f4ffd423953e9576d56903b64c7b387b373ad39e33610527ade9e9e1ee445c0e7c4db82ea4bfc2f700af0b7c48c24094f3c30a949f6cd8e892a80cc0eccc578516f9d9f86cda6e90bc0a8637a2fb7d593b37a54f68f601a8cc9a9ad141c7c92a04c621adff93198382a750cf9036711149aca24487bcc0b864846e2f9673921cb6b2daadf6828f32b20136e4e217c7920a7f50001f0731a29b26d2cf20deda15dd9275443775b41455955014c5e32af8157b1e1f2df45a71f441582812", 0xee}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000c40)={r4, 0x3}, &(0x7f0000000c80)=0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000d00)={r2, &(0x7f0000000cc0)}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000d40)=""/65, &(0x7f0000000dc0)=0x41) [ 306.971132] binder: 21827:21851 transaction failed 29189/-3, size 24-8 line 2967 [ 306.980246] binder: 21827:21828 Release 1 refcount change on invalid ref 1 ret -22 [ 306.988092] binder: 21827:21836 BC_ACQUIRE_DONE u0000000000000000 no match [ 306.995154] binder: 21827:21836 BC_ACQUIRE_DONE u0000000000000000 no match [ 307.014714] binder: send failed reply for transaction 556 to 21827:21828 [ 307.015557] FAULT_INJECTION: forcing a failure. [ 307.015557] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 307.033383] CPU: 0 PID: 21840 Comm: syz-executor4 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 307.041862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.051204] Call Trace: [ 307.053782] dump_stack+0x1c9/0x2b4 [ 307.057402] ? dump_stack_print_info.cold.2+0x52/0x52 [ 307.062581] ? trace_hardirqs_on+0x10/0x10 [ 307.066806] ? task_dump_owner+0x311/0x6a0 [ 307.071032] should_fail.cold.4+0xa/0x11 [ 307.075083] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 307.080180] ? trace_hardirqs_on+0x10/0x10 [ 307.084463] ? lock_acquire+0x1e4/0x540 [ 307.088427] ? trace_hardirqs_on+0x10/0x10 [ 307.092660] ? trace_hardirqs_on+0x10/0x10 [ 307.096887] ? lock_downgrade+0x8f0/0x8f0 [ 307.101045] ? trace_hardirqs_on+0x10/0x10 [ 307.105269] ? mntput_no_expire+0x18e/0xbc0 [ 307.109581] ? do_raw_spin_lock+0xc1/0x200 [ 307.113809] ? mnt_get_count+0x150/0x150 [ 307.117860] ? dput.part.26+0x276/0x7a0 [ 307.121822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.127348] ? should_fail+0x246/0xd86 [ 307.131224] ? chown_common+0x730/0x730 [ 307.135191] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 307.140290] ? lock_acquire+0x1e4/0x540 [ 307.144266] __alloc_pages_nodemask+0x36e/0xdb0 [ 307.148929] ? lock_release+0xa30/0xa30 [ 307.152906] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 307.157917] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 307.163458] ? _parse_integer+0x190/0x190 [ 307.167602] ? lock_acquire+0x1e4/0x540 [ 307.171565] ? fs_reclaim_acquire+0x20/0x20 [ 307.175884] ? lock_downgrade+0x8f0/0x8f0 [ 307.180022] ? lock_release+0xa30/0xa30 [ 307.183985] ? check_same_owner+0x340/0x340 [ 307.188302] cache_grow_begin+0x91/0x710 [ 307.192359] kmem_cache_alloc+0x689/0x760 [ 307.196500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.202026] getname_flags+0xd0/0x5a0 [ 307.205819] user_path_mountpoint_at+0x27/0x40 [ 307.210443] ksys_umount+0x1c9/0x12f0 [ 307.214266] ? kasan_check_write+0x14/0x20 [ 307.218502] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 307.223427] ? __detach_mounts+0x430/0x430 [ 307.227651] ? wait_for_completion+0x8d0/0x8d0 [ 307.232220] ? lock_release+0xa30/0xa30 [ 307.236189] ? fsnotify_first_mark+0x350/0x350 [ 307.240759] ? __fsnotify_parent+0xcc/0x420 [ 307.245078] ? fsnotify+0x14e0/0x14e0 [ 307.248873] ? __sb_end_write+0xac/0xe0 [ 307.252840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 307.258363] ? fput+0x130/0x1a0 [ 307.261631] ? ksys_write+0x1ae/0x260 [ 307.265430] ? __ia32_sys_read+0xb0/0xb0 [ 307.269483] ? syscall_slow_exit_work+0x500/0x500 [ 307.274320] __x64_sys_umount+0x54/0x80 [ 307.278285] do_syscall_64+0x1b9/0x820 [ 307.282165] ? syscall_return_slowpath+0x5e0/0x5e0 [ 307.287085] ? syscall_return_slowpath+0x31d/0x5e0 [ 307.292004] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 307.297021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.301860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.307037] RIP: 0033:0x456919 03:34:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r3 = socket$packet(0x11, 0x2, 0x300) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0xffffffffffffffe1}) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x1d1) [ 307.310223] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.329119] RSP: 002b:00007fba9d65ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 307.336818] RAX: ffffffffffffffda RBX: 00007fba9d65b6d4 RCX: 0000000000456919 [ 307.344075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 307.351336] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 307.358591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 307.365847] R13: 00000000004d5b20 R14: 00000000004c9273 R15: 0000000000000001 03:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done={0x40106308, 0x0, 0xfffffdfd}], 0x0, 0x0, &(0x7f00000007c0)}) 03:34:18 executing program 4 (fault-call:8 fault-nth:2): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 307.404297] QAT: Invalid ioctl [ 307.415935] QAT: Invalid ioctl [ 307.430134] QAT: Invalid ioctl 03:34:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x0, 0x2c51a9be, 0x9, 0x100000001, 0xff36, 0x100000000}) write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x20, 0x8, '9P2000.L'}, 0x15) bind$bt_sco(r2, &(0x7f0000000100)={0x1f, {0x9, 0x2, 0x8a15, 0x5, 0x8, 0x8}}, 0x8) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0xa9, 0x30}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000400)=r5) r6 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000) shmdt(r6) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0xc2267414d0e524d3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x1}}, 0x18) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000740)={0x7, 0x8}) r8 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r8, 0x2, &(0x7f0000000780)=""/24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000007c0)={r4, @in6={{0xa, 0x4e22, 0x7fff, @empty, 0x100}}, 0x2, 0x400}, 0x90) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000880), 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000008c0)="32802135a2c63d6396eb0a82fba9be42", 0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000900)) getsockname(r0, &(0x7f0000000940)=@un=@abs, &(0x7f00000009c0)=0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)={r4, 0x74, "bbbb78a37685ed1ea4a58900643398d4fe9530d294fee5b24277a62e364fc396d8de7e580bec9740ef1b8b3bc21f8eb92b11bb26f5ce4b23bba089b225bb241839994eb842d9f0cec6b33ceb15fa6083c1a31bad6547a0be89811159b55996a6ebbd9aba2ce95e4f8ec66872dfd649f1a90837ec"}, &(0x7f0000000a80)=0x7c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000ac0)) pwritev(r1, &(0x7f0000000c00)=[{&(0x7f0000000b00)="cae3baf6081c77117b5c18830ba3ada4409bd984c34af701c7d5ce6745f27fc397c59d6203c47ce60bc8d67b7ccde7a133f4ffd423953e9576d56903b64c7b387b373ad39e33610527ade9e9e1ee445c0e7c4db82ea4bfc2f700af0b7c48c24094f3c30a949f6cd8e892a80cc0eccc578516f9d9f86cda6e90bc0a8637a2fb7d593b37a54f68f601a8cc9a9ad141c7c92a04c621adff93198382a750cf9036711149aca24487bcc0b864846e2f9673921cb6b2daadf6828f32b20136e4e217c7920a7f50001f0731a29b26d2cf20deda15dd9275443775b41455955014c5e32af8157b1e1f2df45a71f441582812", 0xee}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000c40)={r4, 0x3}, &(0x7f0000000c80)=0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000d00)={r2, &(0x7f0000000cc0)}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000d40)=""/65, &(0x7f0000000dc0)=0x41) [ 307.444798] binder: 21864:21868 BC_INCREFS_DONE u0000000000000000 node 562 cookie mismatch 00000000fffffdfd != 0000000000000000 [ 307.446282] QAT: Invalid ioctl [ 307.457948] binder_alloc: binder_alloc_mmap_handler: 21864 20001000-20004000 already mapped failed -16 [ 307.470489] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.476367] binder: BINDER_SET_CONTEXT_MGR already set [ 307.481876] binder_alloc: 21864: binder_alloc_buf, no vma [ 307.482851] FAT-fs (loop4): bogus number of reserved sectors [ 307.487479] binder: 21864:21869 transaction failed 29189/-3, size 24-8 line 2967 03:34:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0xffffffff00000000]}, 0x10) [ 307.493282] FAT-fs (loop4): Can't find a valid FAT filesystem [ 307.511716] binder: 21864:21869 Release 1 refcount change on invalid ref 1 ret -22 [ 307.512036] binder: 21864:21868 ioctl 40046207 0 returned -16 [ 307.531243] binder: 21864:21875 BC_ACQUIRE_DONE u0000000000000000 no match [ 307.538459] binder: 21864:21875 BC_INCREFS_DONE u0000000000000000 no match [ 307.548937] FAULT_INJECTION: forcing a failure. 03:34:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x0, 0xffffffff00000000]}, 0x10) 03:34:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x28041, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000200)=""/205, &(0x7f0000000080)=0xcd) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x18, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) r3 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@mcast1, @dev={0xfe, 0x80, [], 0x10}, @local, 0x7, 0x8001, 0x100000000, 0x100, 0x2, 0x8, r4}) fcntl$setown(r1, 0x8, r3) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x7, &(0x7f0000000480)=0x2) [ 307.548937] name failslab, interval 1, probability 0, space 0, times 0 [ 307.560226] CPU: 0 PID: 21871 Comm: syz-executor4 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 307.568732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.578098] Call Trace: [ 307.580802] dump_stack+0x1c9/0x2b4 [ 307.584479] ? dump_stack_print_info.cold.2+0x52/0x52 [ 307.589684] ? kasan_check_read+0x11/0x20 [ 307.593846] ? do_raw_spin_unlock+0xa7/0x2f0 [ 307.597274] binder: send failed reply for transaction 561 to 21864:21868 [ 307.598269] should_fail.cold.4+0xa/0x11 [ 307.598287] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 307.598304] ? debug_object_active_state+0x2f5/0x4d0 [ 307.619387] ? kasan_check_read+0x11/0x20 [ 307.623562] ? rcu_is_watching+0x8c/0x150 [ 307.627705] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 307.632373] ? locks_free_lock_context+0xbe/0x360 [ 307.637225] ? trace_hardirqs_on+0xd/0x10 [ 307.641371] ? fsnotify_destroy_marks+0x2e7/0x5c0 [ 307.646211] ? note_gp_changes+0x420/0x420 [ 307.650440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.655968] ? integrity_inode_free+0x5d/0x320 [ 307.660572] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.665329] ? check_same_owner+0x340/0x340 [ 307.669648] ? retint_kernel+0x10/0x10 [ 307.673542] ? rcu_note_context_switch+0x730/0x730 [ 307.678475] __should_failslab+0x124/0x180 [ 307.682705] should_failslab+0x9/0x14 [ 307.686501] kmem_cache_alloc+0x2af/0x760 [ 307.690651] ? destroy_inode+0x15e/0x200 [ 307.694704] ? __destroy_inode+0x7f0/0x7f0 [ 307.698937] ? kasan_check_write+0x14/0x20 [ 307.703167] ? do_raw_spin_lock+0xc1/0x200 [ 307.707421] p9_client_prepare_req.part.8+0xbc/0xa00 [ 307.712531] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 307.717367] ? destroy_inode+0x200/0x200 [ 307.721425] ? do_raw_spin_lock+0xc1/0x200 [ 307.725653] ? lock_downgrade+0x8f0/0x8f0 [ 307.729799] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 307.735334] p9_client_rpc+0x247/0x1420 [ 307.739312] ? p9_client_prepare_req.part.8+0xa00/0xa00 [ 307.744674] ? iput+0x63a/0xaa0 [ 307.747951] ? inode_add_lru+0x2a0/0x2a0 [ 307.752010] ? kasan_check_read+0x11/0x20 [ 307.756152] ? do_raw_spin_unlock+0xa7/0x2f0 [ 307.760552] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 307.765131] ? kasan_check_read+0x11/0x20 [ 307.769272] ? do_raw_spin_unlock+0xa7/0x2f0 [ 307.773678] ? dentry_unlink_inode+0x454/0x640 [ 307.778257] ? d_lru_add+0x120/0x120 [ 307.781971] p9_client_clunk+0x93/0x150 [ 307.785941] v9fs_dentry_release+0x68/0xd0 [ 307.790171] ? v9fs_cached_dentry_delete+0x40/0x40 [ 307.795094] __dentry_kill+0x4c0/0x7a0 [ 307.798976] ? d_drop+0x70/0x70 [ 307.802251] ? do_raw_spin_lock+0x200/0x200 [ 307.806564] ? lock_release+0xa30/0xa30 [ 307.810551] dentry_kill+0xc9/0x5a0 [ 307.814177] dput.part.26+0x66b/0x7a0 [ 307.817972] ? shrink_dcache_sb+0x350/0x350 [ 307.822287] ? do_raw_spin_lock+0xc1/0x200 [ 307.826527] do_one_tree+0x37/0x40 [ 307.830064] shrink_dcache_for_umount+0xc7/0x2b0 [ 307.834814] ? debug_check_no_obj_freed+0x30b/0x595 [ 307.839825] ? d_set_mounted+0x2e0/0x2e0 [ 307.843883] ? trace_hardirqs_off+0xd/0x10 [ 307.848120] generic_shutdown_super+0xd5/0x530 [ 307.852694] ? __kasan_slab_free+0x131/0x170 [ 307.857096] ? destroy_super_rcu+0x210/0x210 [ 307.861498] ? trace_hardirqs_on+0xd/0x10 [ 307.865645] ? unregister_shrinker+0x298/0x460 [ 307.870225] kill_anon_super+0x3c/0x50 [ 307.874108] v9fs_kill_super+0x3e/0xa0 [ 307.877992] deactivate_locked_super+0x97/0x100 [ 307.882654] deactivate_super+0x2bb/0x320 [ 307.886796] ? mount_ns+0x1d0/0x1d0 [ 307.890419] ? shrink_dcache_sb+0x350/0x350 [ 307.894746] ? cpumask_next+0x24/0x30 [ 307.898542] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 307.903556] ? mnt_get_writers.isra.27+0xf7/0x150 [ 307.908398] cleanup_mnt+0xbf/0x160 [ 307.912020] __cleanup_mnt+0x16/0x20 [ 307.915740] task_work_run+0x1ec/0x2a0 [ 307.919626] ? task_work_cancel+0x250/0x250 [ 307.923943] ? fput+0x130/0x1a0 [ 307.927224] exit_to_usermode_loop+0x318/0x380 [ 307.931802] ? syscall_slow_exit_work+0x500/0x500 [ 307.936640] ? ksys_mount+0xa8/0x140 [ 307.940369] do_syscall_64+0x6be/0x820 [ 307.944249] ? finish_task_switch+0x1d3/0x870 [ 307.948750] ? syscall_return_slowpath+0x5e0/0x5e0 [ 307.953681] ? syscall_return_slowpath+0x31d/0x5e0 [ 307.958606] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 307.963630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.968473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.973655] RIP: 0033:0x456919 [ 307.976843] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.995824] RSP: 002b:00007fba9d65ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 308.003528] RAX: 0000000000000000 RBX: 00007fba9d65b6d4 RCX: 0000000000456919 [ 308.010788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 308.018050] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 308.025313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 308.032573] R13: 00000000004d5b20 R14: 00000000004c9273 R15: 0000000000000002 [ 308.040027] kasan: CONFIG_KASAN_INLINE enabled [ 308.044655] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 308.052049] general protection fault: 0000 [#1] SMP KASAN [ 308.057604] CPU: 0 PID: 21871 Comm: syz-executor4 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 308.059981] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.066091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.066115] RIP: 0010:p9_client_prepare_req.part.8+0x392/0xa00 [ 308.066130] Code: ff 0f 87 6a 02 00 00 e8 6c 8b f4 fa 0f be 85 f4 fe ff ff 4c 89 f2 48 c1 ea 03 89 85 f4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 89 05 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 308.066137] RSP: 0018:ffff88019c2ef310 EFLAGS: 00010206 [ 308.066149] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004e14000 [ 308.066158] RDX: 000000000000000a RSI: ffffffff86881c94 RDI: ffff8801d9ac35b8 [ 308.066165] RBP: ffff88019c2ef440 R08: ffff880194c2e000 R09: fffffbfff10057c6 [ 308.066177] R10: fffffbfff10057c6 R11: ffffffff8802be33 R12: ffff8801d9ac3580 [ 308.087135] binder: 21891:21892 BC_INCREFS_DONE u0000000000000000 node 567 cookie mismatch 0100000000000000 != 0000000000000000 [ 308.105862] R13: 0000000000002000 R14: 0000000000000050 R15: ffff8801cf526188 [ 308.105874] FS: 00007fba9d65b700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 308.105882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.105891] CR2: 0000001b33926000 CR3: 000000019b22c000 CR4: 00000000001406f0 [ 308.105902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.105910] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.105915] Call Trace: [ 308.105938] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 308.105951] ? destroy_inode+0x200/0x200 [ 308.105967] ? do_raw_spin_lock+0xc1/0x200 [ 308.105980] ? lock_downgrade+0x8f0/0x8f0 [ 308.106000] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 308.117891] binder_alloc: binder_alloc_mmap_handler: 21891 20001000-20004000 already mapped failed -16 [ 308.118624] p9_client_rpc+0x247/0x1420 [ 308.118646] ? p9_client_prepare_req.part.8+0xa00/0xa00 [ 308.118661] ? iput+0x63a/0xaa0 [ 308.118678] ? inode_add_lru+0x2a0/0x2a0 [ 308.127452] binder: BINDER_SET_CONTEXT_MGR already set [ 308.133215] ? kasan_check_read+0x11/0x20 [ 308.133230] ? do_raw_spin_unlock+0xa7/0x2f0 [ 308.133244] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 308.133259] ? kasan_check_read+0x11/0x20 [ 308.133272] ? do_raw_spin_unlock+0xa7/0x2f0 [ 308.133289] ? dentry_unlink_inode+0x454/0x640 [ 308.133306] ? d_lru_add+0x120/0x120 [ 308.140675] binder_alloc: 21891: binder_alloc_buf, no vma [ 308.152185] p9_client_clunk+0x93/0x150 [ 308.152202] v9fs_dentry_release+0x68/0xd0 [ 308.152213] ? v9fs_cached_dentry_delete+0x40/0x40 [ 308.152233] __dentry_kill+0x4c0/0x7a0 [ 308.159534] binder: 21891:21895 transaction failed 29189/-3, size 24-8 line 2967 [ 308.167729] ? d_drop+0x70/0x70 [ 308.167743] ? do_raw_spin_lock+0x200/0x200 [ 308.167761] ? lock_release+0xa30/0xa30 [ 308.174912] binder: 21891:21892 ioctl 40046207 0 returned -16 [ 308.180899] dentry_kill+0xc9/0x5a0 [ 308.180917] dput.part.26+0x66b/0x7a0 [ 308.180932] ? shrink_dcache_sb+0x350/0x350 [ 308.180946] ? do_raw_spin_lock+0xc1/0x200 [ 308.180963] do_one_tree+0x37/0x40 [ 308.180977] shrink_dcache_for_umount+0xc7/0x2b0 [ 308.180991] ? debug_check_no_obj_freed+0x30b/0x595 [ 308.181008] ? d_set_mounted+0x2e0/0x2e0 [ 308.190506] binder: 21891:21898 BC_ACQUIRE_DONE u0000000000000000 no match [ 308.195539] ? trace_hardirqs_off+0xd/0x10 [ 308.195560] generic_shutdown_super+0xd5/0x530 [ 308.195572] ? __kasan_slab_free+0x131/0x170 [ 308.195587] ? destroy_super_rcu+0x210/0x210 [ 308.195602] ? trace_hardirqs_on+0xd/0x10 [ 308.195619] ? unregister_shrinker+0x298/0x460 [ 308.195641] kill_anon_super+0x3c/0x50 [ 308.198238] binder: 21891:21898 BC_INCREFS_DONE u0000000000000000 no match [ 308.203056] v9fs_kill_super+0x3e/0xa0 [ 308.203073] deactivate_locked_super+0x97/0x100 [ 308.203085] deactivate_super+0x2bb/0x320 [ 308.203100] ? mount_ns+0x1d0/0x1d0 [ 308.208028] binder: 21891:21897 Release 1 refcount change on invalid ref 1 ret -22 [ 308.211378] ? shrink_dcache_sb+0x350/0x350 [ 308.211395] ? cpumask_next+0x24/0x30 [ 308.211411] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 308.211425] ? mnt_get_writers.isra.27+0xf7/0x150 [ 308.211442] cleanup_mnt+0xbf/0x160 [ 308.211456] __cleanup_mnt+0x16/0x20 [ 308.211470] task_work_run+0x1ec/0x2a0 [ 308.211489] ? task_work_cancel+0x250/0x250 [ 308.217324] binder: send failed reply for transaction 566 to 21891:21892 [ 308.221155] ? fput+0x130/0x1a0 [ 308.221176] exit_to_usermode_loop+0x318/0x380 [ 308.221193] ? syscall_slow_exit_work+0x500/0x500 [ 308.221207] ? ksys_mount+0xa8/0x140 [ 308.221224] do_syscall_64+0x6be/0x820 [ 308.221237] ? finish_task_switch+0x1d3/0x870 [ 308.221254] ? syscall_return_slowpath+0x5e0/0x5e0 [ 308.501221] ? syscall_return_slowpath+0x31d/0x5e0 [ 308.506144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 308.511153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.516010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.521188] RIP: 0033:0x456919 [ 308.524377] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.543277] RSP: 002b:00007fba9d65ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 308.550988] RAX: 0000000000000000 RBX: 00007fba9d65b6d4 RCX: 0000000000456919 [ 308.558253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 308.565512] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 308.572781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 308.580041] R13: 00000000004d5b20 R14: 00000000004c9273 R15: 0000000000000002 [ 308.587314] Modules linked in: [ 308.590502] Dumping ftrace buffer: [ 308.594042] (ftrace buffer empty) [ 308.597886] ---[ end trace a1a18eb235e03302 ]--- [ 308.602680] RIP: 0010:p9_client_prepare_req.part.8+0x392/0xa00 [ 308.608699] Code: ff 0f 87 6a 02 00 00 e8 6c 8b f4 fa 0f be 85 f4 fe ff ff 4c 89 f2 48 c1 ea 03 89 85 f4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 89 05 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 308.627650] RSP: 0018:ffff88019c2ef310 EFLAGS: 00010206 [ 308.633052] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004e14000 [ 308.637435] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.640361] RDX: 000000000000000a RSI: ffffffff86881c94 RDI: ffff8801d9ac35b8 [ 308.640371] RBP: ffff88019c2ef440 R08: ffff880194c2e000 R09: fffffbfff10057c6 [ 308.640381] R10: fffffbfff10057c6 R11: ffffffff8802be33 R12: ffff8801d9ac3580 [ 308.640389] R13: 0000000000002000 R14: 0000000000000050 R15: ffff8801cf526188 [ 308.640400] FS: 00007fba9d65b700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 308.640415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.689207] CR2: 0000001b33926000 CR3: 000000019b22c000 CR4: 00000000001406f0 [ 308.696523] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.703821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.711119] Kernel panic - not syncing: Fatal exception [ 308.716929] Dumping ftrace buffer: [ 308.720463] (ftrace buffer empty) [ 308.724157] Kernel Offset: disabled [ 308.727771] Rebooting in 86400 seconds..