ommon=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xfffffffe}}}], 0xff33) 15:08:19 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x102) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x5, 0x3, 0x3, 0x3, 0x16, 0x1000, 0x5, 0x4, 0x1, 0x8, 0x400, 0x100000001}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xc00000000000000}, @quote}], 0xff33) 15:08:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1631.732388][ T8036] binder_alloc: 8021: binder_alloc_buf, no vma 15:08:19 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xe50}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0xffffffffffffff4c}, 0x8) [ 1631.825984][ T8036] binder: 8021:8036 transaction failed 29189/-3, size 24-8 line 3147 [ 1631.828034][ T8050] binder: 8021:8050 Release 1 refcount change on invalid ref 1 ret -22 15:08:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1632.076332][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1632.205415][ T8163] binder_alloc: 8162: binder_alloc_buf, no vma [ 1632.213010][ T8163] binder: 8162:8163 transaction failed 29189/-3, size 24-8 line 3147 [ 1632.234611][ T8163] binder: 8162:8163 Release 1 refcount change on invalid ref 1 ret -22 [ 1632.279856][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xa00}, @quote}], 0xff33) 15:08:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:20 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200200, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x100, 0x0) r0 = socket$kcm(0x10, 0x80000000002, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0xfea0}], 0x1}, 0x0) 15:08:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x4000000000000}}}], 0xff33) 15:08:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1632.477611][ T8244] binder_alloc: 8242: binder_alloc_buf, no vma [ 1632.483924][ T8244] binder: 8242:8244 transaction failed 29189/-3, size 24-8 line 3147 [ 1632.549299][ T8244] binder: 8242:8244 Release 1 refcount change on invalid ref 1 ret -22 [ 1632.563451][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x4200000000000000}, @quote}], 0xff33) 15:08:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:20 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = socket(0x13, 0x1, 0x1) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x8, 0x8001}, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1632.762858][ T8294] binder_alloc: 8292: binder_alloc_buf, no vma [ 1632.810653][ T8294] binder: 8292:8294 transaction failed 29189/-3, size 24-8 line 3147 15:08:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1632.856213][ T8352] binder: 8292:8352 Release 1 refcount change on invalid ref 1 ret -22 15:08:20 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x101000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000100)={0x4}) [ 1632.980926][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xb00}, @quote}], 0xff33) 15:08:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1633.382936][ T8516] binder_alloc: 8512: binder_alloc_buf, no vma [ 1633.432201][ T8516] binder: 8512:8516 transaction failed 29189/-3, size 24-8 line 3147 [ 1633.527998][ T8523] binder: 8512:8523 Release 1 refcount change on invalid ref 1 ret -22 [ 1633.567611][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x14000000000000}}}], 0xff33) 15:08:21 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getdents(r0, &(0x7f0000000100)=""/235, 0xeb) r1 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x7, 0x410280) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000280)={'HL\x00'}, &(0x7f00000002c0)=0x1e) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x10000000000000}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000240)={0x0, 0x5, 0x6, &(0x7f0000000200)=0xffffffffffffff00}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000300)={0x8000, 0x81}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x18, "36e93423f80fc513e2874d1abb45dc8f88570b0eb5790f72"}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r3, 0xd7, "c61d7749eb4a3bf6ea38f4fc1d134e73657a5403190004bc531565b21916fb00cb4372f86420eab2d0f201376d6a51816f6c7e3fb7d45010728c1f7fb1b776e11cf89a36416f16769cfd48b63d63f385d271baa00e2183646e999b84cc445fc565794acd76bfffd3ae307f63eb124a8ffda05cfe97d537725c770fc66ac1dfae10b8497e5c6e5e0ffa6c748c9cb85f9389044d2f2c4106628c0c01a20b67b28d9b223edcd62829869ff23a9771642994c92163425dfa377112ab53288efc6db73b14e1aaa2e2fb0bfb1a7cc0b36b4d4eabd3979772e1f6"}, &(0x7f0000000500)=0xdf) 15:08:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x80ffffff00000000}, @quote}], 0xff33) 15:08:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1633.899654][ T8642] binder_alloc: 8600: binder_alloc_buf, no vma 15:08:21 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) getsockopt(r0, 0x7ff, 0x2, &(0x7f00000000c0)=""/239, &(0x7f0000000040)=0xef) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x800, 0x100000001) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x12400, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x9, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) wait4(r3, &(0x7f0000000200), 0x4, 0x0) [ 1633.955236][ T8642] binder: 8600:8642 transaction failed 29189/-3, size 24-8 line 3147 15:08:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1634.060921][ T8648] binder: 8600:8648 Release 1 refcount change on invalid ref 1 ret -22 [ 1634.127555][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:21 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x2000, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x4}, 0xf) r2 = semget$private(0x0, 0x1, 0x800000) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd1, 0x300) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="930000000000000000000000000000000000000000000000000000000000000000000000000000000000e6920000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) accept$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001280)=""/4096) [ 1634.384774][ C0] net_ratelimit: 13 callbacks suppressed [ 1634.384781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1634.384801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1634.390525][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:08:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xc00}, @quote}], 0xff33) 15:08:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1634.553556][ T8867] binder: 8866:8867 transaction failed 29189/-22, size 24-8 line 2994 [ 1634.647638][ T8867] binder: 8866:8867 Release 1 refcount change on invalid ref 1 ret -22 [ 1634.695157][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:22 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x4e230000000000}}}], 0xff33) 15:08:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x8100000000000000}, @quote}], 0xff33) [ 1634.842672][ T8886] binder: 8883:8886 transaction failed 29189/-22, size 24-8 line 2994 [ 1634.882354][ T8886] binder: 8883:8886 Release 1 refcount change on invalid ref 1 ret -22 [ 1634.923868][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:22 executing program 5: set_thread_area(&(0x7f0000000040)={0x4, 0x20001000, 0xffffffffffffffff, 0x4, 0x9, 0x40, 0x4b07688a, 0x1, 0xffffffffffffff67, 0xf725}) r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1635.024892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1635.025210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1635.031067][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1635.037085][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:08:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1635.209922][ T8903] binder: 8897:8903 transaction failed 29189/-22, size 24-8 line 2994 [ 1635.349165][ T9003] binder: 8897:9003 Release 1 refcount change on invalid ref 1 ret -22 [ 1635.522686][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x8100}, @quote}], 0xff33) 15:08:23 executing program 5: r0 = socket$kcm(0x10, 0x2000000000010007, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x122) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0xfbeb8ae) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:08:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:23 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x81ffffff00000000}, @quote}], 0xff33) 15:08:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1635.707321][ T9100] binder: 9074:9100 Release 1 refcount change on invalid ref 1 ret -22 [ 1635.834830][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1635.840760][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:08:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x100000000000000}}}], 0xff33) 15:08:23 executing program 5: r0 = socket$kcm(0x10, 0x9, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:23 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:23 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00dfd52a00815fe45ac187183995cf0400b0dbaa98cbb30007fff0000b000000000051894d5d1dac", 0x29}], 0x1}, 0x400000000000000) r1 = socket$inet(0x2, 0x3, 0x3) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000840), &(0x7f0000000880)=0xc) r2 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)=']cgroup\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r2, 0x10000, 0x200}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000240)="b5bc552e6f2b2de724da63877d11d19f1f88972674ad1d22c1efd86d7c8408f456e9676f17d4771c5b18d70bf14501268e37c4ff10f1c765189d19558c2fc5db10f0635f5c3616630313804b66b87fe96b348263cbc18c7db03754fb59df4e5f9a78", &(0x7f00000002c0)=""/111) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 15:08:23 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1636.464801][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:08:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xbf00}, @quote}], 0xff33) 15:08:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:24 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 15:08:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x92ffffff00000000}, @quote}], 0xff33) [ 1636.587048][ T9249] binder: 9248:9249 ioctl c0306201 0 returned -14 15:08:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x200000000000000}}}], 0xff33) 15:08:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:24 executing program 5: time(&(0x7f0000000040)) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1637.177431][ T9368] binder: 9367:9368 ioctl c0306201 0 returned -14 [ 1637.255695][ T9368] binder_thread_write: 3 callbacks suppressed [ 1637.255708][ T9368] binder: 9367:9368 Release 1 refcount change on invalid ref 1 ret -22 15:08:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:25 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000001580)='/dev/vcsa#\x00', 0x4, 0x40000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x105}, 0x4) 15:08:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfe00}, @quote}], 0xff33) 15:08:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x9300000000000000}, @quote}], 0xff33) 15:08:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:25 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='\x00', 0x1, 0x2) [ 1637.775315][ T9599] binder: 9598:9599 Release 1 refcount change on invalid ref 1 ret -22 15:08:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x300000000000000}}}], 0xff33) 15:08:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:25 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x6, 0x4) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1638.206685][ T9708] binder: 9707:9708 Release 1 refcount change on invalid ref 1 ret -22 15:08:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xff03}, @quote}], 0xff33) 15:08:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x93ffffff00000000}, @quote}], 0xff33) 15:08:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1638.389734][ T9817] binder: 9812:9817 Release 1 refcount change on invalid ref 1 ret -22 15:08:26 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000003580)='/dev/dsp#\x00', 0x4, 0x3ffffd) sendmsg$kcm(r0, &(0x7f0000003540)={&(0x7f00000000c0)=@sco={0x1f, {0x3, 0x1, 0x7ff, 0x4, 0xffffffffffffffff, 0xf80}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)="c54c1297e78aa52248a6c9f32832628cea2850114d7d82a8ab646a740abdb735c207a30c6750df3d12a177be", 0x2c}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000001180)="5a86f5a31dfff22fd91da6987a25ce2051fb6fd231b4db565652076879506b3bb8675ceb59ce9b7ea4b0af0dc77f0056b62cbe8d3027a3399eabba1afa145fca2586feeb9697279f05dfc39a04b7d18b72358223044706d252d1541aa24c6710827742d857acdf850039b46a565c0100cfba608a08f26677b6ba9f9199c924b962dffee29f2f8a2dcc90f352444ab36ef092b68a89b2866d23a46382bbeb2e9d24a75146310fa7fe72b6929e7a2c4f35aca63269cb328e80d0", 0xb9}, {&(0x7f0000002280)='17', 0x2}, {&(0x7f00000022c0)="0498b0b83094cc244a452a4200bc6b11bb3931", 0x13}, {&(0x7f0000002300)="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", 0x1000}], 0x7, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x4000800) r1 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2e, 0x6, 0x0, {0x3, 0x5, 0x5, 0x0, '\x8deth1'}}, 0x2e) 15:08:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1638.601398][ T9840] binder: 9839:9840 Release 1 refcount change on invalid ref 1 ret -22 15:08:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x400000000000000}}}], 0xff33) 15:08:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:26 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = socket(0x0, 0x2, 0x101) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4200019}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xfd3e, 0x8, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff04000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1639.210551][ T9952] binder: 9950:9952 Release 1 refcount change on invalid ref 1 ret -22 15:08:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x40000}, @quote}], 0xff33) 15:08:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x94ffffff00000000}, @quote}], 0xff33) 15:08:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:27 executing program 5: r0 = socket$kcm(0x10, 0x80000000042, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 1639.428050][T10065] binder: 10064:10065 Release 1 refcount change on invalid ref 1 ret -22 15:08:27 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) close(r0) memfd_create(&(0x7f0000000040)='keyring\x00', 0x2) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="ab089948828df3667a2c14d43fc6cfba15f07e2d8b20ae0ab67e6ac39e0accc365658733d59cb9d9db85a99626ad1a2c93b4ecceac1ceb8ce137405e66f7e7a62eef44b071a306a099885a10534fe7b9a6d6fa1317ec67f00e44f780213fc37dc240d945a14cd7dc81af1a515b40fc89a0b13bdb0cffc9fd60ab6cf28bb6cad3751d8d193f5d61aed09b", 0x8a, 0x0) r2 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0xffffffff, 0x101000) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000500), 0x4) keyctl$get_keyring_id(0x0, r1, 0x1) 15:08:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1639.855738][T10113] binder: 10087:10113 got transaction with invalid offset (0, min 0 max 0) or object. [ 1639.895009][T10113] binder: 10087:10113 transaction failed 29201/-22, size 0-8 line 3241 [ 1639.961426][T10113] binder: 10087:10113 Release 1 refcount change on invalid ref 1 ret -22 [ 1639.986590][ C1] net_ratelimit: 15 callbacks suppressed [ 1639.986692][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1639.998924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1640.069949][ T3598] binder: undelivered TRANSACTION_ERROR: 29201 15:08:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x500000000000000}}}], 0xff33) 15:08:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:27 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0xfffffffffffffffd) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xbf00000000000000}, @quote}], 0xff33) [ 1640.247040][T10225] binder: 10205:10225 got transaction with invalid offset (0, min 0 max 0) or object. 15:08:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x234e00}, @quote}], 0xff33) 15:08:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:28 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x4, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x401, 0x2, [], &(0x7f0000000140)}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x802) getsockname$packet(r1, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14) sendto$packet(r2, &(0x7f00000001c0)="ad7d8d5f25f1aecd05bcc794fb503774ab8fd8f738ffca728d69b44c36cb5d115c494257348d1f5f760de919c5e1866e77d870d380708bada118da948f5d22ee3ec1063a65be9e26b8726e50c59c355c8162e38bfaf9f49e5d3840bf0f5dac53f66db628337097f8696d84ec67d846565aa754ec6d0db878778171ddbb9b87f6eb1e049e45b0629d09d669d2a3be378165d8d09c93a0d26eefe27ab8db7e4dc22a425571ec28e53137b26384561482b1dffe8ea1e01033163d95ee1fa64dcedc382f48d77645466688a90a90132fe0acce112e8903952b5795c9339cc763549b91aff3ea2d3fc2529f3db4066281df3446de95a0a3aaf0a024989db54537dfa3e2975e5e76c04c7f6cdf23627ea3573f642981e561ab18516842837c57f59ac1a2d54e6ed50dff48e21714bce57e4eea04c3c36f6c08cde52e3023da97f36da61d818eef3e440f9679647e401bc233bea7179d8ce4fbe44b41e406223d944852470d441acc5960eb8503662f03c0ce505a97063f8344c4e6df23145ae67bef33be4bb698e4ee2ff83bf444b2b6013cd3cdc7a0b4b8970ba39993771a0d7ecb374b63397c08852b8938c3579846f5beaa24d813f0b4041a6d2b16cc59bfaf82f9b81dfc4b3eacd229d890675887d21f1ce45c8308c18d193424e591e6c511f32a62cf92b6923ebe2f02b9af1dd004c1ad3e80495e8700cd07d772de15d1b2320bfe39d178347a3cb661e7ef47359c652c17f7747683c4e12190371f11172f18a310abd34ec554c9b3f0e22b9b31bf6eb63a018321f7748acbe0c6cb3b2e2cd3e69e74c97b477176c0b9fa60229d5422a808d6f14b2316d61baf5526e76ed86be13c3477c27d92c8e908087801727408f4e120047c1a96cbed553a509dfb60d12b999def3acda2a33af3c83cda3c6de9670b2e1e37096f9cd0101689d310d8ef7b95d402057257bdc31607e33cb642db4c992eee3476fc2488c1788267f5f249b517db0146614bfc84dbaf0233320605dca00c0a6a59f62449aa4a6d23f30ec80a3be9fac8b9232a220b8db734a4fd935903336b255664acad117d728b9c1ec6ebf093f135876d3104ba3bf7352a5363110a8ddbb1896791794c4f06969403799d5c5fceebbcca2a6aca9bc83340f7dce6b53e35d6e4f0ac5f7d237ff3ff865aff652decb160bac6290894cd2dbc0e611ac534156c2637119b5857b0a6597cf805406635680c709643fbd3b8a48bc617cf0abd19d86e96e3312c8c84d0f60d35abca2f8ed98a19dead046af7361b4a4bd5ee5c0c5b439a88d16b16a3d4cda91407e89a1d5d7c190515358e57a495439797923260e60056a3fea71c2920d0ff952259dd49ba8dd6e8a98c27a88527c442a34c1e1a848a2632dca8ef0ae9af2239c32757a5ee5988ef603eeefc232430e296d2db9db35fc4c7c3b582a8c5b36f34debc3db074ab82ede5716915b8805bc8ebc40384a63aa2db5c1b8694b7e4ac4d1b2f07d9195d5b906a0ab4a78d69b41f5efadf689078d6fe4f4f5b818e4434223eb547f5c715a21faf182c414ff7c133987faf8b73b12ec19e9ce7aa9edfef19605396ad49e763ee7382489ee542bfa90ffcb4ddb82ded91277a1ae4cfd4a369287ade0cdf2d3749d4135728b59064c470ac4d51854d14e4be73d0a62562ef30e94ab7d854cdba5b41cccb394029f0521cdddae541735234b56b5b76c57c0024d3cb0af5de78c940ac07201d9c95d9f476435e5a635158c33ee3ddc5a4e6f8efdb403b59e7272e6125a5e5c94657998945f2468faf5ef559ff77c7c10cfb14ab786ad4e00f0a1d88ddcb99bf5e088fbccd0cab712670cf0baf5ef4d00baac910e0c6c54ae6f23727b60c1dbac6bde989ee283972331082a53bb477d79b9c31be5a47f4a821b3a2f809dd0790268bd78e2572216d4b2cc250312c8bb7dd6ebead232c71e413e1e2337cd9931cd4f2430023ee2e4737b079dd3ac288df33e9bc5c056fcb9f9a8358575bc2424e25c7b0891f66b0b5f1cfda96c6f8924a273bea64299d98ffb140143ded5240fd6333c40af51e5f24ff8cdf55b3997c7192bd22f592831243f1b109952f882300018b94cf2f91e5e263745cfa6d388cf114aaca84bea6d137e57d2f06c8a8da13e0ee31cedd384d979d82afffcc3c48ba96f06ca071df10a30bc8630b8e8ece6c575093ab3eabcabae166ad1c2ff9f5ba905e9db115ab5666fefc597898d70679f8cfed6c5cffe04ad50c2413cfa516076ae8f7adb145ce28cbbcffe3e42ab19bfccb7fc89036e5a807e67a66ae8c85cd4495bfb64a62239518ce1aa7c29a4143383836a97127b0181fb5bc3f4e026d4a00813f5e302bc748a59241e3e8ee6a1648e7081a57e4d75b177081a7a7b744d0925ae9ef3f665b78ca94ef89aff339e242e96f83e4d8290cb1e001b2dad4fddfdd524d245e8ccca80c637a52d7fc3761b4516631f24761cb70df4231104a6df2d4a5f5bc4a0d9dc5109bbd310ec4604281796e3b310bf75785f961ee7a984e0076d01f1b189511a26557ddf1cc987589e38642897e4bc551175efd1977ea0594e85874667748a1a833aba759245017924f695214f57306b9b757c0985c759cab60f0bec9ad9858c871036d4ab8b46f5d5f03723ca0f8d57d86c115ff5aacecbe971076f7326517f5b2256e5832484be4d5d3518dc2f6d34906e8dac905b66b4cee0149176f3771960b56dc724c6cbd3408ea0a2d876a9dfb5928387c9760c605b279a563614c8cf90fba698b84af486a5c6ae80e6260d4a7a58ce420b53aaa1750009693af56bd3ced93137e8b6df0d1d2205271138dd403588540b5155fdb6a4a70ae6ba1bee6fb4fc8379ef4539892ba852e1423fac28e95ea318329a00f887d6bde98d8ca0ba99799374e40bb96b1343ada143977ba102e44ac908a48090846057cd50d918eb70321f42ca19aeb071f7d27a3f75c2b041d90a51492b0412c3c1aee10bac7abec36e65e884037887c9991bf9c01fb30f64a21033987016e054dcca4e31cb09ce046eacda48d2918430e2abbb5a3fd20f85b60429d512702db4273856739185cd246606172a10c30631bdc6ea6164f8146a2306aac186274271dff97bc73559268b7580b1da749fbc2d03142369946f494df8a2118170a7d8c001b20327185f6ec76bf34a7bbf67ee25087a907ba5f6fddf2aad36280f9b8f053117f839cdbd57a969a6828a37f762352538a06507919fe6cd070de5638242beca3746e7b7f738d228473e17662835271edefc37101d7bc8a994c11223d9a7303815f39a10520c674a997838cc2aabe5aad376e1c6e5dff96465204770e8dc0ac143a72b194223ba0dac2b4d9f2f2c2a6ab55201cb21e30e598d5d8218f38ff4db8acd832139d954d2712cfd2fd8a528c9055222fe202b33f4303448f93bd019b839033fd44a654a402ba66ee69b9514595877adb3fd2132a07f8bde83db79054daa51b3e6f17f349107b226188c0d32b8f3c37b448d3182acd5866c9930793d34729759cb13ba7ba4de2536062ee526052a8e32844cffcd450893a5d27436de4999e193f2bf67b34cf1c1fce3e2dc0da5d3f06ed39d62ea2ce1600886984289df7b7ec52dd7229b9d65bf48e9ea38096d4b2d7cf4f27181907a5281c217ad45208809e1a2f3ec4509d17d77f130f6c9456f372c67509794bb45eace3682df52e0918d92c036aacc7cde447580fa14745db295d6d7323b726d15eeb55e87b702e84432dea285cb6ca1de71593b8416c3928cde650ec24cbdaf9b89d17db05d058086562b4be9905d53370a5df7a9adc7fc327888f2949c3e54a164c172f95f56b33a64242862c09fa889038f571ba51211476a7166f6562144c4a0223cf8d0da0cf7359e851291a02f772e690e2d716bd8ffccc73bcaa9707fceb347a623e30c6e5bae1fc8517165c36c32a468d8a5f49523fb568c07198ab9e7b358242664ac0721ab25c7fa28e87aeecbd49842c545adf2e5133467252b3daee73fe0b2ba39bb607235cc53c9dd74eae601f9a04ca5bfc103afe890c316e23ff98d03804627e13d98f4d9bf09f13b4dd012c598b7f48b90f69524601d77c38ac3b7f7c3a8deaba49a4dde000463b99b3d44ed83bed5d1e48b42fc1e4e650162f0a532e2b44ee99616fec70b29874727d4560c199607d8f7782d111be304b2738e7b46c3a46f1b936d81db265e99ea7fef03f09f23ba0c053c3f560b711a1cf61b1c82d70070aceeca8bab304b289271b1cffae221a9ef5f2a23beb05685e063c01794de473994ec2fa1119114e9ac163da9d34b483c64e609521ce98421d54f3ab68fe1ddf39ee6d7e2480b4bba926c1dcbd421691d9fdaacffb3098cd5be015b5515117009c8354ca026fed2ca0962e4fd6ed5e8bf6449a30682bc111ed61880b886307e863fa154f65f40440008b43ced6fef8dfc0be1ac7c924ca926e2ab4666bb082297600a56146c470baadd82d3ada23fcd0629d9118f404f81a4de1c2cff6c8ac8df5debc62e46e86348467eeae1d639ac09be10c27e5f5e9fd4dd21e60ad8db6c8699669a4853bbd86fe306e90f755b47f211b17a34c40698bbbfc9253d9ba7a21c0e4ee3eeb5117822f89e5f469099aaa30d8b53c94de7fdfac41c533f7057e7a230458a661d5f1da9cceab1b7b132a6336c1d652235bddf698b10d7a0a332a1fb76c90a21b4dd793cbad8de91d224f3ff3b09584ed89e2c908f328e4ac4b50b7604c569320254a9bc5cec6a5982867d5909950c787ac06f5298ccaa9b1141d2471b02596b580421e47b18ccf9912c2513ba3af7d10d78db0de7cc1c5113d48b951da7177466cb252415ae8feea9805dc08a551d8a8b81624959b4c2c4605c698876ac0edde30a1d068fc42e26afb9208890518bbecf09ff5588400bfe721c519d4757159c3d595fcb22ad44aba390cff817900bbeb87123abeab6cee0c32e39f3a6bc0f4834c86a4256fd1e02b14a7d73f08991d00d03767985e933922954e89439147a1ad4777f451298625f59165fc0a9b8629b71f053d02d5b65f88b5591c1c6d99f40489447b9d96a14d84fd6fcbe00b2f8603d35f79632c5f56178d2a5a0de0585037f13c6cf0240f2892ce66eeac53ef927e258ea8a101cf3ff27c9b0123529362e199faa0b68d6668dd6697e472d24547644ec25f733b5cf4cdb6f2fc3fa821d3fec49336d69f587f0828ce22b6fca96ca7df3a0e325610394f0299a1605d70534795e5b7bac3ea2219a491bddc219b2819a0418f31f107ca4571e4f6029e547eaff131a0819b52d7bddf0086d7ef3c3b7e8e670326669040fb3c6283ff26da467f5b42bf13ebe546110903463ccb84b4f87c67d486e83ec7a8d8a19db6fc6a7d8c8705bccf860db09cbd56ea6a4fb92c979645c4c7708a34b2ab59cf93733f0c6575a6046e7165aeb53c357b373310e5346d14007830ea7a07fe1e2fafce491bd71b558e024920c95fb1375a32c31ded2fb7d0e8adb657072d114989f205f951676fff2b774d1d4a531ddfd2c2faa5b7bdbf909251c408709b07854f51037561943ce28d0d002479161df6e6acd52d0f5de18d9b29ff8405ca59df2f6f0d8fca92f17affdcf9fba862b6d7293ab125f8ff4e8b0e43856d9c3637c9026d02b850a85cbe8940bec0a1dd08c21f99b11c65563da1101c4261641406995261486683a830e1a95e0e647bd900196b2851ff83ff967fd75b5f172c4cd8a18bb0fcb962e59a4cd0d0c8caa8c23be02ba2ceb7576e2b7c5d40cf46f4d262d72a5fdca97d01", 0x1000, 0x24044801, &(0x7f0000001280)={0x11, 0x17, r3, 0x1, 0x3c, 0x6, @random="eeed9582435e"}, 0x14) [ 1640.325242][T10225] binder: 10205:10225 transaction failed 29201/-22, size 0-8 line 3241 [ 1640.401850][T10297] binder: 10205:10297 Release 1 refcount change on invalid ref 1 ret -22 15:08:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xf7ffffff00000000}, @quote}], 0xff33) [ 1640.531860][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1640.624762][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1640.625586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1640.630679][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1640.636748][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:08:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1640.847176][T10419] binder: 10416:10419 got transaction with invalid offset (0, min 0 max 0) or object. [ 1640.950233][T10419] binder: 10416:10419 transaction failed 29201/-22, size 0-8 line 3241 [ 1641.014099][T10423] binder: 10416:10423 Release 1 refcount change on invalid ref 1 ret -22 15:08:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x800000000000000}}}], 0xff33) 15:08:28 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xd25, 0x2000) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x1000) r1 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1641.106215][ T12] binder: undelivered TRANSACTION_ERROR: 29201 15:08:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1641.264788][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1641.265424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1641.270726][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1641.278434][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1641.329526][T10533] binder: 10507:10533 got transaction with invalid offset (0, min 0 max 0) or object. [ 1641.389779][T10533] binder: 10507:10533 transaction failed 29201/-22, size 0-8 line 3241 15:08:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x4e2300}, @quote}], 0xff33) 15:08:29 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) 15:08:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xfd00000000000000}, @quote}], 0xff33) 15:08:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1641.432089][ T12] binder: undelivered TRANSACTION_ERROR: 29201 15:08:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1641.615348][T10602] binder: 10594:10602 got transaction with invalid offset (0, min 0 max 0) or object. [ 1641.688587][T10602] binder: 10594:10602 transaction failed 29201/-22, size 0-8 line 3241 15:08:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x2, 0x0, 0xfffffffffffffff8, 0xf965, 0x6, 0x3, 0x10000, 0x80000000, 0x9, 0x5, 0x1, 0x3, 0xac, 0x5, 0xef2a, 0x6, 0x9, 0x3, 0x795, 0x5, 0x1, 0xffffffff, 0x91, 0x80000000, 0x8, 0xa91e, 0x4, 0x6, 0x9, 0xffffffff, 0xfff, 0x9]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a7, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="c0d888da550a77b1bfa53536477e98522221cf79f4ae4e52b55f83666dfa5240624a822f4fa455fb0fc83852e18445127562012cce62bbd87e3c0c071a11f8100499dc01298bab93efdcb382d449c0ea0afa6605573b5cc0050dc455295b40060000000000000091c822c123ca5e88ca075aa365f9cdf9433dfe37cdf210b317a26f2567b7459570f19c6fa5cdaff220106e00efda5941b1f3395948e284f8b0fd136a7164b5a5f88cd93f1ec889bcba0a4d9a996845f7a47f6b6cd296bce2c9ce43149ca34d00ad08bd59035afd599a43af35788812429c00000000000000000000000000"]) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x17}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) write$P9_RLERROR(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="190000006528717175506e636572175502b35e146d198b8c3a8235a49c61948a83b88fda36b6ed3e9baac7e4f2551cd282fb341700000000007def4b116a1ef68c0b070000000000"], 0x19) [ 1641.786747][ T12] binder: undelivered TRANSACTION_ERROR: 29201 15:08:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x1f00000000000000}}}], 0xff33) 15:08:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1642.149126][T10735] binder: 10734:10735 got transaction with invalid offset (0, min 0 max 0) or object. 15:08:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xfdffffff00000000}, @quote}], 0xff33) 15:08:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1642.238764][T10661] hfs: unable to parse mount options [ 1642.260268][T10735] binder: 10734:10735 transaction failed 29201/-22, size 0-8 line 3241 [ 1642.352827][T10782] binder_thread_write: 2 callbacks suppressed [ 1642.352843][T10782] binder: 10734:10782 Release 1 refcount change on invalid ref 1 ret -22 [ 1642.483164][ T3598] binder: undelivered TRANSACTION_ERROR: 29201 15:08:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x1000000}, @quote}], 0xff33) 15:08:30 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000000c0)={0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 1642.800798][T10793] binder: 10788:10793 got transaction with invalid offset (0, min 0 max 24) or object. 15:08:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1642.848685][T10793] binder: 10788:10793 transaction failed 29201/-22, size 24-8 line 3241 [ 1642.916241][T10793] binder: 10788:10793 Release 1 refcount change on invalid ref 1 ret -22 15:08:30 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x40) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x101, 0x3, 0x2, &(0x7f0000ff6000/0xa000)=nil, 0x400}) 15:08:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x4200000000000000}}}], 0xff33) [ 1642.996728][ T3598] binder: undelivered TRANSACTION_ERROR: 29201 15:08:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xfe00000000000000}, @quote}], 0xff33) [ 1643.207847][T10934] binder: 10926:10934 got transaction with invalid offset (0, min 0 max 24) or object. [ 1643.275499][T10934] binder: 10926:10934 transaction failed 29201/-22, size 24-8 line 3241 15:08:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:31 executing program 5: r0 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x100001c3, 0x0, 0x238}, 0x48000) [ 1643.377167][T10934] binder: 10926:10934 Release 1 refcount change on invalid ref 1 ret -22 [ 1643.456182][ T12] binder: undelivered TRANSACTION_ERROR: 29201 15:08:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1643.707317][T11029] binder: 11025:11029 got transaction with invalid offset (0, min 0 max 24) or object. [ 1643.760984][T11029] binder: 11025:11029 transaction failed 29201/-22, size 24-8 line 3241 15:08:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x2000000}, @quote}], 0xff33) 15:08:31 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0008002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac903aae53e58683d5b4b5ca813c38ebf37407ee11d13f1ce08e871801868e18625f5d02c5839c33be7455ac8d81a3970012fe1276782759160304a149bfbe924149daa397914adf9b1cdc38c8cfb9e4da2c37f3fd717b26b225e6a97a42d36f4b479ec7bfc4ec6b86f8939a9b2f125ab0cfd9eb0365a58f4fcfcd0ea417ef4598cbb6164453a1dbd3e0791579f50e6ec3b2200e29192c16ee4615909ac0783c68ee6c95311e4afdcd842dcb2810a1673b8632989e5dcb4ad83844395453", 0xeb}], 0x1}, 0x0) 15:08:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1643.810809][T11034] binder: 11025:11034 Release 1 refcount change on invalid ref 1 ret -22 15:08:31 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) kexec_load(0x81, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)="cba132bc14cfa7241c8a2b56d456c8578c6d40115da5cf1961a854769dfe466a5d17f5756c78458910aa0669b5b3ab6301bed1f342799b4639320fba452cc7ed345438a66ea3ef15fecaa9dbbf31b4255d1eb8be1ff5ccb88351fafe3d14b5da93d78f88eeaecd1c512bf48d5f85b30d0c17bce0cdc33741f09646df63b2230252bc5bff2b29e21b817906f790694e16afb062154e41f2450b434d1e2c82578ca29581c93212b57e78b35bf31c25", 0xae, 0x14a4, 0xfffffffffffffffa}, {&(0x7f0000000180)="e8e91e9dd9ba3377838e70106be7d546a7345278ce239f76e21ee8870549590fc43f0ec64889a95cafb3f629f54ff85073510513c149d3156eec0198f40c2fd4536129b6073b3889d97660d2701e8a478ae70dac46b11ef59efb1dff4272460b119b6d4dc71769aa02a538162cf4450fcf513f", 0x73, 0x6}, {&(0x7f0000000200)="493dcd7b93a6ffeb7bc4b50b38448b702b04f9e1bc95e3fb0565dccdcb5d1bdddfc0147cea87e3ebaf813dc2e3717282b7dd1d764973598c7adf264d94e643c61b3df05c2759687a53f55465021ddbe37fe5bae56549435eb0a5a2e18200dd98e603b63fe284dd5604c182a2312ecf795e0dc9db378ee1b58e67181efdf1860b2b0635ff8a1d37e88c084cc81417e300ed1a32a77c60e6b35dca09cd6e0b2d48209e1560192ca505179ce75d459aacecf2d35298af5a0de65169209c1e7d2289ea937f85acb5e29b34d67a147c5167c11ad3ec43a6c182be517cdd7b5134b3ea34043c9956d05e66bf470eca120c455703e0cb8ad8d63b33ac", 0xf9, 0x8000, 0x2}], 0x280000) [ 1643.857264][ T3598] binder: undelivered TRANSACTION_ERROR: 29201 15:08:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x80ffffff00000000}}}], 0xff33) 15:08:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1644.063220][T11066] binder: 11052:11066 Release 1 refcount change on invalid ref 1 ret -22 [ 1644.106397][ T3598] binder: release 11052:11066 transaction 115 out, still active [ 1644.127779][ T3598] binder_release_work: 1 callbacks suppressed [ 1644.127785][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1644.229595][ T3598] binder: send failed reply for transaction 115, target dead 15:08:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xfeffffff00000000}, @quote}], 0xff33) 15:08:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:32 executing program 5: socketpair(0x0, 0xf, 0x8, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x227136a0, 0x189001) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) 15:08:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1644.435185][T11169] binder: 11165:11169 Release 1 refcount change on invalid ref 1 ret -22 15:08:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1644.498880][ T3598] binder: release 11165:11169 transaction 117 out, still active [ 1644.526059][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1644.592985][ T12] binder: send failed reply for transaction 117, target dead 15:08:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x3000000}, @quote}], 0xff33) 15:08:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:32 executing program 5: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff83, &(0x7f0000000040)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1, 0x0, 0x330}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x120, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 15:08:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1644.810210][T11282] binder: 11281:11282 Release 1 refcount change on invalid ref 1 ret -22 [ 1644.909491][ T12] binder: release 11281:11282 transaction 119 out, still active [ 1644.930719][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1645.033567][ T3598] binder: send failed reply for transaction 119, target dead 15:08:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x8100000000000000}}}], 0xff33) 15:08:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:32 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x987051caa5d8393}, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) read$eventfd(r1, &(0x7f00000000c0), 0x8) 15:08:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xff03000000000000}, @quote}], 0xff33) [ 1645.211448][T11393] binder: 11392:11393 Release 1 refcount change on invalid ref 1 ret -22 15:08:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1645.257238][ T12] binder: release 11392:11393 transaction 121 out, still active [ 1645.280621][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1645.329071][ T12] binder: send failed reply for transaction 121, target dead [ 1645.425143][ C1] net_ratelimit: 15 callbacks suppressed [ 1645.425211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1645.425278][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1645.431498][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1645.437086][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1645.469855][T11406] binder: 11405:11406 Release 1 refcount change on invalid ref 1 ret -22 15:08:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1645.548669][ T12] binder: release 11405:11406 transaction 123 out, still active [ 1645.576453][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1645.621590][ T3598] binder: send failed reply for transaction 123, target dead 15:08:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x4000000}, @quote}], 0xff33) 15:08:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1645.869491][T11416] binder: 11412:11416 Release 1 refcount change on invalid ref 1 ret -22 15:08:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1645.930356][ T3598] binder: release 11412:11416 transaction 125 out, still active [ 1645.951825][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1645.988950][ T3598] binder: send failed reply for transaction 125, target dead 15:08:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x81ffffff00000000}}}], 0xff33) 15:08:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:34 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f00000000c0)={{0x3, @null}, [@null, @remote, @null, @remote, @null, @bcast, @default, @rose]}, &(0x7f0000000040)=0x48) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 15:08:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xffffffff00000000}, @quote}], 0xff33) 15:08:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1646.234838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1646.240780][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1646.249188][ T3598] binder: release 11525:11526 transaction 127 out, still active [ 1646.375709][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1646.417379][T11558] binder: BINDER_SET_CONTEXT_MGR already set [ 1646.445738][T11558] binder: 11539:11558 ioctl 40046207 0 returned -16 [ 1646.445808][ T3598] binder: send failed reply for transaction 127, target dead 15:08:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1646.516064][T11603] binder: 11539:11603 transaction failed 29189/-22, size 24-8 line 2994 [ 1646.559336][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:34 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x100000000000014d}, 0x0) [ 1646.864764][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1646.865610][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1646.870582][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1646.883122][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:08:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x5000000}, @quote}], 0xff33) 15:08:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:34 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000002a00815fe45ac18f180200000000b0eba0b4d65cdbaa98cbb300074d5d1dac0e90190e705c95f5273cdd8fb7176da150f59c770cc8fc548359bcb27f621309809e31e8cf557a497ae355b26b84ed10912969c8400471ab72c72063e3a9b2054615277cbbedecb87e3a54aeeb37662ed8b951195fdf9dfe13de129b4c35d5e90db27766782aa7bd4715381ce4656db0bc751893f2304535e027a271450001e27fbc7cbc9da593d7778b5267a9396ac733d9803ea27a5ab9053d27453b52bbb6290c9bc5ffab91fe034871b960ce335e07b14db0f86b37d14cef6640036b150e65cd1472984e", 0xe9}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x22) 15:08:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xffffffffa0010000}, @quote}], 0xff33) 15:08:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x9200000000000000}}}], 0xff33) [ 1647.082516][ T3598] binder: release 11657:11661 transaction 132 out, still active [ 1647.114995][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1647.198990][ T3598] binder: send failed reply for transaction 132, target dead [ 1647.300090][ T12] binder: release 11737:11774 transaction 136 out, still active [ 1647.320782][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:35 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x20200, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000240)={0x2, 0x8cd2, [{0x506b0e07, 0x0, 0x6}, {0xfff, 0x0, 0x6}]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200002, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @multicast1}, {0x307, @link_local}, 0x20, {0x2, 0x4e22, @remote}, 'nr0\x00'}) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000280)={0x2, 0x206}) ioctl$KDDISABIO(r3, 0x4b37) 15:08:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1647.400224][ T3598] binder: send failed reply for transaction 136, target dead 15:08:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1647.515759][T11780] Unknown ioctl -2121748826 15:08:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x92ffffff00000000}}}], 0xff33) [ 1647.550499][ T12] binder: release 11781:11783 transaction 140 out, still active [ 1647.566444][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1647.653701][ T12] binder: send failed reply for transaction 140, target dead 15:08:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x8000000}, @quote}], 0xff33) 15:08:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:35 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000180)=0x400000) 15:08:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0xffffffffffffffff}, @quote}], 0xff33) 15:08:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:36 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x10200) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x101000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x93ffffff00000000}}}], 0xff33) 15:08:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x9000000}, @quote}], 0xff33) 15:08:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:36 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0xf47b}}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x2}, @quote}], 0xff33) 15:08:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:36 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x81, 0x4000) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x2, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x80000000002, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x4002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1649.285089][ T12] binder_thread_release: 4 callbacks suppressed [ 1649.285100][ T12] binder: release 12246:12252 transaction 160 out, still active 15:08:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1649.364959][ T12] binder_release_work: 4 callbacks suppressed [ 1649.365007][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1649.474996][ T12] binder_send_failed_reply: 4 callbacks suppressed [ 1649.475004][ T12] binder: send failed reply for transaction 160, target dead 15:08:37 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x18a00) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x10000, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/181, &(0x7f0000000180)=0xb5) r1 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) [ 1649.591726][ T12] binder: release 12354:12357 transaction 164 out, still active [ 1649.625594][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x9400000000000000}}}], 0xff33) [ 1649.691211][ T3598] binder: send failed reply for transaction 164, target dead 15:08:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xa000000}, @quote}], 0xff33) 15:08:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:37 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) 15:08:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x3}, @quote}], 0xff33) 15:08:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x94ffffff00000000}}}], 0xff33) 15:08:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1650.009050][ T12] binder: release 12475:12482 transaction 168 out, still active [ 1650.035123][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1650.129974][ T12] binder: send failed reply for transaction 168, target dead 15:08:38 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x400000) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000180)={0x7, 0x8}) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x6) 15:08:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1650.335130][ T3598] binder: release 12593:12594 transaction 172 out, still active [ 1650.365377][ T3598] binder: unexpected work type, 4, not freed 15:08:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1650.418380][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1650.461933][ T3598] binder: send failed reply for transaction 172, target dead [ 1650.589693][ T3598] binder: release 12659:12662 transaction 176 out, still active [ 1650.614597][ T3598] binder: unexpected work type, 4, not freed 15:08:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1650.702594][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1650.764823][ T3598] binder: send failed reply for transaction 176, target dead 15:08:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xb000000}, @quote}], 0xff33) 15:08:38 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0xfffffffffffffc43}], 0x10000163}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x84001) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffa, 0x9, 0x2, 0x1, 0xa9b, 0x3, 0x6, 0x5, 0xde, 0x40, 0xcf, 0x7fff, 0x7, 0x38, 0x2, 0x200, 0x7, 0x8001}, [{0x6474e557, 0x0, 0x81, 0x7000000000, 0x1, 0x401, 0x8}, {0x70000000, 0x1, 0x5, 0x1, 0x1523, 0x8, 0x29, 0x1f}], "b76f0f322d9a65d1acf43e508372bdf40328513cf3c9287befd478e33c7893fd12ea7a24c859f5a35d4d2d7a0a0b261489c2515ba78f336b01e5122a05bdb1ed01adfaa8c0909dcca2a54b0b3ac6caf68855300e5abeab793bef706bddd8d28e5b2174fd0b797232303d3e35b8f8e53cb8051ae7d1a954082fe7c9fe5bb59a91faf5f484cf604b1ff782", [[], [], [], [], [], [], [], [], []]}, 0xa3a) ioctl$TUNSETLINK(r1, 0x400454cd, 0x317) 15:08:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x4}, @quote}], 0xff33) 15:08:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xbf00000000000000}}}], 0xff33) [ 1651.024787][ C0] net_ratelimit: 14 callbacks suppressed [ 1651.024796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.025129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.030500][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1651.032555][ T12] binder: release 12717:12718 transaction 180 out, still active [ 1651.036690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1651.042080][ T12] binder: unexpected work type, 4, not freed [ 1651.042089][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1651.200553][ T12] binder: send failed reply for transaction 180, target dead 15:08:39 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 1651.359163][T12833] binder: 12831:12833 ioctl c0306201 0 returned -14 15:08:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1651.424614][ T12] binder: release 12831:12833 transaction 184 out, still active [ 1651.449703][ T12] binder: unexpected work type, 4, not freed 15:08:39 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={r1, 0x6, 0xd5a1, "9259bae8c7d12686880c410bc102a0baf039642c305d88c01637d606fec7e93e6bd65a4efb7fc71db9740bfef1d78b71075d370b64db96ffcbcdc8768322b390a86f3c9355d1fc7ad023ba86ab42decfddafdeb3af17c0621dbd303c68bfffb55ace4fbbd67a31c9101ef25954c6bbbfb598fa00150ff2c61dcb4fcde9be6a6ec404d72b33cdc2da2c264d60a748e2058062bdd6a99893e42d09d2be4ed6ec978a6af47a53edaf20c6b6b9520df2a8e1615f53358e"}) r2 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0xfffffffffffffffc) [ 1651.507236][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1651.588813][ T12] binder: send failed reply for transaction 184, target dead [ 1651.665863][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.672664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1651.674732][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.684496][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1651.767730][T12846] binder: 12844:12846 ioctl c0306201 0 returned -14 [ 1651.837353][ T12] binder: release 12844:12846 transaction 188 out, still active [ 1651.859764][ T12] binder: unexpected work type, 4, not freed [ 1651.923974][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xc000000}, @quote}], 0xff33) 15:08:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x5}, @quote}], 0xff33) 15:08:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xf7ffffff00000000}}}], 0xff33) 15:08:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 15:08:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x200, 0x4, 0x6, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={r1, 0x100000001}, &(0x7f0000000380)=0x8) r2 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0xffffff11}], 0x1}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x10000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="08860000f6b3f25418030000", @ANYRES32=0xffffffffffffff9c, @ANYBLOB="00000000000000005020440010000000f55aecff1100000005f3fffffcffffff9500000000000000180000000200000000000000070000008500000001000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x53, &(0x7f0000000180)=""/83, 0x0, 0x1, [], 0x0, 0xf}, 0x48) socket$xdp(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) [ 1651.969121][ T12] binder: send failed reply for transaction 188, target dead 15:08:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1652.082314][T12967] binder: 12962:12967 ioctl c0306201 0 returned -14 [ 1652.115002][ T3598] binder: release 12962:12967 transaction 192 out, still active [ 1652.122829][ T3598] binder: unexpected work type, 4, not freed [ 1652.194916][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1652.264239][ T3598] binder: send failed reply for transaction 192, target dead 15:08:40 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0xfffffffffffffe72}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1000, 0x40000) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) [ 1652.397711][ T3598] binder: release 13076:13078 transaction 196 out, still active [ 1652.457982][ T3598] binder: unexpected work type, 4, not freed [ 1652.465846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1652.471833][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:08:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1652.514988][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1652.556267][ T3598] binder: send failed reply for transaction 196, target dead [ 1652.693308][ T12] binder: unexpected work type, 4, not freed 15:08:40 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x10003, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000100)={0x9b1, r2, 0x2, 0x7fffffff}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x80ffffff}, @quote}], 0xff33) 15:08:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:08:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xfdffffff00000000}}}], 0xff33) 15:08:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x8}, @quote}], 0xff33) 15:08:40 executing program 5: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 1653.098902][ T3598] binder: unexpected work type, 4, not freed 15:08:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 15:08:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:41 executing program 5: set_robust_list(&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}, 0xfffffffffffffffc, &(0x7f0000000080)}, 0x18) socket$kcm(0x10, 0xb, 0x10) socket$kcm(0x29, 0x2, 0x0) [ 1653.335427][ T12] binder: unexpected work type, 4, not freed 15:08:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) [ 1653.575158][ T3598] binder: unexpected work type, 4, not freed 15:08:41 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x10, &(0x7f0000000100)='\'^\\[.cgroupppp0\x00', r2}, 0x30) r3 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x81000000}, @quote}], 0xff33) 15:08:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 15:08:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x9}, @quote}], 0xff33) 15:08:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xfeffffff00000000}}}], 0xff33) [ 1654.082134][ T3598] binder: unexpected work type, 4, not freed 15:08:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, 0x0}) 15:08:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x40400) getpeername$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @remote, @rose, @rose, @default, @bcast, @null]}, &(0x7f0000000140)=0x48) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7d, @rand_addr="0b12134c96d6433113d798c5fcb6c76d", 0x100}}, 0x24) r1 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff13, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 1654.307392][T13558] binder_thread_write: 1 callbacks suppressed [ 1654.307407][T13558] binder: 13555:13558 Release 1 refcount change on invalid ref 0 ret -22 15:08:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1654.389001][ T12] binder_thread_release: 5 callbacks suppressed [ 1654.389012][ T12] binder: release 13555:13558 transaction 220 out, still active [ 1654.416348][ T12] binder: unexpected work type, 4, not freed 15:08:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, 0x0}) [ 1654.449746][ T12] binder_release_work: 5 callbacks suppressed [ 1654.449752][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1654.517307][ T12] binder_send_failed_reply: 5 callbacks suppressed [ 1654.517316][ T12] binder: send failed reply for transaction 220, target dead 15:08:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1654.705317][T13665] binder: 13663:13665 Release 1 refcount change on invalid ref 0 ret -22 [ 1654.787229][ T12] binder: release 13663:13665 transaction 224 out, still active [ 1654.816522][ T12] binder: unexpected work type, 4, not freed [ 1654.856286][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1654.905324][ T12] binder: send failed reply for transaction 224, target dead 15:08:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x81ffffff}, @quote}], 0xff33) 15:08:42 executing program 5: r0 = socket$kcm(0x10, 0x80000000002, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x200000) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x440, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 15:08:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, 0x0}) 15:08:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xa}, @quote}], 0xff33) 15:08:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xff00000000000000}}}], 0xff33) 15:08:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1655.130768][T13685] binder: 13679:13685 Release 1 refcount change on invalid ref 0 ret -22 [ 1655.217703][ T3598] binder: release 13679:13685 transaction 228 out, still active [ 1655.248860][ T3598] binder: unexpected work type, 4, not freed 15:08:43 executing program 3 (fault-call:7 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x802, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0xc9) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v2={0x3, 0x3, 0xa, 0x2, 0x54, "b431e54a5cf92cb2b955a6fe1b1c4a05e2a2251de6d0db6b3a5413a23b9876e136976d420c30a57ca92ecc2d0a9f220fce1d7f38cbe135c32ce8ebb9a97237862e3cc9ebc225a9ea98d7bbb74941c9cdf47b09ca"}, 0x5e, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) [ 1655.301882][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1655.362450][ T3598] binder: send failed reply for transaction 228, target dead 15:08:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1655.482804][T13798] device team0 entered promiscuous mode [ 1655.537955][T13798] device team_slave_0 entered promiscuous mode [ 1655.555771][T13802] FAULT_INJECTION: forcing a failure. [ 1655.555771][T13802] name failslab, interval 1, probability 0, space 0, times 0 15:08:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1655.631605][T13798] device team_slave_1 entered promiscuous mode [ 1655.684591][T13802] CPU: 0 PID: 13802 Comm: syz-executor.3 Not tainted 5.1.0-rc2 #36 [ 1655.692531][T13802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.702592][T13802] Call Trace: [ 1655.705902][T13802] dump_stack+0x172/0x1f0 [ 1655.710250][T13802] should_fail.cold+0xa/0x15 [ 1655.714853][T13802] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1655.720675][T13802] ? ___might_sleep+0x163/0x280 [ 1655.725539][T13802] __should_failslab+0x121/0x190 [ 1655.730489][T13802] should_failslab+0x9/0x14 [ 1655.734995][T13802] kmem_cache_alloc_trace+0x2d1/0x760 [ 1655.740374][T13802] ? kasan_check_read+0x11/0x20 [ 1655.744568][T13798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.751793][T13802] ? do_raw_spin_unlock+0x57/0x270 [ 1655.751812][T13802] ? _raw_spin_unlock+0x2d/0x50 [ 1655.751946][T13802] binder_get_thread+0x1db/0x7c0 [ 1655.751978][T13802] binder_ioctl+0x1e5/0x183b [ 1655.771418][T13802] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1655.777665][T13802] ? binder_thread_write+0x2820/0x2820 [ 1655.783158][T13802] ? tomoyo_path_number_perm+0x263/0x520 [ 1655.788797][T13802] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1655.794654][T13802] ? smack_log+0x415/0x540 [ 1655.799108][T13802] ? binder_thread_write+0x2820/0x2820 [ 1655.804567][T13802] do_vfs_ioctl+0xd6e/0x1390 [ 1655.809161][T13802] ? ioctl_preallocate+0x210/0x210 [ 1655.814265][T13802] ? smack_file_ioctl+0x196/0x310 [ 1655.819284][T13802] ? smack_inode_rename+0x2d0/0x2d0 [ 1655.824491][T13802] ? fput_many+0x12c/0x1a0 [ 1655.828915][T13802] ? tomoyo_file_ioctl+0x23/0x30 [ 1655.833848][T13802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1655.840106][T13802] ? security_file_ioctl+0x93/0xc0 [ 1655.845227][T13802] ksys_ioctl+0xab/0xd0 [ 1655.849395][T13802] __x64_sys_ioctl+0x73/0xb0 [ 1655.853994][T13802] do_syscall_64+0x103/0x610 [ 1655.858594][T13802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1655.864476][T13802] RIP: 0033:0x458209 [ 1655.868359][T13802] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1655.887954][T13802] RSP: 002b:00007f84022a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.896356][T13802] RAX: ffffffffffffffda RBX: 00007f84022a8c90 RCX: 0000000000458209 [ 1655.904310][T13802] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1655.912260][T13802] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.920214][T13802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84022a96d4 [ 1655.928166][T13802] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 0000000000000007 15:08:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0xffffffff00000000}}}], 0xff33) [ 1656.035298][T13802] binder: 13796:13802 ioctl c0306201 200001c0 returned -12 15:08:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x92ffffff}, @quote}], 0xff33) 15:08:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xb}, @quote}], 0xff33) [ 1656.123325][ T3598] binder: release 13796:13799 transaction 232 out, still active [ 1656.151522][ T3598] binder: unexpected work type, 4, not freed 15:08:44 executing program 3 (fault-call:7 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:44 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7fff, 0x400401) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="607c37820820295202c877ba95000b5089a4104430a86d54d946fd0ad026a5f65889630d0a1ffcc81759c3b8d882979440f8315678aac842174b730d60467d769e907ad053eb1def959f44872802e04dd136159bff2f391a971cd0daa09e63e29e6404c84ab5a6d0b89af218cc46fdbf04a93ad39b9eee264b2b7ebe7e91a460ee5266c7c5b1d9413617d9fca23e5561904837cdcf562295564543fb66d8a6dfa94bd52f657c", 0xa6}], 0x1000000000000223, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x3, 0x4}]}}, @icmp=@timestamp_reply}}}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x94100) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x50, &(0x7f0000000140)}, 0x10) [ 1656.230636][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1656.237859][ T3598] binder: send failed reply for transaction 232, target dead 15:08:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1656.337948][ T3598] binder: release 13928:13930 transaction 236 out, still active [ 1656.353193][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xc}, @quote}], 0xff33) [ 1656.399642][ T3598] binder: send failed reply for transaction 236, target dead 15:08:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x93ffffff}, @quote}], 0xff33) 15:08:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1656.534839][ T3598] binder: release 14038:14039 transaction 240 out, still active [ 1656.559878][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:44 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000000)={0x0, 0x989680}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x9f8, 0x4) [ 1656.624852][ C1] net_ratelimit: 18 callbacks suppressed [ 1656.624860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1656.641540][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1656.676737][ T3598] binder: send failed reply for transaction 240, target dead 15:08:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x2}}}], 0xff33) 15:08:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:44 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) close(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x5, 0xb3c}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000140)={0x1000, 0x10000}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r6, 0x29, 0xca, &(0x7f0000000240)=""/94, &(0x7f0000000100)=0x5e) ioctl(r0, 0xfffffffffffffffe, &(0x7f00000002c0)="44e9edd934ea1fc85bb79e7ab4e2cf") fcntl$getownex(r2, 0x10, &(0x7f0000000440)) getpgrp(0xffffffffffffffff) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) getpgrp(0x0) getpgrp(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r8 = gettid() r9 = getpgid(r8) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x5e1, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x80, 0x8, 0xffffffffffff4ee8, 0xdbdf, 0xfe2, 0x8, 0x1, 0x100000000, 0x5, 0x3, 0x6a, 0x1f, 0x0, 0x2, 0x1, 0x6, 0x5, 0x7fffffff, 0x8, 0x0, 0xcc0, 0x3, 0x30, 0x3, 0x8000000000000, 0x200000000000000, 0x1, 0x8, 0x9, 0x4, 0x0, 0x53, 0x4, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x100000000, 0x4, 0x99, 0x2, 0x7}, r9, 0x5, r7, 0x3) 15:08:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x14}, @quote}], 0xff33) [ 1657.264759][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1657.264793][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1657.278026][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:08:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1657.438046][ T3598] binder: send failed reply for transaction 244 to 14158:14166 15:08:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x94ffffff}, @quote}], 0xff33) [ 1657.504868][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1657.539650][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:45 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001280)="53f390c1", 0x4}], 0x1}, 0x4008000) sendto$unix(r0, 0x0, 0xfffffffffffffffb, 0x2, &(0x7f0000000040)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e) 15:08:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1657.730028][ T3598] binder: send failed reply for transaction 248 to 14272:14273 [ 1657.762999][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1657.795179][T14287] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! [ 1657.812272][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 [ 1657.947834][ T12] binder: release 14285:14286 transaction 252 out, still active [ 1657.984744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1657.984749][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1657.984791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1657.990579][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1658.010294][ T12] binder: unexpected work type, 4, not freed [ 1658.052615][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x3}}}], 0xff33) 15:08:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xbf000000}, @quote}], 0xff33) 15:08:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:45 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$key(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4a2}}, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x448001, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0285628, &(0x7f0000000000)={0x0, 0x0, "3aa6a07ece2ea61ca7714f5daa58467987aff3666163a944"}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) getsockname(r2, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001c00100025bd7000fcdbdf251f00000021d4c67a5341450f8da0665e0e3d9cd48b50d9b93543014217a008d2", @ANYRES32=r4, @ANYBLOB="8600080a08000800", @ANYRES32=r5, @ANYBLOB="08000b000900000008fd09000500000008000500010000000c000100ffffffffffff0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xffffeffffffffffd, 0x102) r6 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8955}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r8 = dup(r7) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(r6, 0x6, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000000c0)="c7", 0x1) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) sendmmsg(r7, &(0x7f0000000880), 0x220, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$adsp(&(0x7f00000018c0)='/dev/adsp#\x00', 0x0, 0x80) 15:08:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x42}, @quote}], 0xff33) [ 1658.094836][ T12] binder: send failed reply for transaction 252, target dead 15:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1658.286635][ T12] binder: send failed reply for transaction 256 to 14401:14410 [ 1658.297864][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1658.329663][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfdffffff}, @quote}], 0xff33) 15:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:46 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$key(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4a2}}, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x448001, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0285628, &(0x7f0000000000)={0x0, 0x0, "3aa6a07ece2ea61ca7714f5daa58467987aff3666163a944"}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) getsockname(r2, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001c00100025bd7000fcdbdf251f00000021d4c67a5341450f8da0665e0e3d9cd48b50d9b93543014217a008d2", @ANYRES32=r4, @ANYBLOB="8600080a08000800", @ANYRES32=r5, @ANYBLOB="08000b000900000008fd09000500000008000500010000000c000100ffffffffffff0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xffffeffffffffffd, 0x102) r6 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8955}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r8 = dup(r7) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(r6, 0x6, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000000c0)="c7", 0x1) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) sendmmsg(r7, &(0x7f0000000880), 0x220, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$adsp(&(0x7f00000018c0)='/dev/adsp#\x00', 0x0, 0x80) 15:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1658.705885][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:08:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x4}}}], 0xff33) 15:08:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:46 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc5\xb7\xc1\xf8\xa3\xba\xe5 \x97\xac\xc6\'\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xef#\x8d\x00\x00o.\x92\xec\xc5r\xb6\x1a\xb4?', 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='erspan0\x00'}) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000004000000eb04da06fb470000000000000000005512f77de8947679d5000000000000000000000000001900040000000200"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x40010, r2, 0x1) r4 = accept(r3, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000200)=0x80) splice(r0, &(0x7f0000000240), r4, &(0x7f0000000280), 0x400, 0x4) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000001040)="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", 0x1000) 15:08:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x93}, @quote}], 0xff33) 15:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1659.360763][ T12] binder: send failed reply for transaction 260 to 14545:14550 [ 1659.381991][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfe000000}, @quote}], 0xff33) 15:08:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1659.602903][ T3598] binder: send failed reply for transaction 264 to 14603:14604 [ 1659.634879][ T3598] binder_release_work: 1 callbacks suppressed [ 1659.634908][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1659.736684][T14663] binder: BINDER_SET_CONTEXT_MGR already set [ 1659.747026][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:47 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xff81}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f00000000c0)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0x2b5}}, 0x80, &(0x7f0000000240), 0x2b5, &(0x7f0000000480)}}], 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf427}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x7d}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x92ca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc4f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffe}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x78fc}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x31}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 15:08:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1659.809318][T14663] binder: 14662:14663 ioctl 40046207 200001c0 returned -16 [ 1659.943009][ T3598] binder: send failed reply for transaction 268 to 14662:14663 [ 1659.979165][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1660.027160][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x5}}}], 0xff33) 15:08:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xbf}, @quote}], 0xff33) 15:08:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:47 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$getown(r0, 0x9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x7fff, 0x4) accept$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) write(r1, &(0x7f0000000000)="7b9d99250c3f", 0x6) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) 15:08:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1660.301970][ T3598] binder: send failed reply for transaction 272 to 14781:14782 [ 1660.326339][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1660.383210][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfeffffff}, @quote}], 0xff33) 15:08:48 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="d1bd831e22b4b181b412cd8f0baffdb1cdda4cf8b4ce6a825ac1b321099ca0cd6e3f47b6a417c5f8dcec73fe35ebb0704a813f6e69b9c39b28759e30b7fbc2664565aa285b9284a0be52557cec31ca8735f1f40c0279e93db7d2c97b3c2cfd7e58657491e1f33a42218200513f16a6e6604aae9a0a3328acb58050a32c4f9a44ef193d448702ade6195e9cdc73fdf7485718821d2b143b47f24302ad8ead994d7f365446e4f850bae11bc43b750a3c874f08422906d35b94a4e553554bd41227cfdae572ae7d4beff5330fd63950b08299a97cc3de5da00e3a0be3bd178aa69d21d30e411ec8727b56b77b75aaf8e587585d06c68a4260e01cadcb7c25e752a21ea99a05ed64692f6efbf74119191bd6d7db058abe1101ad11f15c7dea11cbc7c12d4767277fa8d15098ca42683c2ef9261f998f4084b484247e5b8f45b85c9d4811ad95289336f522e4eb914d6539800b17d2487a266be8f3eb989d94a362d05a711c9b9d3364d7554e313d35788702ac943bcfa17e2dc537aba64f41d0ee7fd8f4df44d08d4761deb6c49e2dcaa8f5b3a09c5f19894b49fd8394e179e84ad02e67da67dfec716ee8df1f2aaa22479865df087361a47a179c3d680cc8b0dfe40e334cd0c372c3308ec8aae35d59ceeebe599fda2eff7dbe88f6a012864977637c447f7e07a8684f9a6dc49188f441030cd6ef96c8009c49ddbf0380e47a9658eee0f97ff3d7767fe8db9ba22c30fe3b1085ab7c265cf4b303f35c368e9eefa29018b0290436fcc3a50fd4a45ae7e25ea273a82f87ca6b1b213364608ac99da77432523e2e6088cd2d815ac9b5df70c876b48c25f765d7ea461342e3adf1a60b3d8e36f5fc2ca71ffac07aa44c915430aaa76ad06908b6bf98096f3ad9d645f641f34ae0e766770ab2aaaadc3af1403800176248fe942970d77ce77c99ef30ed5b5ec9f7f29d2a0a9b52ff8112447080c22374dde0c9292841b25a5c57a8a0a0fdda71e9679be79b9a9c8ea7226e96402fbcce5704ec1e79b0de6cd733f79ebe07fc9e27dddce5971c24d2140f7d92cf7cff61ab9343ef5b939d1b523e2241c13a601dd38f19ba7e64a2fa798b2002e560310900534e6c1a653c30e6763f58ce15f6f75af9714ce9e613ca96863e21894c0ddc8f87a44437cf89cdeb2f00840331b1b4c7f8fa46c2d29da80e586f50f6047bf9dc808e41a57bf8fd7fb108828f7210b9798a609546e63d555cfdc8c87de64319f406fed9b910563e65b51759165df20f914f12da0757634cd87608cf6c16da828b649beb9c890e3aef94968f8949aead8bdb35894b54c30e34e1d26f3c052ea6431e5d851df534ef94247515caf2debe121045a07f7672ef90d4dfaa4c3439a9126894611e4741ecd07710ee6e340e019fe44c4efd30757c99a1dced515fa45bb7b02826e21ab1054cfd5a4ec1375666419704b1d83ab3c8c57486baa7a042d47e77093056bbcdaec3296a051119ad01cd72167efae20f208e40452e1728b5d02659772fd4df872550dffea29ecdcc8ce337eff4dfa5931a55df700490d921487dc794442381d61d8c89eec73fd6fefaecb4f70e2a81169b2aafb04492141e8ddfd67f1498394273e3fbed6b5996976c1e2a03c17fc9e4fb984c9876fb890622975cbb2dfb3abcc3d7a114af449e6818b1ebed69181de3d8f0cf055f053dd5d4a5f1b21fcf5f97a7bb2687deadcb3b23a36fc67d80de6fd93c2679a5c0725caf281ac7043988e6acc8671ad5eb407f1a9079df9f14c9f11d26c2b849ef869756ff330ebc257a18f11589d2c949b0289c4d55da33c1351a3218916ddb11e4ab33470ac02df38a950f1f6d1426b881112c3b1a5ea5caf34a74d032c0ab34cee80406ba90902fd94ee75486de043513c6dcad033f0e4cf8b29b35ce72ce1e9d2f772026274a877cc0e5597821313ef0f6f4d7968112a9c57c4fa8ad8cd42870e0fe4d3b21117366b1fd1269077e5a880c7887512268faac04d8fa211c76b8677226f3c26f3a900896d02b99d09ba8ac3ecd1a91a37d0098e2cb1b47f10bb4bf9845993f2d93e4111b6389f95194d115f74f5e0687f9050cb4f3a484ef05c4f0e43029a1497f8ed71cd58e547f8f03b281edff3bf4ce5c9cd5be23d13686ebc6c30a7f2b647c282203e0b2bd5141939d34233235bc5a11e9884dd2e8f80ece77566cbaabdaf728f625ae578ea638cdf0a3bd448cab3fa4657925e4fe18615bf22a2494d07b7dec0bdf1bebe1202fdf42cf87e952088ec1a455e88930743063da6e7e8dd6292228fdfeff988f1d33057404710e25d8ff853a458559df33c8d281c5756ce1c7d8ce7674407913b29deed572ae7064ba1bf48386403e58971fa70f5933d2fe80f64881d154b8f9c3bb4384f4555ee3b74fe02323ecaf9b9d6175c9f5bb94aed6c6ffd6b66e550a0f30e2b2ba85f9914d5714fbad45133a3de3a9efa2d625dd1a1f33488097ee91ef499b5c5d025a2d63c84873d3b52127ca7b1909d4194abb68ef08185fad5f38817b2553df74f56c957d9a0cfbf4b0b81c567e6871d914e5558cb9a89044735ac6a6d90a9af9dc80285bd598cf61d4d03467aa29a0ccd70c91e4c88a12428dfed304a1da0cbb9d736f9046de2906dea32a0fb57699cfbaf70e2e08d9956b715bf9bde08c76bcd36709eb58432f1790056a2f18b0a84b7bce52cb8a1a4a64f36d06eb4ae4ad008fcb8791cb19ea447239bee66bd6d9786801f5e9f5426adac61c5ccd326eec0636120dcceffb1d06232ac7e15873fb147c862d3ecba0087c64d1cddc526cbdcc5215c17f8c7c265f1be1df37a1c3b008c01aa2c0bdc6f9bfae1bb8986cb6682927484614cb37207bb90a08a8b10d8351c5ca68f4d1df43fe4ef2c3722857d6efaaed396888eae47bf45144353abd9979b323ff798eb56f85ed014cee6c75b8d0df9cde5a986d9b35c863608b97be3ac49b2500b732f26d5eb5545f37192c17a007ccdaed819e483614c385becb64e48ce702f098b34abfdbc42fe5bdace99acb0477512017902668546a6ac83437f83067ae5f32e17df187a5373e381fbb6eedd8260ef73104402f630cce61de750841d10a48749dab35d62693689e283b5dc2cb718fb68e4a2bf30a3a4dc0a7a0ec7add603436c9eefbb696415ecc565de409395486b2791126625c97999f5d17e12aae19ed90f500bc9f73cd7ecd0d1371216d7a36964344063718463a60a8c5e93b28a83e8e969d8cd8747dc54c2ca563e1347c194817f4cbf399ec54383b1d136a9e80b4393f3f593985038126e7f542920a007a14753bfa82bf2be5f6de0f4cdeadf9bb12a319058ac7b8acfbe8f4c095f1feed492a05a78f857fcf7940ee45615b70bbe206e14ba86f953faa12aad8daf87c7f8aa4ae3e6f93e08663261ec2afb159030bc8a8d49ac31a1044d2cf31d4b1900935cab0dec657da9ee861c08746f96a0bd7824346cd2e3610703beb30a6b5419b8f52c6b2137a50a21e15c20a18bada9f989024b69c4f04f82e4c1e5dbfe1e64b8c79f9068bbc0170767dffa960d88c2010cdc4751acf6283e3840b1771f535aab9a9e0452fd832b4e9a3e68cda2262642bd9ae1ecd5474146cce95cb204d36752e8ab4a3b0033c5e1ebf27b9df6762bbe5e9207030c467c8a6a5f9ea657f5f0040b5659e751a643b23e998fe03adadc137da6efba99d78c351ac46397426f40e8749c395be95cf605e086b45865f5af2be286e03f68248f2f7d016def04f95d844cdea5c3ff9b3ca7a68ab248bfdf8f60e4014332b70e0cff3d9dfeea14b8fb49c7864dd9cfd23a6a7020d94ccf9b2473c27370f941ab711b81578608f12d3588d75ca7a5a91b3f5dbd41f7718a8a6d94eda11a176435f0e4f07af8d0f8f0bfab728b68c0a06b9cd2d65444ec46e41182d0a6b81abc3fa399031eced8186e78351140ef3d9269ec362598d4de97c3ea94865deb76bc241d0dc2401a9574bb219f27604a22907a134bc0dbb0fa981826d3f1c856a39f16109b57ca431f334ed1434f61082ccc75e0726bd8723987e6df0f64172041143983248375bb96b7ee444057ce1a513f0d7d86b169681621c6583a424d69c0a3b5b1b8c036c4c7a0279a20ab3f4619de2d6812d15e3817c7103ce18832723e2437bdab26fab3e2f8c770d6b493a97f35755d6ad0226bd9c9b07a158b67eefa554aa1f8e9cc3a286cbe7fb7242cfc79414e93051a75adabbffceb65e6ec073e9f0d05e0886acf9709528307efc18803557c9c3356eca5e3e699317c35ffd51502517fea0fc961800557776e3dee931d98561e39a50b932e6ec92be05955bdb220f370efe4d8933022a17cdfc0e18f231bc655fe69e2f196332eb4aaa172ca1f12effd080da6a7bf18fcd0fe6392211263a61d787b525040a7f55fee2f96c2a522f4b428b32d5f818ce29269ad686a2dd43f782d52fc435dccee2101db49aaefa880444a700e2b7cf9892930d58c8869f469a7adbb4bd4bb4dcbd5e8c2b24242605ab7c2626ff4901dc7144847d229c3d467e9ec34a6daeecdc4eafe7da44e4346b1aa783f33c9ae390a98eeb1c4b3c8474b40827f9e24a02e0bea624e046c549dd06e10168854a2a51d8138449cbff6c9dba4ac6b4ab38f6698b3670933044f11527bc9d145c6ca9ce1e2f90283d9a4f74cbbf01ad916312b29db49e1bed7d4b91971af813b04945ba441f33d00fb66dd50512e31ec5a2dca80365a70db08e3591cbb567952c3fa96f2ca27360a437a8abfb2c35c5292fe932a8fa1951baced42073f10973a2a78bf103a713f0ed4551f1f2ae9b187fbe745677718c798df1651f14d4a7d7d81c818ee8d5872256c4b59cbcc051620f8b395105d1af92c20177015050f67fe6b180a2f1f2559caef0ec840cd23aad4a97c76ecc6785f68233e0d678c7d61f03d92cd021532bc88058d40c4485bd1a759eb749134db3c1b85578df90410c94465c4c7b83c8591841e3a81f5e34f6e5ea01bb2d1ff096ab6dad43e7776dba71f2dac56d76f77fab2a249b47ecd4bfc3d2f807b07076e60e17e2eff9935a5cc550182ef9ae0ff66de2819135c2e9c152ee6c481371a38ef343f9a63d330e999017353704d98262c08ee6e6fe54002432f46ba93d86ef0270b2f45cbfaa9b29ccdd298461a98cd80283935436030e41c3a689931daf093c6ecc0f558800f1fb254c82e88b247480a46bbfadcb7efa73d7f13c4e6dd992ecb3c348f2b56c3d9abbdd001b0660ec0ad2a4e93cd8d8d7051b83f030d6a1d3ebc1c7012038c798040fa66365f095663e0b996077d7594ef69a55dfa80fe13e07c6767ae0d850eb86a0d2443649dc20a67c47589c13596bf5cae0fb380ad90ff47d3c68e9539c845af52eebdd2d72a36db848abf4c2863bb72820dfb7131d5ed1c48f5f8fb6ee6fc8fb5db688b03f5b93314b9b57a402bb533e0f52f8eca0d2f03c332b5e9817c352479d18bd2126f6ec59f3af966188f9c244c80e9fc23a4a1593057ffb0dbbf115809e9e39c86d1717400b0168287fab48bb2ff0dc221547a7c580cf25eb50fb21f10ceb44d73de3d94c2539e45a9be30fc1c7282becf0cc813133a0507980e58f9f169aac7a0f4cf391eb6cf4ede2a102c4ebc633c400793ec4a17909b0cae24aa8c20ee2347db4c4d80618f212e662b084ce1ab9dd6122dfcbfdfe7f8bac0026cfb6d76e90e568615e8a2c169d99a24e952c0b953c1a8cb3697ebf59ec6350eadb7b609e29fd2eaca26e28ecf525d632a58df55aaa94f79af0ec28816d895c5abb", 0x1000, 0xfffffffffffffff9) keyctl$clear(0x7, r0) 15:08:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1660.500184][ T3598] binder: send failed reply for transaction 276 to 14891:14892 [ 1660.522015][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1660.579198][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 [ 1660.648594][T14927] binder: BINDER_SET_CONTEXT_MGR already set [ 1660.654633][T14927] binder: 14923:14927 ioctl 4018620d 200001c0 returned -16 15:08:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x5, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}]) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x250000, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8, 0x100000001, 0x3f, 0x8}, 0x10) [ 1660.925195][ T3598] binder: send failed reply for transaction 280 to 14923:14927 [ 1660.959558][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1660.996313][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x8}}}], 0xff33) 15:08:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfd}, @quote}], 0xff33) 15:08:48 executing program 5: ftruncate(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) pipe(0x0) sched_setaffinity(0x0, 0x99, &(0x7f00000000c0)=0x1) pread64(0xffffffffffffffff, 0x0, 0xfffffffffffffcce, 0xffffffff7fffffff) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0xffffffffffffffff) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, 0x0) 15:08:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1661.278145][ T3598] binder: send failed reply for transaction 284 to 15117:15118 [ 1661.298831][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1661.344974][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 [ 1661.488509][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xff030000}, @quote}], 0xff33) 15:08:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:49 executing program 5: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, 0x200f, 0x0, 0x54a, 0x100000001, 0xc6, 0x1}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg(r0, &(0x7f0000000080), 0x226, 0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) 15:08:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1661.883924][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x14}}}], 0xff33) 15:08:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfe}, @quote}], 0xff33) 15:08:49 executing program 5: fsync(0xffffffffffffffff) r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) clone(0x210007d9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000140)=0xffffffffffffe621) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x80000000, 0x8000, 0x8004, 0xfff, 0x424e, 0x6, 0x8, 0x1, r1}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x1, 0x5}, 0x8) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000004000), 0xfffffffffffffffd) [ 1662.025406][T15355] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 15:08:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1662.144773][ C0] net_ratelimit: 15 callbacks suppressed [ 1662.144782][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1662.145409][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1662.150512][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1662.169420][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:08:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1662.261449][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000480)=0x8) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0xc0800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="000028bd7000ffdbdf2508000000080006e1ac00f3ff070005000800000008000500030000004800020014000100fe8000000000000000000000000000aa080002004e230000080008000900000008000500080000040800030003000000080003000100000008000800050000000c000300080005000000000008000600000001001c0002000800070007000000080004000700000008000800000000f8"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)={0x0, 0x9, 0x4, 0x10000, {r5, r6/1000+30000}, {0x4, 0xc, 0x1f, 0x3ab, 0x7ff, 0x7, "d092bfe6"}, 0x2, 0x3, @offset=0x6, 0x4}) fstatfs(r1, &(0x7f0000000300)=""/106) getpeername$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000740)={0x3, &(0x7f00000004c0)=""/57, &(0x7f00000006c0)=[{0x6, 0x83, 0x2f467ac9, &(0x7f0000000500)=""/131}, {0x1, 0x3a, 0x0, &(0x7f00000005c0)=""/58}, {0x10001, 0xbf, 0x8, &(0x7f0000000600)=""/191}]}) [ 1662.435268][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xffffff80}, @quote}], 0xff33) 15:08:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") syz_mount_image$gfs2(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000001480), 0x1000) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 15:08:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x42}}}], 0xff33) [ 1662.853017][T15587] binder: 15580 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1662.853030][T15587] binder: 15580:15587 ioctl c018620c 200001c0 returned -22 [ 1662.874801][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1662.880709][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:08:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x1a0}, @quote}], 0xff33) 15:08:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1663.025393][ T12] binder_send_failed_reply: 4 callbacks suppressed [ 1663.025404][ T12] binder: send failed reply for transaction 304 to 15580:15587 15:08:50 executing program 5: getpgid(0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101002, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x3, 0x2, 0x0, 0xad, 0xfffffffffffffff7}, 0x14) socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8947, &(0x7f0000000180)={'sit0\x00', @ifru_hwaddr=@local}) [ 1663.093231][ T12] binder_release_work: 4 callbacks suppressed [ 1663.093238][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1663.294608][ T12] binder: send failed reply for transaction 308 to 15703:15704 [ 1663.320688][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1663.504799][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.505365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.510755][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1663.516706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1663.560080][ T3598] binder: send failed reply for transaction 312 to 15768:15770 [ 1663.591379][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xffffff81}, @quote}], 0xff33) 15:08:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x1a0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:51 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x1}) ioctl(r0, 0xc1004110, &(0x7f0000000080)="6c02b78d58f871971b3f993f32c1f68332a78269dfa499f7a5913ff98f19de49a1b38e7842ad1fd0214341089addda632f") syz_init_net_socket$rose(0xb, 0x5, 0x0) 15:08:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1663.931500][ T3598] binder: send failed reply for transaction 316 to 15821:15822 [ 1663.941436][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x92}}}], 0xff33) 15:08:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x300}, @quote}], 0xff33) 15:08:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x1000000, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x13, 0x4, 0x800000000004, 0x400, 0x0, 0x1}, 0xfffffffffffffc83) socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x4a000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/138, 0x200000, 0x1800, 0xca09}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x17, 0xfffffffffffffff9, 0x3, 0x9, 0x10, r0, 0x4}, 0x2c) socket$kcm(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0x55, [], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/85}, &(0x7f0000000340)=0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 15:08:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0xa0010000, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1664.186113][ T3598] binder: send failed reply for transaction 320 to 15922:15923 [ 1664.196637][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0xfdfdffff, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1664.387788][ T12] binder: send failed reply for transaction 324 to 15943:15945 [ 1664.410348][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 1664.698398][ T3598] binder: send failed reply for transaction 328 to 16051:16052 [ 1664.725145][ T3598] binder_release_work: 6 callbacks suppressed [ 1664.725151][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1664.809795][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xffffff92}, @quote}], 0xff33) 15:08:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x400) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x33, @broadcast, 0x4e20, 0x2, 'wlc\x00', 0x8, 0xfffffffffffff001, 0x62}, {@multicast2, 0x4e23, 0x0, 0x1ff, 0x8}}, 0x44) setpriority(0x2, 0x0, 0x0) 15:08:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0xfffffdfd, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 1665.019585][ T3598] binder: send failed reply for transaction 332 to 16066:16067 [ 1665.032387][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1665.060585][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x94}}}], 0xff33) 15:08:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x500}, @quote}], 0xff33) 15:08:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x1a0ffffffff, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x400) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x33, @broadcast, 0x4e20, 0x2, 'wlc\x00', 0x8, 0xfffffffffffff001, 0x62}, {@multicast2, 0x4e23, 0x0, 0x1ff, 0x8}}, 0x44) setpriority(0x2, 0x0, 0x0) 15:08:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x100000000000000, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:53 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000100000000000000c7a1bc620000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001200140001006272696467655f736c6176650000000004000500"], 0x3c}}, 0x0) [ 1665.416105][ T12] binder: send failed reply for transaction 336 to 16176:16185 [ 1665.464787][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1665.470643][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 1665.706470][ T3598] binder: send failed reply for transaction 340 to 16191:16192 [ 1665.727725][ T3598] binder: undelivered TRANSACTION_COMPLETE [ 1665.784832][ T3598] binder: undelivered TRANSACTION_ERROR: 29189 15:08:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xffffff93}, @quote}], 0xff33) 15:08:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0xfdfdffff00000000, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:53 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x3f8d, 0x682791b4, "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", 0xcc, 0x800, 0x9c0c, 0x6, 0x6, 0x29c, 0x9a96, 0x1}, r1}}, 0x120) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) [ 1666.037833][ T3598] binder: undelivered TRANSACTION_COMPLETE 15:08:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0xbf}}}], 0xff33) 15:08:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x900}, @quote}], 0xff33) 15:08:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0xffffffffa0010000, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:08:53 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0xffffffffffff5fb6, 0x20}, &(0x7f00000001c0)=0xc) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c01"]) 15:08:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x630b, 0x1}], 0x0, 0x0, 0x0}) [ 1666.348743][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1666.503121][T16528] binder: 16520:16528 ERROR: BC_REGISTER_LOOPER called without request [ 1666.565278][T16528] binder: 16520:16528 unknown command 1 [ 1666.650672][T16528] binder: 16520:16528 ioctl c0306201 200001c0 returned -22 [ 1666.748555][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:54 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xae, 0x1, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900)="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", 0x4d2, 0xfffffffffffffffe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x12, 0x25, 0x7, 0xf, 0x8, 0x7, 0x5, 0x5}) getgroups(0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', r3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x10000) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300)=0x800, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x5, {{0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, [], 0x2b}, 0x7}}}, 0x88) sendto$inet6(r2, &(0x7f0000000140)="d700ef1fc9a147828375d1486c13584518dd6951093bfe6f13658a6fd9a86e3193fede4607680d74ee9f1d3dd452724b", 0x30, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 15:08:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xffffff94}, @quote}], 0xff33) 15:08:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x630c, 0x1}], 0x0, 0x0, 0x0}) [ 1666.903484][T16540] binder: 16537:16540 unknown command 1 [ 1666.937817][T16540] binder: 16537:16540 ioctl c0306201 200001c0 returned -22 15:08:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x300}}}], 0xff33) 15:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xa00}, @quote}], 0xff33) 15:08:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x630d, 0x1}], 0x0, 0x0, 0x0}) [ 1667.058348][ T12] binder: undelivered TRANSACTION_COMPLETE 15:08:54 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x20, 0xfcf1, 0x80000001}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x8}, 0x8) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r3, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'qu2zZ\xdeqtC\x9e\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00`\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x23, 0x0, 0x0, @tick=0x3b310000, {}, {}, @connect}], 0xffffff76) [ 1667.188991][T16658] binder: 16657:16658 unknown command 1 15:08:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1667.233249][T16658] binder: 16657:16658 ioctl c0306201 200001c0 returned -22 15:08:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046302, 0x1}], 0x0, 0x0, 0x0}) [ 1667.303700][ T22] binder: undelivered TRANSACTION_COMPLETE 15:08:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1667.448027][T16749] binder: BC_ACQUIRE_RESULT not supported [ 1667.482289][T16749] binder: 16715:16749 ioctl c0306201 200001c0 returned -22 15:08:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$cgroup_int(r1, &(0x7f0000001600)=0x6, 0x12) 15:08:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046304, 0x1}], 0x0, 0x0, 0x0}) [ 1667.664764][ C1] net_ratelimit: 16 callbacks suppressed [ 1667.664773][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1667.665225][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1667.670528][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1667.689328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1667.725454][ T22] binder: undelivered TRANSACTION_COMPLETE 15:08:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfffffffd}, @quote}], 0xff33) 15:08:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 15:08:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xb00}, @quote}], 0xff33) 15:08:55 executing program 5: r0 = socket$inet(0x2, 0x4000804, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0xda, "78a47b97e232494faa2ed16eb8ab951fd82ce40d4663c58cfcfa1da996f06ebef3792ed0fe04d0e3578d33ab90d2fb9e80126295e903405a55f785c52ab68fb809c6f72306d8e1cecac6b608b79cbe476df25c4d986b9650fbfb382ed763b1288bb08e8d447c57144457b7afb7a27bdf94a31ee66076564d0c5c51278e1045a13c0e67e0f6e0ebcb8e5b241246906169ad30437e3f12b2abcaa105d64ba358b9da525db42f555bb2eab04927d0634e48124e0ed908bd4d2e23872f9a3bcccb196f5a337e9265a96379e417d9271041a8bbd97cfd5f63077df088"}, &(0x7f0000000340)=0xe2) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={r1, 0x1, 0x401, 0x4, 0x0, 0x0, 0x6, 0x400, {r2, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="a8ccccb8a9549e92f3a1ef0c3bd59198", 0x80}}, 0x1000, 0x0, 0x100, 0xfff, 0x7fffffff}}, &(0x7f0000000580)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x98}, &(0x7f0000000240)=0x8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000005c0)={0x7, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000700)={r5, 0x2, &(0x7f0000000600)=[0x6, 0x6], &(0x7f0000000640)=[0x20, 0x9], 0x22, 0x7, 0xd46d, &(0x7f0000000680)=[0xf33, 0x8b44, 0x7ff, 0x10, 0xfff, 0x7, 0x6], &(0x7f00000006c0)=[0x6]}) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r3, 0x3f, 0x2, 0x3}, 0xffffffffffffffb1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)='@', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000740)={r3, @in6={{0xa, 0x4e22, 0x80000001, @remote, 0x3}}, 0x2, 0x6, 0xfffffffffffffffc, 0x47a90316, 0x3f}, &(0x7f0000000800)=0x98) 15:08:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x500}}}], 0xff33) 15:08:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1668.079509][T16890] binder: 16889 invalid dec weak, ref 374 desc 1 s 1 w 0 15:08:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046312, 0x1}], 0x0, 0x0, 0x0}) [ 1668.248455][ T12] binder_send_failed_reply: 7 callbacks suppressed [ 1668.248466][ T12] binder: send failed reply for transaction 372 to 16889:16890 [ 1668.273485][ T12] binder_release_work: 7 callbacks suppressed [ 1668.273493][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x204600, 0x0) recvfrom$rose(r1, &(0x7f0000000240)=""/49, 0x31, 0x0, &(0x7f0000000580)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/228, 0xe4}, {&(0x7f0000000300)=""/237, 0xed}], 0x2}, 0x0) 15:08:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1668.384938][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.390753][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1668.401916][T17004] binder: 17003:17004 unknown command 1074029330 [ 1668.402142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.415009][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1668.483893][T17004] binder: 17003:17004 ioctl c0306201 200001c0 returned -22 15:08:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40086303, 0x1}], 0x0, 0x0, 0x0}) 15:08:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1668.615637][ T12] binder: release 17003:17004 transaction 376 out, still active [ 1668.639022][ T12] binder: unexpected work type, 4, not freed [ 1668.674554][ T12] binder: send failed reply for transaction 376, target dead [ 1668.714888][T17064] binder: 17042:17064 BC_FREE_BUFFER u0000000000000001 no match [ 1668.900030][ T12] binder: send failed reply for transaction 380 to 17042:17064 [ 1668.919716][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, [0x3]}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000080)={0x4, 0x5, [{0x8, 0x0, 0x101}, {0x10001, 0x0, 0x1}, {0x9, 0x0, 0x6}, {0x6, 0x0, 0x10001}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x4008630a, 0x1}], 0x0, 0x0, 0x0}) 15:08:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfffffffe}, @quote}], 0xff33) 15:08:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xc00}, @quote}], 0xff33) 15:08:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x1400}}}], 0xff33) [ 1669.106323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.112801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1669.113369][T17137] binder: BC_ATTEMPT_ACQUIRE not supported [ 1669.142427][T17137] binder: 17133:17137 ioctl c0306201 200001c0 returned -22 15:08:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40086310, 0x1}], 0x0, 0x0, 0x0}) [ 1669.303386][ T12] binder: send failed reply for transaction 384 to 17133:17137 [ 1669.324919][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1669.432053][T17247] binder: 17246:17247 BC_DEAD_BINDER_DONE 0000000000000001 not found 15:08:57 executing program 5: r0 = socket$inet(0x2, 0x4, 0x800000800000001) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x2c) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5317, 0xc040) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 15:08:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) [ 1669.602921][ T12] binder: send failed reply for transaction 388 to 17246:17247 [ 1669.637458][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 15:08:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x40) 15:08:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1669.881147][ T12] binder: send failed reply for transaction 392 to 17307:17328 [ 1669.902353][ T12] binder_release_work: 6 callbacks suppressed [ 1669.902359][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1669.964521][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 1670.032190][T17369] binder: 17365:17369 BC_CLEAR_DEATH_NOTIFICATION death notification not active 15:08:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x10000000000}, @quote}], 0xff33) 15:08:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x1400}, @quote}], 0xff33) 15:08:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x1f00}}}], 0xff33) 15:08:58 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000040)) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @ib={0x1b, 0x80000001, 0x5c313e83, {"6f0a7e929d4acfdb2dd77d7805cc9568"}, 0x1, 0x5, 0x99}}}, 0x90) 15:08:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1670.214248][ T22] binder: send failed reply for transaction 396 to 17365:17369 [ 1670.232324][ T22] binder: undelivered TRANSACTION_COMPLETE 15:08:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1670.328532][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1670.365795][T17388] binder: 17383:17388 BC_INCREFS_DONE u0000000000000001 no match 15:08:58 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x1, @broadcast, 'h\x00\x00\x00\x00\x1f\x00\x00Q\x00'}}, 0x17) sendmmsg(r1, &(0x7f0000006a00)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x0, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000180)="d21b06b5c2a510d511cd12f38ce4c06b174e9ae699e5157157502010dd12bc8b65d584df2b60790c715b718b31a22843069e6e02fc729d066a9ece04d179edc3698ab7510109bf966021b6c264811a44ee292c6a7e500727c99fc4", 0x5b}, {&(0x7f0000000280)="412a40881fcfa8eb9d911cb4fad99b9dceb01acaf8f70916735ea7935a55161ce07bdb47ce2af868c800dffbf81c79e023bc9eeac94a4974a55accd65de62e0188cab086aa17550518b931f8b92f6872228996494d26edfa4712aec630e26219853c34a0916c59b26060049dc71d6f4480c9e34b3654a9ced7f249291bb91b3b1f9bd2e365431f6f7878c56744e801085d4df0f6b47f72e7cc7b58903eb169ffbcaa422b96974975db8f2158dfb308d228c7", 0xb2}, {&(0x7f0000000340)="0856ccc644f2a83b1b3b7d32cf34baa5f61d7d07c5160152c1e6126ee0ba58b1365ceff76d4a3253c45643a882473fb8d577cb8cba4d3ed17deb0663394169480345f706b5cee2b05efc8c6e869378beaa2b53c512ebf876b52a336f9867807e111675bc8cb08bbf796b38e79d8c48a176700ee209c7d13c59625ebb676bb623423405b04695ef2be8c97ebe7b97538756b9ca3b9e69c01f781eb0557949709a67adf001ce4113f754699752d64136644c7a6bdc9f736646715a95c56d547df7edb2dfff83e23afd10b2155498ae88bd9ed5e807c7b5123c8817c8498d5082d320909806d9e0", 0xe6}, {&(0x7f0000000200)="f06498cda99801af7d29bca34ab067087c2bfff68c41bbc2857abefc4a22baa3f48c3c78f72b8189815f9dc2e9", 0x2d}, {&(0x7f0000000500)="221ba67182678d4fd19a17e4cb5a4b1170cb41487451e5bcebea9511c44873b7ad42c38c48b720aab7c64e18a85a9e6e6ece613554471e0ba856cc1882e0d53c43bdf885d52e5f578f40c51c630b0854c7e7bfd56eeb5faa728f812de72217f01b947cee3bfa4b9ee80d144ca795d50ed3502224f12208254cf39b10684cb28f69e4c3aca4c4bd", 0x87}, {&(0x7f00000005c0)="f2043d2dcabc2b5fdb9601693f42524b811d833ced92f137476da13a2e6d62eeca8333cdbb5c8e3a10a0b523a8ef557ae0de7fdb5677f1d6d2f38377d307137b43d49e13f86a8aa093f914fa9a2925a95237d2999c55a013ed2f16f6beeeaac43c6a697a93ca22016733961ead1575e5dac39a12402ae7755620c32d802b575951e6eb05f21fc241b77955e8abadbf4913dc4c0f434d1acd18313f28d057a4b766eea203f9dcb66aec05b7de4f6a1f93566f70880da64097951b133a4f75d86e9a", 0xc1}, {&(0x7f00000006c0)="fc11ba758d2c407a257cd59706dc1db5cdef6636c7792d1f21bb996afccb5f3ae66e34c316c32df4d0c36a75c8628b7913c114378a638e3a254e1c52a869f318aaaf1cd86b5725636ee9596cd4ddfdb4e3f5ef9af84216807a56b70fd732a942b559cbd9d5d4b643b09e7b45f791546f271ebb49a27b57d965dcf405c176ceaac420f6af5169460ace8cd14f1aac95bd8b161be019dc69ae6247192678944bc9ed06edf2ea2f667a43395a8664afd1b0eced5fe76fbbb18d0b60f47469"}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000006b00)="b6d31e10361b5e3bb36a14c5a00cac7cd88f1d4a218b068ec22c16db30473dfcab209e6a92cc160ed0fbed1785ef2f87bcdcf06c99a0903027abe06baa92268d0f8a754fbf2bb041f2220468623a91d9bed684514b27093db33c5735a84577d0f6144deecd8772e831494df4e1623dd01b7d8aedc22121d19e10ac31202793106079d531a3f2f5457c15de25be73b839cf0562fa69981395798fd6ca4e2553233015c110024f649d198389a461b7d09e0a7fafe1c5fce76190d40d35fd6a6d0f3a264cb9a36f60bb30ef4f7e2d5a3d434f489c797c8621129f074c", 0xdb}, {&(0x7f0000001880)="034741ad7cf73593abe3c4324099c1fc4db63dbc16fba857c8078871ff0faee7f4e464ad01fa1da134182ec767c6709a51cffb92a6082223785bb3c8e89e3f2add9ac6648ce70d0f76978a0d82b54e5eaf99ea231a9e7310179ba807ef7befd49ed2e476383d5312bf9d66d97060225ed6bd76502f74eda89d86ce7fb66547f95247e5f43de6bc", 0x87}], 0xa, &(0x7f0000001a00)=[{0xd8, 0x0, 0x1, "f237a644fb19ad8e54a27129566456b4aeb8420844ddc4dbbf8d1ac9b14356332c88badc06f6ddc1e6f2457e975e88cfa262d0e8a875d4b4b10f3380bd1cb8aa250373102523de4039b241ecd313a452ad35ca321312d51aa7d26f7db0abb7470334272b7aa53f25f3f4b651384853b480c342ab0f6d814fc2ec1cb32b08f3cc22795cdf2835013ec45e84042b6e5bf0a1daf07eadf325928a6e4026deef79fa98d0b5b26a6ca28e4d73123d743b42a33f4c9aac30915e03480975271c377fccc8100f9502d4be"}, {0xd8, 0x118, 0x0, "ddd438c8253ef43d76ba92c5a5888febff31cd44aee7e8e255b5bb2a173a8c919560658f4ce451f1e3455672f4752bd6033e5f72c3ff00b44749b06d62eeb0f3655dc9725b0ae9a97b6c286059de2032a51b51e399740470bc2a38acef3f52e0a97c47e58d48e800c54f558010711c5e53f3aef7f2e529100ce6b779f78d12cdf813d1fa830e54288d2d94a32aa42e21dc9af8eb53e4b1e5c6d9f29611c00c311d34d81921c022550318b22a0a721858167b2ddabfa5e710268d3b41074f39098d337bab"}, {0xe8, 0x0, 0x5, "c978daa0829fec650e83faa0c06bab94ee2a9f4651732512269c91ddcca16c7bb78a8b40b9c921cd42316650c99cfd2a63782c49bf45a341e698f13b016b50e0560092dad87d8f902cc6663c856979ba8aed3dedf94e6f79c615b0491c26557ce6361f379d838808a89719d98185804f8e3b9062ea4b6ee85a8a0d37fd980f1cfbd9d40d04d1da89f6b2f199f65cfcfe2cc3966be26f64a236dadee11c4d9683adb6a20f1d6aef83131668b62b964fd35756109c3ab01e3579179790320baa7eca5505049e58cc14319da9cafe57ea088059ddda1f"}], 0x298}, 0xd2}, {{&(0x7f0000000440)=@ethernet={0x0, @dev={[], 0x12}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="bbbbe764d64f9359991f5a0df95ebff95e0c0043a1ce220688370955934f791b250f6ab5b3ff3b282bcc0f3e1b574c352dd46d7ceeca524b9085941ddab5cf6b0b", 0x41}, {&(0x7f0000001d40)="d88e4e92f3526d7dc8051e309ba5a69e6ed942245d4fc00697be3b46a26ccb572a83b6bf51d47dac47693484850ea2abb8db1b5563235c5a9a90be89766bd249b41966abdf224fa8a1b8ce5b04a1727f4e42a655f2b88b9038d2f2bfb6a946ccf6187e34", 0x64}, {&(0x7f0000001dc0)="bc01858e18c3c839271d4b8b1930939c4764d10f3e4b0375adb7d3d405faad0c9d8bc5fe2d594efbac731e", 0x2b}], 0x3, &(0x7f0000006c00)=ANY=[@ANYBLOB="10100000000000001301000004000000b3d6feda1816f35fb1c928b3fef92b023cb0cd897d9bab8d91e22c489eb501bd9d26f8ff48579dc9a7bba4f295af69de56bb78a3657fd7d30587718cf171ddfbc7b0234a94b6cbad7f387e9bf8c007550998b120ef05bea64fdc637d5361ad869eafeda74ea838be284ccd2782867c5d237d765fb9818dae84173f27bdce2152e23429c7edc60ffcdb603715e6250bb8bc3807b05f123f29413693d4cad681c7bede78ac332fc4c8d6521b4aca2f34f317f64acdfca9bf4cd30430fba5c3e716c134db9890f323dc718ed3849a8f26d65d23dfe471ae15a5778b72cc05bc16a8a1e4613b634dbaf1c34a072f75e987fdb65f6beede7b328ded1a018e8f439a6995cea843655c7950bc6a7104cbbf34a89aa989ef740f72f05edd8cbf1fe16890a5738bab6a99e842103e98cf58bc20f141b13d61b574eeed9cfe12b48ecf5f8813d0d31034988b8152cfdc769090c9aa10f94dcd15930db6b500915c751764441e22592194d0a86280b8d19d372b728b969d32f6ef98408246bb8e89e26aeb53acb6d70f7e148e870d44109d34be12c321043ab1fff61ca34c557c5c2550dabeb8f860337d6f505b808d6cc1a93753709210290832c74d9f7da5be26994c930d8266893e1f69268852f135cba04c6155ef035938e850faba9aacd475f066e6515913e231b8ef5a5d0fac0ff8daa868cf84bc39c45fbfa7548282d47d9a47333b171d0b4b112e24d345bc76052f01c3e8ac3c239afbf1ecb123ae2a28ae128b2ac118deb19c9fcc7476ecf55087590986dc308cbb3f06e14c13207de4d3cd69d7c516b6370ec2127ab29a2b6b02897cd3a649fe32f17537fa1a818d97d95fa07d810ed366e308f2bf7fddb49055a11aa0f4ecabd6bd405d3a44ad006f5338e910b28f9c7a4e8d61e73eeaad23384c48410f255a3c8f56e7930e7ed0020f12bad973454fcf68caa39cdbcaf0741d2da5e356691950383b16a038e40bbf2356bef12080b878b16a8575eb4bcd41ac15a9b78bf8c543bfad18aa9f9119f39ac29e438918cb46fff84dd51bd1c2bb9afc1ea38961c44243f8189b93a380dacf5c6f27aefd696cf424877ea69dcc9eadcf3a4a3161ea07f4d07af7d876b71cc81618841d87d4b48e1fcd5e3ff633c4b8d5e9e94da0fc4f5fb1454400e9b9fb0c9e02aa6a3d6cef08f9f8a4971b4ff2cd5acb2037300495b3414fff94b429bbaf9df211a14e8c648e6ac5f4648c8559570d073b260afe477656f9519c0c9dd372bd31bf147f98156fa5836e79dd7c592b732a2ac1f0f051ee3c7afde5509e3bf398d45b12e2368ed41ad73a63eaf46193d8bccbd2c11264627680599c6d26658b8171c405af8bad20e09d9658098142ea95e2558e5276a710f1eccb307ad4b0ab9769566e620744574e3425efb02e4eb1ac86c048c4caca3c1b9b992b972ee80b74bbd69bea9441b193549929ff642a1122cd0237d8059b3342c3052365c365ea41ddbdb0bba009711a58cde90d4158682a6c078876c0bc0588d9670a146b242a9f2643fc30d1b53fba0f54f010e193a3756e8667a402ccafb04e7a266b98ea390095e23d427b15c3d71595bc0bb959bd73859f4dc5e987557b1be8a38eb4346be338c95305bb9ae743ca6f3d925c242c7b430df0a03bd71c51f2968ef6c14f26954bef417828ff1301b62d9811bca1c46f6b7aa4111427030c15f2bbf182cec033553ddaa627f66d5535003750fd7b06a52266b0b18648ee7d1ae2445878d47bd3a595e42bcdc43572d82ab5de9e0dfcf3d9787cc89e979a3fe242a4bfb33d606c86f90597933395e0b777641b0b4c16b1581240b43acd7cc8338c7d34bf8780d014ed82f051b705b9b7af50f0a6707b94f868b576fe60b789c5f85e0300db1a076df52054bcbfb4525ef539cdcf05214942afa4c07215ae5756a3f771eab0f0139c1c83d011f7f0362ef517f30946ba744bc64327496fe63ecfed0b7327826fd5f8a226227977a622d95bded6536c0955cc866950551b4c2d87ca58f78e69c32e26ae4b5c9043d114f589b2dee88fa9f1b5821f450ddb4163014be1c1cc6b3eb7810dc93175a392c800797e414ad9dcc86f7c47d8ee9e4c66a6d20dd4246f39376536e648c6f6ee71ec93bfc0b1a448a5fe6785d57cbb01af6fbe7b541992a5d04feb5ab25773b27179452d992146161d3759bb17fbf5a9163a54e48a8197cd88765ec2cb625aad1a5f8b96ff77a91d6325a340f99862a9f284e82925a15108e4ea67cabdba55aeebafb4a98d51b288a1c7b6b9eb1ff9db50ec898c68b5db7adc20de9a380224a802f180a35c9cfcd2bd16d4f4896b4539b43c525ada58f4879731fc82e430ba8a3f0bb8fb4dcc90acdbdd8118e7de7eff808ae46f4afa7d0b2f98c8b63b0694d65c8178db398b31de31b58d524e293ff4208e1cf54bc822903fd3f2c49b5bd0b356f8bd569b1a89dfc456cfd2b2b8ca1faeb1a4073376b6bd1491c2820373d6e116d5e4646af850ea7c4555d72120e247e1087a8a8110d83993953fdfaed590bdb7dd08cf37f6de01104bf4fc6fda5a7fc7643537af67e27a6c5a1100e30d684bde1771a4e106873defee260f481450d8c8fca3e40fd4f37dc3f80ace0dbdcdd4811d3ac6c8329d44e15c672f69545494912d53745ccbb11f0f9acc4d4c1eb5da93c750a498b4cb8dd3ef6093d4067fecdc8f6fb562e41ccce7ab99c4454070fef1638d43004bd48980ffe7728144e84450376abbfc29e7971ad1fdd5d5a693d15e75c4b13f501cc74edf3c892950b4ec2dff79eac5e97b447a4d385d644619762315a610fe918297db0617190e0b410f824304317d1d8a5ed7677df14c2a5eecf909907a5aa07f0b899afb13d71fc00369e12ddbf2d3bb7f112b91b16765f2f63c6aba587211bacaee15b585ed8916f4be03beca9ba33596831e142572126c238040e277818943aae9e9a2eaee8159cff1b02445c85140bfa326d46fd63e02c1c45cbc6496b31c987b2a7ee04ac9be7d4440988fe05ad76d93cdb61987dc06c60ed75bec96a3e2ce576856e44842c7cbb22bf52fb3994b67266e2c0c0180f28aeb925ca8e96382d98db3e45153b874e7caa52cd6f3d3f35bcccdbc00d7f870d08be8f5cf82e3bde7022c671bcaf8e72c79758c4df9b7ddada2d686c2bc395b4e42c2c8a97fceb275708169f31819c9d888fc4ac996801a3a3e51fd0dc9663b588064cfcb29df77dd79da75d8acaea35251371a6cf51c85e1bc676624b2ed349e7edfdba75a1285595f052095a1f99ee0d950e0be3d6ced7b5959e42582faec52f0c7dd3c321ad5244815ed3846583cac6ba55ec56270a5d5158e3d193cbd05f8fdf690b885e3c93fe63d746eecb02ebb0a2cb5db86765a4c0fd085be5ce8b887ca26f4e25cce2a430e0a54781d4e29696839f2b18ea6e2858c8ee2ad6e72422942fa3f46077c96ee4c35432089c478fd58f950297c6b80bda056e581963515db1733fa806b8401477a3dc3becec0232c1dd807aaa915ab0e8c9be133a89ee847bf4e7b0b3ad5474c6205baa38fa3e5f413880239a7703240b970cc3d7c9819b04a0941320de6b884f63a7ae4a5e338392e550b639c87543b8fb92a919ffa8ee0dc7a88cf58231bffcb8251e2692d3b6dfbe226f41e7d282c695e96a32c7dffb6fae85b21cdbfb0f1acd7776f8459616a433df13c292b24659fa2b56c43cff338bf43c51ec8cb51d2b10862f9994de896aa655b82afc24e8497594f2f39dbc5e340f7b5cccf44791916ab73bb54df06cdad3c396006dd0e0cba8f9498230637cb5357ba4c817f5707ca55df226c1198179918394208ccd95253e2e960b805eff6dda3c20fa7c0ab194c81b0bdef2a02ccf49e1001477a5b5c3410e0a58c25297911661acf76befc58e9b2cb6387abd19a73b57d2fa5863d6dbb8f11bb23812dd0866f30ec9d2a4abff39dc21ff6f07fe45676e0340601ec997c02e92c6c05b3c32223258e475a6f5668f7d4f58a8727075668c8818636d0bed552450d1bc47c7d30c48ba5c3d1f398add252afbcf55588b245b1f1a2e8f9ef43aae540d6c0b2e1cf13081b1ba0099e3f147b611be722446fdaafba3a4ead0e3a172d15e7ceeb6676850db695351bad89b8eef029d7bc9f3320b6f239bdc0d373fbd0f6b54132f7948a786b7bdb025622a7c7daf05fb2a371b21c1dbc26556d95086e1bdf7209960e29d1be25d20bc090c751d510e7c0fa22937e4885020dbbe9d23f0ca6a7b2cdf2e9806dcf71bd69678889fef3b68e91b20317a975584388e6cc5f3ad5cad51395b2fb85ac3b7589a2ffaf9b809c7e85c9d699ad581de8eb15d91f59550bcb971750f74bb8074866d73fc1b7ed8f31d19b29cdcea3f269fbf2492b7c9473cee755d1740256cd8333c38ff6d4b101b88f0633fe3316f511ac097a0fce47d6a69f91f378bfd85a6df02abd8e8a240ef9e037db76a5a370dc99576aa61b5ca9c8febff7a907dd554d79918bfa9642223ce7499c7a2b33be61850c205b1a6e298db6878e4283b2e9ae6daaea6b555016ac763485c7a297a040a1f9d7140baae39872e636d0e5e90ef90675f8020868c708b3fc6aac81817356a319dff78ab1d6ca01f2d85f4e8dff1b24665d8e94ecad755f092b49864bde7e78f9fb21ac042b82e2e96d4f9928cd5f0eddc5eecc4b6ee26e2ccef40351858ec86b8b5f68a16f925c288ce5416e0337346cc6970e8358d8c03528523ec614647c77b8e54edd16084337b6f9438ca04a52aebdadb227650d419dd3011988943a3ec3d54b1956dfd23fff371f9b5e60b5044acc9a06bfc7bafd1671277ec0c4f4e9f214eafa90d7d11c035c69beff12c745902b5f30a284b11e6787792f3eae1423cbd699165bbea06cabd5423dfc26570f575ecf1810c4b140fc3880e46bacd9f117902b411502f87b893da0e243a03e80b675392ff3cd28074c95f10a33961d331ea20de9d6542e7f39092042b69d21df5b07d020616d75fd21a8cb980b4ed38f1f375343d61ea509ea8297c5624d35a020c1d5110cb7cff394058b0cbf7e3af5164ce0cd3e5504f098fd8d1ad55c451e90bc61704f626ab5efa7d46b437bbf2007acd23db63625caa9b69621af837ecb0500b6d9046ba8bb464f5f6e9cd029311e0df8837dfc79a2f49858ad54fd1ddd3e7371cbb5d5659c1599e477b8464ccbde6925ef128b5ed24d0dbde085092bcc29b3cbd78ac2a86d46d12a0cb0680eb98fbba8f4a3716b07f0db8ad0fdc1e2d7b2c1ab4b17134da69fa90858320dd36089672d17efb664423374f8593ed89c03afa51b4f500fe22f5600e24452203996ea5d9095d9bccbe8fef69dcf608110aebf18394f0b133b771bb335530018222effb7223f49ef24fc8c632b7e82babb7d7a8a8ca35a8394da8fb1252e66a2ef2e7835cd80f5a42ab62a64eb741ab884afee185549954709015a457e0e8e2bff5ffe874712461a635c8e4ff5626b5f9f267e9541beeb2b952ef6f33de1002efc77c626acbb05864e912996e8873bfcde07f60dda44f15f6ba571e89ca933e2c688699ddc123b48318d28fbda527bf07bb8917578a947ea4c94fba04c83f5ea86a3840e01a9ee9305df233f15b7adfbbbbc773c6ed059b1b308daf1f4136437ffa6adfedb012ae9534dddbf4467b9e8121d2d236eecdea9b37ab45bf2b81d33c28f1799a0ab27222be68bc0bee1561a65cac24a8e33198ada326f7825db7e74a4db85592e940eab7fe64c5df0317a57287a8ccecf3203fb2f20357b6d7c91eff10fd9b03eabd4468e07fd19f0f400000000000000000000"], 0x1010}, 0x4}, {{&(0x7f0000002e80)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f00)="9468cea423a6a4b164c04d1eab764b1b6f1f0b37eba352fb012c9dc4c6420b7a8735abaf0b5b66cfa8a980bb1785045a", 0x30}, {&(0x7f0000002f40)="3eeebf5dd2d818dd90357fb18db99f2f35ce1c399c38b973d479e297b4a2a70675f2f454d7da1999f64f03a3fe03720678015645ca0e2c75a5fe2135fd671dcd3a11826463b22edf6cb4f54a91c1fc0773b58ba33be70615964e4c2f82adb287d62cdaca6fbfebccd254a7a1329f491181153e191eca91d78f8568e6c136fdae05b3f087521380783d7c0188723c78c149ffec42e3712b6dcf8f71b8b6cc6f4a65d3f4856a3e32a48592cb0dfa48229c", 0xb0}, {&(0x7f0000003000)="9d30a445a85b511e9055b5233f4db8b1e2bae6bee9673e62942d66876fc65f5b7828f41db18981561ef974e688083a0e0334473e7c1906aa6de9ebcfa01ce6abbb8c4b0d3fd93ce2f640cd884ecede0b12890ef298a4b8", 0x57}, {&(0x7f0000003080)="d86abb6cbc6949ea76339b716ac431d6bb1f421e644651061d2d5d9d8aa4478329bd5f8a25e00da9217061a3f7a94922", 0x30}], 0x4, &(0x7f0000003100)=[{0xe8, 0x102, 0x8, "028d702b5fd27d6d608f18a6229d59749baae98772c12a03ea7bb250f7ed8c632777e2170ae9ae66dd23e7a5b3b04a3878c5903edcd22bd70a7edcf63105da091dad64c014b2ed29bd4466fffb5a6ac4d277a1d4f6316248ed84fa448c5fbe72afb3b1cd6e7a6b06214a31f43a98e3588e6cbc020dac5a9c07f9557931cf2ffba82fded4bd6f0b526ae5d550a7c5689de2f3be86e684ba325576f419d41b3fdd6f0d16dddbcb00edd2fc58916861c9574c762292c5694345f86b04ea2059b8bebf883fe77248e076486ad9e2bc12edc8c4eeb131c702c567"}, {0x108, 0x103, 0x3f, "c53e89c465c508f8b6c76a4c0914d6bfb6a235f54b2d78dc0fd5bf3527e60224d158b841a9623ed086365e105d5e06e7582c10106b2cbe61f0be002e8ff44d38a326a2f7f8202418ea0a6ac10646bf2c85be105fa05b31fac2be4da7993b1bc393b0e34a2d2d5049ea22a6abd82a53abccdee1edffac22a8182ddbc71fba1c0963d0fea417d391bfe24ba2f50dbfde355f80f55098e0ebb9f0df076a37ff309f5b4b1f2d70da21181f0a095eb4648ff115d26b74bf43f238e8d01f02e49f6b65fafea8ceb91e985a664541ebcf4f27c3e34d2630d4e2586797c30de75b2259716bb561ca8f9c959ba82fc8b50add50def50ab19599"}, {0xe0, 0x107, 0x1000, "24c2b8f203333ea507f1af7b69acc792fe73c83d40f5448452b481bfab854251dbf6e904271c14987109dc43f259a6871fb474c7de78cf02c9024737bfc2e87cccd476a9d824597298532623f3c268c05b3f722a351867084caa8d4255421e9b858068db1b331ff09e43853dd0254de9222e0bdd273f687fae669a7e0b9e5b4f4e8ec4c8cbb6875062caa4a47b25fa018f9385e1b7cfd7051d84a1f640482e5c2dbbc8916ca1293fe3fd906e7c2d77f637eeb6174925e5127c62c85005c7c0953203a9f134423be4d4"}], 0x2d0}, 0xdfbb}, {{&(0x7f0000003400)=@l2={0x1f, 0x8, {0xfff, 0x0, 0x0, 0x10000, 0x1, 0x3ff}, 0x3, 0x81}, 0x80, &(0x7f0000005900)=[{&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="7f6a317bd66acdf82f11037a077d0b4a1ecada38a0832b90af84e824d1c4557d866d980af0141504f1f5c97c0eed90cb5864c3c21d17d0b99a95", 0x3a}, {&(0x7f00000044c0)="e8c1a90f24abaabd96b94a7231a6efa3b3ee63c0baf19d6ecea445380faeda", 0x1f}, {&(0x7f0000004500)="90c78eb7de34629d560cfa9c4f422c5534486aa3ded14b33395047c0b6468371f6dbbbacfe2baaf9ef4ae866fa18a9632dd0a820a9e0822d9284af95facccf819b529244d84770ee", 0x48}, {&(0x7f0000004580)="492c974a924d4a0f8e08b08a44b40658d2feee1586f5a43f1d801c3dda10beaa74acf862ea014b5fdbeacf40603db73eea08b0da2e9ff18f32df5a374413d0f01ef5e020443a81bb65fbeade7792c36d7695ef2ffccc232457f0f3dfcaaf7864599706c3e00945d1724eeff19c128084d953d6621cba4962392146d278d67fab7ff882d784537284a6bcf282c780fe51ee1a512111e7cf67f84aaf2f8f99bea422808f4ea683f63c1da74f760b9327fa9ebd745824e3a8f6202cecd16e5f4686823377bce92fa2f5", 0xc8}, {&(0x7f0000004680)="253f5cac7f0c3379bd7df75f343195fa2e2692999e4a121431a7af210bbaaa18ff797f4d7de9216d0125507ae0731914092b0d3d98f0cd853b8cb18179ab660124965702d4ed48658e6fcf0feda6d197187e175da9650ad048c26fa40af7be1ff63e60ef3e298a32f0677e207e90c8e3476d3270cc7ed9230f699654f64e1a7da40caca3ee", 0x85}, {&(0x7f0000004740)="70203d788d45cd542a4200e4e46a870184741ed5381e8b4b3a163f28bc912aa9e24c3239f24da3ab426820ed016658ff8d9f0d9f451c7fc5057b217acba124fc391707223ba937", 0x47}, {&(0x7f00000047c0)="bafca799934a80b0e3aa9b6d76840508564343e3c3e2518826ed28b7f3121c6e3ba52b75a63b7fa342ad832ec1b017621de42faa54f8cc3a6f9c3a00f11d9a2a305175fc1b200989d55c23f64eaccbe8c02815ac69fbd6dab7d3ccb67741d14aebb0f36d8cd55c65e60a6c7ee1e7b84f641ceb735f76cecb53403957dfc99f7ba3519f243074bac2b83ab3cb781ccb52cf5e1e5fab8e413e9d2a5108236819e5894855384134961d38274027704a10d9f2e205c64ba8a4abbc2999cf968a6c", 0xbf}, {&(0x7f0000004880)="ed1a163cdabe6a4d0695f55799de4959b7e2589c8779195df2b93bc8254bd4ea9d68898d93e3979115dc1de30c801f5fd80a17332e2d909cd22477b60a194c1198c08245407398c2883794152efb8227733c88c2474dd307028b61564eb480ba9cdae987c25bcdf76077a7e5ae2feec07e7e4b08", 0x74}, {&(0x7f0000004900)="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", 0x1000}], 0xa, &(0x7f00000059c0)=[{0x1010, 0x6, 0x61, "15735ff862790490c9945bbb5ba75876b26eb3043a1fea101d68ac6a155722802dad38daf045fd71b7baf57ceba1aabda468fa0c24f1c0a45e04eb8efb7c3dcd183e7259e03478af44268259d3669f61a9e5f1115615d276e8410a55a92608ef79eaf3c8e7f0214a30850522ab62d413e3329cd55e9840391c905413910972b8b6d320da388ee8bbccd669bad3188fb3686ee11c6e60f111d6193b8d7a021bfc47adbcbe016b65e9fa3f47085e69f4a68abac95ae2c26775f14aac5f5c89c3fbb67bfb5b1e74ea0c965b88125870633199abcb6182d358d19e0c1b2fbb50a9d7ac6be30dd59c1417c27efdd5709831190e5aedac14817543ba119070a5fb37397f5e3ccdedfb1b49cfe7b216b91bda1e00310b04a994f847a92e8bca96e7fb8e6cead268c99e30d9f371db0ff1825c75674168384b906afeeebff7746ae0dc12807b5458314530ea7545cc6f17b3a484a35d89b840fae3b5c2c75930777048af274eee48a432a0f4cb57811bf89e89036266553e3febbde341e8924b1ca5e885d675d6aa7fc3297600662a86845f0ef28fb9cf0d23796c88940aae70340cb00adfeaa254fad3bcd50b7b8b978af12310dad0bba9cc7df529b3c001ae84fb0d2ca5029d49e7b60f9d086e11deefea4dc6a8ddfdc87b2b490d53a79835a1636ec3adbfbb923e1e59ea36425a91f1904b58575733fa31d8853a9b7fe825cbeb0fb0b0a09c981c360f7b794b7003c8ea5f4db5239f34dca03a711e22cc933e7f82979e18f20ccab6179b8e0bd7942e6fd1e261db3c7da412f694b3c6adbbff897ec40bdf7495659c45eff139dba7c3556e3b3cc21f4db20a1378e23a16940d8c84baf80356eb32458aac491e82b5d8d0e7fb1edb5329678f43bd5c77c297731a1eb6b09a4146833d5d749d36647eedc6638cedd081fb9b3f68877aebf52502c22d27310213af429b29b0af176382d7d36d5af0d1fcf869cd4aa41715d035be92e09cface98a299edc725afb8e3ad11590ff05e42d7fbe227f02c2e5d81a3e862a20499c8b7355763e616e4bc626c4e3017d7318edc2af22f2f2f0472d0d4930c8d92061315346697c1807ae288478fbf929a6b79fb7e5b83ac00c626aacd8c8ce516c9b17ebda9c7add0cda7342403a1b01b43697974e02288b5a8a93a93e4d8467d4e45e8111ab82ab812b09c1d5431a28c1ff88c8916dadfff0182aa81a2fb8eed99788f0c49cd53e2609450cfafe7ab85eb0308ff802b8c33dbd4e9189dd35e53e5f0431cc89868362f3886b319d09086f719d38cd6ee3b4b3495abce5ec9d8e3084228b340cc2adecd465b0cd9a747d184baba54aa2550ec770947dbf31f8395a9de1aa02a09c215fc9831c9d347954302500cd88e57d1090e4203ff53fadee56635ec56bf0b9ef19358e30503f65532be69d6dbafc4ec7b20922d9678ff3af7c1d4e2d7feaf053baa8f095ac6b61c6862c1bde2b15bc174417b900d429cec389d09c3e3346b20b56ed7059ab7da528ef3c77af9e8f3d4017765ddd58872655ddbfffbb793390dbef8023a2b2430309dd5823f1aeaa0f2c538fbd6680964e2522dbb91a8c02556594b7185726b0248441038ac6cad833f72042c278f4f317e4a9dde10d2b597c71b3fb36917886fb6c02e226ee72ebe2c1cfcddf3853d98959b666cae38291cdd2d840f3c6f23cc0414a52790dabd54440c18e3db69995d623fd4daa6ec9935d2990bfabe20abda1ba171fc08812f6dc71f8cbf2fa5e4f2fe46de44979015ebcc6f4073c0f0c5b687ccb5e7308796279219dc887ee6c8311d8634d1181976d8749b9283150469e6592bc9bdcc4ca548541c517bc5c7eca7531736fb6456d07981702c2429a266528d4b7a7405a50a25974e12f07bedfd59dfeb56abfcd15dcf09b8bedad12b069f4997ebb729eee7c3681130c9d7ce38b1c236b1ebb6a5b1ac216da8c14266279cff4dcc293aec2c6c261c80f53f12ff511812f68ff656335b540c1939512b31004dc2b31752f0f53d4d6fc479464eefceec0505173489a059773fcc99fa48b6e024b594f2f6c513091bdeaf2e91df6ab2ba9e8d3534d9a81136a4a168b38a5044e34e43dcd926182669ae6ef4135cf40a2e0092b418d01a98a4f757127349757478f560b1d06d7e51360004eb411eb99d9a8f0fdd9b7153c10560603894578d0f02a141ef25c33fc7c5eca5da5f0824ec7c020ae35ef756675e51b58244980e82ea556843d3f3ada1838fb230237d9c4537f38166cbc4b0a9162aa6f6f67ee3528c9d542d86ac954a4a2a4beb704a2a40970b6bce8f289eecfe13a13a239d84541925f86ecd6801722062e939ce850314d49c56900c6e574d2195f48590f6ec51df0cd97089de49085ccc71f60fd99d965d29c1afcfe52a03fc4671ffa56a7e206cc18744311e29931fb03ba30104ac98325271259bb6eb6963665034a1fce1b3f7cad63aa1e25de8833bd1c9f702bccf8e802c53af8fbedf41a861d80b9bcbaaca5d23019c478f47b4a1d44b98b0e10b10de620eeafa895c7ebb10405a65ebbeb240b79fb859c598cd1e433ba12eb4ef4fd77ce8dcbef81161d0e664fa0be3408eedfe12648d651d87ea11e527298a0cc9c89affd3e9de7a10c3027221e8332311ecdbb2ee62ec43c2f3b325dcbeaf00d9c06e6d46fd850ae6ddae61f0d930836c60c9381a3471f3094f8f66011045d76c4f205dc59de282e34d8612db35d7905f4e115b361794ef9b34866f728d50cc3d36b7d642e6ae53c11ba643221579e62d49e1eb9eb6a893142c0f48cddd1b41561eac3eeae2ca4b00c7717d0929a0abe6ff7bab11c8221186e35c8f46a14ef9c5ee5acd90d53db1f49d7522f429020a9242987e44a5cd0c4e0522a726fb6ab8b0d074578a3da00786813acf934f9006c0a4d159d4fd04a53b2deaa11fc418a55c3f75eb79616afc3d6f86f7c5f273983d92b4550ff4e461bfd0c4fac0ef15124021a216e37f260915dffd842e9d9e0202297a6b6d523a157a14af4491da86ceb220ca77234223f2a3222c487c6aceb2a21ab0933185c54af68bb70d6a15c6ac857643272f709ccf45bed1d4ff10932f2dd492f450733e6511957ea990777a0e84e0b5dc20e6c0ab19422a7cee55e0dc6992633e82d831f87e0d06168d4c5610f2981870133da3a6a6b66733e6513234674f8c7aa6eb54ebade90040030c3d74473d90871a691544a77a68ed8633f32e069f5ee3acdadd9a7d669484fc92bf603353f267646ea8c953bf04c712a51bd67a3714a575b4d1bfb7c1253bd33fe8c35832ca6d0fbf67670c8b628b9e00771070337916ced649ee380f387efa82c202186ae664e5ced3250920a8d0958b9ae06f63223f5d73c6dbaae92a963410a9aee165386465f6aeb8d08a540aaa7d99390e69c083d0e9daf110e75dcd76315a1d891e028c522997261addefb2184d55549a8488a8b5958e23ba56a3f9fd891d5cf8c7d366dd2fed4f2814089f92c49b8bfb5f92a43e0d2a839ecc68073b9d56b99dd700aa3c08e217d62c6ef7efbecfc270bbd132a48431acf6351d68432b299f8488ac5217886d373934fcdb75da9d9dc35898c69eae58b1782deadb7ad6ff3164be76a1ca5a2d9fb523aab69a7679edaa153e911e0d01bdf66208d2a52de672f52775ff873fffd286283f2e6574ebcec3d3dddc3532d1ed4a681ba92decfa3dfeca000aeb0b873e8cae322da7fd8d5445b1e82a09b2da212b2cc8cfcc00444ab0e4baad7cfe7a4c5ce5b8bee5c5166952b2be0c61699ce9e6ba2c74cec323f578835539e53be6186097df23c0eac998af3d741280368a56f6ded8b0a12e5f96753c9a6c27db9fa303b8dbd2979b8c2085733240b818446863d7599a7a18924dacc6d6b6e66200cea5ca15e4720950f9d44d6b31300152d9a38d3ad80db66b5538b3e200a24153776bc80a1c78d65b5773177cfdc556ed7fcdb7de8c53efe9217d7935b9ad5e5972f4a3aad8315bb269c4c8fdf879fb53abadbc393703f0866b86c28551cfc2b3a8745d96ee24d8624dc182a11ceadc2badbc8669423ba2e9320b535af7454b767968b356a1dc201a00dd5daeace4c9a605a421322ebf675ec1a738184d99b27c2ee130f3da74e7d6be81c58930614ebd310e81218cfece886e9c1c20cecbc8d0a8754846ca7546d39428f29a230f2f2a1e279816d9a682ece20296a259e0545c94779faf6d3c3b0ecffa987bf8dfedb7498c2e4e10e240496d85bdd7983767d115f2b8e103171351a0b76c4aa79fc15311b503988b15cc26d918d7d9bd5bc7286cb7933f5226630a05d9c05c979630640ecd0fc107a59532531e477e5a2cb3a61694d6577050ee7be581101d74c6d7e1f83f5cabe57687145040c47239015c1329d81cb429f6d3b2f72657f52ad6006eaade91c6d9194d77e7d56ed4b9a4571464e1b862de1dd83fad8ba419f8a69efceea7528ed078dc517fbf53fe780612695b284fd8cca5385408d6e5c9375a9b6f7291e90299085a5acce5f7c411706120445a4eb08601e99d4c4179f856009cb61b1191f173b76f84d25f28fd852f976db6cc5ac6bed633d63193ebc0ab0cbb7688c0406e7b6d8086bfb3b545f8f6593a132f45ec34d5f8aa9c2044c93801d451b7d01e2db0c73b08ca240ca52fe285dab3a895275875de64d6178ce95af4e51d1f4b8f43e18186f98041742d837335d468c6a9e159a331b5b7c651883772711b09eeed70d189e33b27ab58c604d6c7a587c354401defc681e89dacf6a23b5335b7b712f4c1df6129eaab0958976b2a77da72e8ae3eb074a5eaff526b9a1092d7e11cbf45b5ce07fabd26c05ec6570010f192512bbf2c2a451547bc4c78735abe16186286dbbd2ba4dacb5c3798f90e43e4d027d727716ba71c4e8613aeee9b0edccbc391eb29ea1ca99f9b713ea177151ecf6833ce93d170612f0dd4e24fd59c12d7ff89852634f57e69ac385a5d88e957b8b41be263443e07843de5a747b48b499550d2ea035e6646b940129401d27dc70017e9a2f79acf31bdbe2fb55e0da4014cbf6ecddb62c1666db9e6c9ae517a95befbfd7f1d9056f419bd6d0c712a7f619615b9c39aed9f3b759ee9c09e43860ec2d0f188e5da84f393f6ff66c52ad85b8b5be056e916a099c07769516a64c0ed4af7651b24ea6602ab07a1eec8d03845e934f053d4e2c8c4327dac974eb6a86bb8732f96a449ec7bcd4434259e38f8504d3d37a247407a86dabaf64dd487839632cc8c7cae6f23cb32c1860d9968b822759600f175e8537d8a2240b80602ffef952ea2afc46997a74db99417dc9e65bc715d39ababe55130b42e85dbf4b831c561afcc2ebe7b3dcb6433e392f5cdfb7a40bb4d243cbd1023ff494e550967f9e59746d7d3d4a0aaa7c0b2961331b7ee8f58f28aa0127c6c2e59bb445f4dccc3705c127e4501b29354512e65f28425d93ad62d766b00a34f09a95fb66465ab3eaea6824a8ebb448abf803ed7eb94f0fb562df081b8c3eea5a8ff3925e2eb9fde81f0b2b455344eedb825a9d15e3788830b7c8ed8e6a21e6ba877d88b14239c38ffeeca8d93858a9a8f15bab41e0869c096582845b879df7198d494480bec43c0bca48e5a2668c8291832d05d31a00a3e3aa9278e6bded75aced48a59f23710422a0a23d5b0661ad352cff5bd504adee41cafdae370b6be26be68ac7feb17ed8ff80e9c1d65d6f1fa98ec00a6f935b2ce4927e88b8959635509289bccdda039b1cca118e2bf8fe4d95faa12f73cf01744c4a9293200bef0494a4331"}], 0x1010}, 0x6fde}], 0x4, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xffffffffffffffe0, &(0x7f0000000080)=0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x0, @multicast2, 0x4e20, 0x4, 'lblc\x00', 0x24, 0x8, 0x32}, 0x2c) 15:08:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 15:08:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1670.588737][ T22] binder: send failed reply for transaction 400 to 17383:17388 [ 1670.625374][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1670.681002][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1670.748754][T17488] binder: 17455:17488 BC_ACQUIRE_DONE u0000000000000001 no match 15:08:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1670.933869][ T12] binder: send failed reply for transaction 404 to 17455:17488 [ 1670.959113][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1671.002671][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:08:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x4000000000000}, @quote}], 0xff33) 15:08:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40406300, 0x1}], 0x0, 0x0, 0x0}) [ 1671.224633][T17613] binder_alloc: 17612: binder_alloc_buf, no vma [ 1671.231202][T17613] binder: 17612:17613 transaction failed 29189/-3, size 0-0 line 3147 [ 1671.281674][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1671.295340][ T22] binder: send failed reply for transaction 408 to 17612:17613 15:08:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x4200}}}], 0xff33) 15:08:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:08:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x4200}, @quote}], 0xff33) 15:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:08:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40406301, 0x1}], 0x0, 0x0, 0x0}) [ 1671.322545][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1671.341790][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1671.416439][T17623] binder: 17622:17623 BC_INCREFS_DONE u0000000000000001 no match [ 1671.453962][T17627] binder: BINDER_SET_CONTEXT_MGR already set 15:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1671.501052][T17627] binder: 17624:17627 ioctl 40046207 0 returned -16 [ 1671.501534][ T22] binder: release 17622:17623 transaction 413 out, still active 15:08:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1671.583165][ T22] binder: unexpected work type, 4, not freed [ 1671.603700][T17630] binder: 17624:17630 got reply transaction with no transaction stack [ 1671.632879][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1671.673739][ T22] binder: send failed reply for transaction 413, target dead [ 1671.693753][T17630] binder: 17624:17630 transaction failed 29201/-71, size 0-0 line 2899 [ 1671.708763][T17633] binder: 17632:17633 BC_INCREFS_DONE u0000000000000001 no match [ 1671.728678][ T22] binder: send failed reply for transaction 416 to 17624:17630 15:08:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40486311, 0x1}], 0x0, 0x0, 0x0}) 15:08:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1671.794364][ T22] binder: release 17632:17633 transaction 421 out, still active [ 1671.863090][ T22] binder: unexpected work type, 4, not freed 15:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1671.919456][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1672.013749][ T22] binder: send failed reply for transaction 421, target dead [ 1672.046054][T17641] binder: 17640:17641 BC_INCREFS_DONE u0000000000000001 no match [ 1672.052862][T17644] binder: BINDER_SET_CONTEXT_MGR already set [ 1672.086194][T17644] binder: 17639:17644 ioctl 40046207 0 returned -16 [ 1672.087172][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1672.151214][T17644] binder: 17639:17644 got transaction to invalid handle [ 1672.175276][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1672.188457][T17644] binder: 17639:17644 transaction failed 29201/-22, size 0-0 line 2994 [ 1672.271204][ T12] binder: undelivered TRANSACTION_COMPLETE 15:09:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x4e230000000000}, @quote}], 0xff33) 15:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1672.358395][T17658] binder: 17655:17658 BC_INCREFS_DONE u0000000000000001 no match [ 1672.401680][ T12] binder: release 17655:17658 transaction 433 out, still active [ 1672.413854][ T12] binder: unexpected work type, 4, not freed 15:09:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x8100}}}], 0xff33) 15:09:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x8100}, @quote}], 0xff33) 15:09:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40486312, 0x1}], 0x0, 0x0, 0x0}) 15:09:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1672.442523][ T12] binder: send failed reply for transaction 433, target dead [ 1672.535401][T17668] binder: 17665:17668 got reply transaction with no transaction stack [ 1672.543619][T17668] binder: 17665:17668 transaction failed 29201/-71, size 0-0 line 2899 15:09:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1672.597060][T17671] binder: BINDER_SET_CONTEXT_MGR already set [ 1672.637183][T17671] binder: 17667:17671 ioctl 40046207 0 returned -16 15:09:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x1a0, 0x0, 0x0}) [ 1672.712179][T17671] binder: 17667:17671 transaction failed 29189/-22, size 24-8 line 2994 15:09:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1672.841668][T17676] binder: 17675:17676 ioctl c0306201 200001c0 returned -14 15:09:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x1000000, 0x0, 0x0}) 15:09:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1673.152271][T17785] binder: 17780:17785 ioctl c0306201 200001c0 returned -14 15:09:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x100000000000000}, @quote}], 0xff33) 15:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1673.264806][ C1] net_ratelimit: 17 callbacks suppressed [ 1673.264814][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1673.277388][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1673.328680][T17793] binder: 17787:17793 BC_INCREFS_DONE u0000000000000001 no match [ 1673.401975][ T12] binder: release 17787:17793 transaction 451 out, still active [ 1673.421190][ T12] binder: unexpected work type, 4, not freed 15:09:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x9200}}}], 0xff33) 15:09:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0xa0010000, 0x0, 0x0}) 15:09:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x9300}, @quote}], 0xff33) 15:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1673.480626][ T12] binder: send failed reply for transaction 451, target dead [ 1673.573330][T17802] binder: 17800:17802 ioctl c0306201 200001c0 returned -14 [ 1673.585677][T17808] binder: BINDER_SET_CONTEXT_MGR already set 15:09:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1673.642564][T17808] binder: 17807:17808 ioctl 40046207 0 returned -16 15:09:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0xfdfdffff, 0x0, 0x0}) [ 1673.804972][ T22] binder_send_failed_reply: 5 callbacks suppressed [ 1673.804984][ T22] binder: send failed reply for transaction 455 to 17800:17802 15:09:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1673.887193][ T22] binder_release_work: 10 callbacks suppressed [ 1673.887200][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1673.904767][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1673.904794][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1673.910625][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1673.977899][T17916] binder: 17915:17916 ioctl c0306201 200001c0 returned -14 15:09:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0xfffffdfd, 0x0, 0x0}) [ 1674.131122][T17922] binder: BINDER_SET_CONTEXT_MGR already set [ 1674.163989][T17922] binder: 17920:17922 ioctl 40046207 0 returned -16 [ 1674.164058][ T12] binder: send failed reply for transaction 459 to 17915:17916 15:09:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x200000000000000}, @quote}], 0xff33) 15:09:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1674.233655][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 1674.272447][T17931] binder: 17930:17931 ioctl c0306201 200001c0 returned -14 [ 1674.422905][ T22] binder: send failed reply for transaction 463 to 17930:17931 [ 1674.433093][ T22] binder: undelivered TRANSACTION_ERROR: 29189 15:09:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x9400}}}], 0xff33) 15:09:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xbf00}, @quote}], 0xff33) 15:09:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:02 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x1a0ffffffff, 0x0, 0x0}) [ 1674.625037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.625313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.631682][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.637305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.644776][T18044] binder: 18037:18044 ioctl c0306201 200001c0 returned -14 [ 1674.675715][T18045] binder: BINDER_SET_CONTEXT_MGR already set 15:09:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1674.769450][T18045] binder: 18040:18045 ioctl 40046207 0 returned -16 15:09:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x100000000000000, 0x0, 0x0}) [ 1674.884317][ T12] binder: send failed reply for transaction 467 to 18037:18044 [ 1674.907429][ T12] binder_release_work: 8 callbacks suppressed [ 1674.907435][ T12] binder: undelivered TRANSACTION_COMPLETE 15:09:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1674.992505][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:09:02 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1675.048031][T18152] binder: 18151:18152 ioctl c0306201 200001c0 returned -14 15:09:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1675.183927][T18157] binder: BINDER_SET_CONTEXT_MGR already set [ 1675.253864][ T22] binder: send failed reply for transaction 471 to 18151:18152 [ 1675.263188][T18157] binder: 18156:18157 ioctl 40046207 0 returned -16 [ 1675.284073][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1675.325995][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1675.345641][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:09:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x300000000000000}, @quote}], 0xff33) 15:09:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0xfdfdffff00000000, 0x0, 0x0}) [ 1675.461629][T18267] binder: 18262:18267 ioctl c0306201 200001c0 returned -14 [ 1675.520287][ T12] binder: send failed reply for transaction 475 to 18262:18267 [ 1675.552557][ T12] binder: undelivered TRANSACTION_COMPLETE 15:09:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0xbf00}}}], 0xff33) 15:09:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfd00}, @quote}], 0xff33) 15:09:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:03 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0xffffffffa0010000, 0x0, 0x0}) [ 1675.581899][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 1675.680083][T18284] binder: 18279:18284 BC_INCREFS_DONE u0000000000000001 no match [ 1675.693536][T18281] binder: BINDER_SET_CONTEXT_MGR already set 15:09:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1675.758910][T18281] binder: 18277:18281 ioctl 40046207 0 returned -16 [ 1675.759804][T18286] binder_alloc: 18279: binder_alloc_buf failed to map pages in userspace, no vma 15:09:03 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1675.925697][T18286] binder: 18277:18286 transaction failed 29189/-3, size 24-8 line 3147 15:09:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1675.966199][T18291] binder: 18290:18291 BC_INCREFS_DONE u0000000000000001 no match [ 1676.023222][T18281] binder: 18277:18281 Release 1 refcount change on invalid ref 1 ret -22 15:09:03 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1676.084849][T18281] binder: 18277:18281 ioctl c0306201 200001c0 returned -14 15:09:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1676.195648][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1676.277840][T18298] binder: 18297:18298 BC_INCREFS_DONE u0000000000000001 no match 15:09:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x400000000000000}, @quote}], 0xff33) 15:09:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x1a0, 0x0}) [ 1676.481688][ T12] binder: send failed reply for transaction 481 to 18301:18302 [ 1676.489882][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1676.511624][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:09:04 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x1000000, 0x0}) 15:09:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0xff00}}}], 0xff33) 15:09:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xfe00}, @quote}], 0xff33) [ 1676.618300][T18315] binder: 18312:18315 BC_INCREFS_DONE u0000000000000001 no match 15:09:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:04 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0xa0010000, 0x0}) [ 1676.794832][ T22] binder: send failed reply for transaction 485 to 18313:18317 [ 1676.815940][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1676.860285][ T22] binder: undelivered TRANSACTION_ERROR: 29189 15:09:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1676.917889][T18328] binder: 18327:18328 BC_INCREFS_DONE u0000000000000001 no match [ 1676.964179][T18330] binder: BINDER_SET_CONTEXT_MGR already set [ 1676.991649][T18330] binder: 18329:18330 ioctl 40046207 0 returned -16 15:09:04 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1677.033115][T18331] binder: 18329:18331 transaction failed 29189/-22, size 24-8 line 2994 [ 1677.078857][T18330] binder: 18329:18330 Release 1 refcount change on invalid ref 1 ret -22 [ 1677.328867][ T12] binder: undelivered TRANSACTION_ERROR: 29189 15:09:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x500000000000000}, @quote}], 0xff33) 15:09:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0xfdfdffff, 0x0}) 15:09:05 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x40000}}}], 0xff33) 15:09:05 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="000829bd7000fbdbdf250c0000000800040023bc800d5400010014000300e000000200000000000000000000000014000300fe8000000000000000000000000000260c0007002700000014000000080005000400000014000300ac14140c00000000000000000000000028000200140001007f0000010000000000000000000000000800040003000000080002004e230000080005007a1500003c000300080004000800000014000600fe8000000000000000000000000000aa14000600ff010000000000000000000000000001080007004e2100003c0003000800050000000000080008003c000000080007004e24000008000400ffff000008000500ac1e0001080008000100000008000400e40000000800050007000000089d717aebea6c19725dcea2677de94500060001060000400003001400020074756e6c30000000000000000000000008000300000000000800080004000000080007004e2200000800010001000000080001000000000040000200080008000500000008000900e05d0000080003000400000014000100e0000002000000000000000000000000080005000100000008000400ff0300008c0756e706dcf7e87cc63f03c6f5a6dcd7c52f7b874c305be8370d2c856137cabfee0c6bb93a7a6c1ff279db1812b7222ef1b80a586cddecf1c8cf5758b2c254fa519fea863cad2d0f7df82a0f43ea779b0d538692913bc05a10fd2af607f43ff18219c4dd711495a05a2fe05f58318d85cee2f041bc421271750916660ae27cd6001ad3afbe673014e4a03e76b9a7ae59985459fa2385e3fa9cd66bb65208605f9220d8ddf20d3118c92328dd85e3d4421ae3199dab35c751e1b8a357c6d98913856c9ee2212397a385ce16213ec1d79311c9d7b204dc511d99e57527e2b37168fb5bb67fdefb91dd36a1cdd46bd6e4aba22cf11dbee9bdcc996f80a6c57758ab782086c8fc22d3296846afdd1e"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0xff03}, @quote}], 0xff33) 15:09:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0xfffffdfd, 0x0}) [ 1677.578390][ T12] binder: send failed reply for transaction 491 to 18346:18352 [ 1677.591031][ T12] binder: undelivered TRANSACTION_COMPLETE 15:09:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:05 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x1a0ffffffff, 0x0}) [ 1677.819566][ T12] binder: send failed reply for transaction 495 to 18361:18364 [ 1677.849669][ T12] binder: undelivered TRANSACTION_COMPLETE 15:09:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1678.094354][ T22] binder: undelivered TRANSACTION_COMPLETE 15:09:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x800000000000000}, @quote}], 0xff33) 15:09:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x100000000000000, 0x0}) 15:09:06 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x140000}}}], 0xff33) 15:09:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x40000}, @quote}], 0xff33) 15:09:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:06 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0xfdfdffff00000000, 0x0}) [ 1678.609375][ T22] binder: undelivered TRANSACTION_COMPLETE 15:09:06 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1678.784807][ C0] net_ratelimit: 15 callbacks suppressed [ 1678.784816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.785440][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.790573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1678.809275][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:09:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0xffffffffa0010000, 0x0}) [ 1678.948729][ T12] binder_send_failed_reply: 2 callbacks suppressed [ 1678.948740][ T12] binder: send failed reply for transaction 507 to 18402:18403 [ 1678.981915][ T12] binder: undelivered TRANSACTION_COMPLETE [ 1679.062996][ T12] binder_release_work: 4 callbacks suppressed [ 1679.063004][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 1679.199994][ T22] binder: send failed reply for transaction 511 to 18411:18412 [ 1679.221590][ T22] binder: undelivered TRANSACTION_ERROR: 29189 15:09:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:07 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 15:09:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x20011, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x202000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="23000000e6000094a0257800"]) fcntl$getown(r1, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000969f1d0ae"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f00000000c0)=r5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 15:09:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000580)={0x0}) semtimedop(r0, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)={r1}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ffff03000f0001000e001000040008000c0001006e6574656d0000001c00020000000000000000002000000004000000050000000800000008000e00fbc20000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x7, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x8, 0x3, 0x180000, 0x77, 0x0, 0x3, 0x200, 0x480000000000, 0x8000, 0x7f, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x80, 0x8, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x6, 0x0, 0x30, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x2, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x9, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0xd01, 0x3, 0x0, 0x7, 0x7, 0x1, 0x0, 0x5], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x900000000000000}, @quote}], 0xff33) 15:09:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x140000}, @quote}], 0xff33) 15:09:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x234e00}}}], 0xff33) [ 1679.492186][T18429] ------------[ cut here ]------------ [ 1679.497691][T18429] kernel BUG at drivers/android/binder_alloc.c:1141! [ 1679.504879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1679.510671][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:09:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1679.616992][T18429] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1679.623100][T18429] CPU: 0 PID: 18429 Comm: syz-executor.3 Not tainted 5.1.0-rc2 #36 [ 1679.630975][T18429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.641035][T18429] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 1679.647522][T18429] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 1679.667112][T18429] RSP: 0018:ffff8880566df550 EFLAGS: 00010206 [ 1679.673158][T18429] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000c442000 [ 1679.681106][T18429] RDX: 0000000000000470 RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 1679.689056][T18429] RBP: ffff8880566df5d0 R08: ffff888051f486c0 R09: 0000000000000028 [ 1679.697014][T18429] R10: ffffed100acdbf01 R11: ffff8880566df80f R12: 0000000000000020 [ 1679.704974][T18429] R13: 0000000000000028 R14: ffff888093f7ef90 R15: 0000000000000000 [ 1679.712926][T18429] FS: 00007f84022ca700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1679.721836][T18429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1679.728398][T18429] CR2: 000000000073c000 CR3: 000000009ea82000 CR4: 00000000001406f0 [ 1679.736348][T18429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1679.744297][T18429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1679.752243][T18429] Call Trace: [ 1679.755519][T18429] ? memcpy+0x46/0x50 [ 1679.759490][T18429] binder_alloc_copy_from_buffer+0x37/0x42 [ 1679.765277][T18429] binder_get_object+0xc3/0x200 [ 1679.770109][T18429] binder_transaction+0x2b4a/0x6690 [ 1679.775310][T18429] ? binder_thread_read+0x3d50/0x3d50 [ 1679.780746][T18429] ? __might_fault+0x12b/0x1e0 [ 1679.785495][T18429] ? lock_downgrade+0x880/0x880 [ 1679.790332][T18429] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1679.796561][T18429] ? _copy_from_user+0xdd/0x150 [ 1679.801391][T18429] binder_thread_write+0x64a/0x2820 [ 1679.806576][T18429] ? binder_transaction+0x6690/0x6690 [ 1679.811924][T18429] ? __might_fault+0x12b/0x1e0 [ 1679.816676][T18429] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1679.822896][T18429] ? _copy_from_user+0xdd/0x150 [ 1679.827730][T18429] binder_ioctl+0x1033/0x183b [ 1679.832389][T18429] ? binder_thread_write+0x2820/0x2820 [ 1679.837826][T18429] ? tomoyo_path_number_perm+0x263/0x520 [ 1679.843436][T18429] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1679.849221][T18429] ? smack_log+0x415/0x540 [ 1679.853626][T18429] ? binder_thread_write+0x2820/0x2820 [ 1679.859065][T18429] do_vfs_ioctl+0xd6e/0x1390 [ 1679.863634][T18429] ? ioctl_preallocate+0x210/0x210 [ 1679.868733][T18429] ? smack_file_ioctl+0x196/0x310 [ 1679.873734][T18429] ? smack_inode_rename+0x2d0/0x2d0 [ 1679.878960][T18429] ? nsecs_to_jiffies+0x30/0x30 [ 1679.883796][T18429] ? tomoyo_file_ioctl+0x23/0x30 [ 1679.888715][T18429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1679.894933][T18429] ? security_file_ioctl+0x93/0xc0 [ 1679.900022][T18429] ksys_ioctl+0xab/0xd0 [ 1679.904157][T18429] __x64_sys_ioctl+0x73/0xb0 [ 1679.908822][T18429] do_syscall_64+0x103/0x610 [ 1679.913396][T18429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1679.919264][T18429] RIP: 0033:0x458209 [ 1679.923137][T18429] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1679.942719][T18429] RSP: 002b:00007f84022c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1679.951130][T18429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 1679.959091][T18429] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 15:09:07 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1679.967049][T18429] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1679.975016][T18429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84022ca6d4 [ 1679.982974][T18429] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 00000000ffffffff [ 1679.990937][T18429] Modules linked in: [ 1679.999375][ T3876] kobject: 'loop5' (00000000e6fb3e3b): kobject_uevent_env [ 1680.033474][ T3876] kobject: 'loop5' (00000000e6fb3e3b): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:09:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1680.144723][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.144730][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.144762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.150613][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:09:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) 15:09:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x0, 0x800}, {0x0, 0xfff, 0x800}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x4, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000006c0)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0xb28}, 0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x77, 0x0, 0x3, 0x0, 0x480000000000, 0x8000, 0x0, 0x100000000, 0x0, 0xfa1b, 0x9, 0xff, 0x7fff, 0x10001, 0x0, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6e7, 0x2, 0x0, 0xffffffffffff7fff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5b4f, 0x1f1, 0x0, 0x8, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x0, 0xffff, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x52be, 0x0, 0x80, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x4c, 0x8, 0x9, 0xcf, 0x2c4eabb6, 0x0, 0x0, 0x3, 0x5, 0x91, 0x9, 0x54f7, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0xee2b, 0x3f, 0x0, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1], {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {0x0, 0x234e00}, @quote}], 0xff33) 15:09:08 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) [ 1680.318375][ T3876] kobject: 'loop4' (0000000096be708c): kobject_uevent_env [ 1680.341779][ T3876] kobject: 'loop4' (0000000096be708c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1680.369463][ T3876] kobject: 'loop5' (00000000e6fb3e3b): kobject_uevent_env [ 1680.370073][T18553] binder: 18552:18553 BC_INCREFS_DONE u0000000000000001 no match [ 1680.379038][ T3876] kobject: 'loop5' (00000000e6fb3e3b): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:09:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = semget(0x2, 0x1, 0x5) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x0, 0xfff}, {0x0, 0x9, 0x1800}, {0x0, 0x19}], 0x3, &(0x7f00000005c0)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = open(&(0x7f0000000e80)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001000), 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000600)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x2, 0x1, 0x1278, 0xcc05}, &(0x7f0000000180)=0x98) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9300000000000000, 0x0, @tick, {}, {}, @quote={{0x0, 0x4e2300}}}], 0xff33) 15:09:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x806, 'irlan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {{{0x1f, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'yam0\x00', 'bpq0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x288) [ 1680.459089][ T3876] kobject: 'loop2' (000000002a2669c5): kobject_uevent_env [ 1680.469582][T18429] ---[ end trace df8ebe9a7f4896cf ]--- [ 1680.484145][ T3876] kobject: 'loop2' (000000002a2669c5): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1680.540505][T18429] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 1680.565320][ T3876] kobject: 'loop1' (0000000097721801): kobject_uevent_env [ 1680.585805][T18429] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 1680.599615][ T3876] kobject: 'loop1' (0000000097721801): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1680.622075][ T3876] kobject: 'loop5' (00000000e6fb3e3b): kobject_uevent_env [ 1680.633026][ T3876] kobject: 'loop5' (00000000e6fb3e3b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1680.659257][ T3876] kobject: 'loop4' (0000000096be708c): kobject_uevent_env [ 1680.666705][T18429] RSP: 0018:ffff8880566df550 EFLAGS: 00010206 [ 1680.672193][ T3876] kobject: 'loop4' (0000000096be708c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1680.691425][T18429] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000c442000 [ 1680.716002][T18429] RDX: 0000000000000470 RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 1680.724099][T18429] RBP: ffff8880566df5d0 R08: ffff888051f486c0 R09: 0000000000000028 [ 1680.733717][T18429] R10: ffffed100acdbf01 R11: ffff8880566df80f R12: 0000000000000020 [ 1680.741936][T18429] R13: 0000000000000028 R14: ffff888093f7ef90 R15: 0000000000000000 [ 1680.750107][T18429] FS: 00007f84022ca700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1680.759218][T18429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1680.765985][T18429] CR2: 00007f3d5f728000 CR3: 000000009ea82000 CR4: 00000000001406f0 [ 1680.773971][T18429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1680.782029][T18429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1680.790415][T18429] Kernel panic - not syncing: Fatal exception [ 1680.797308][T18429] Kernel Offset: disabled [ 1680.801623][T18429] Rebooting in 86400 seconds..