[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.203134] audit: type=1800 audit(1546463591.256:25): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.222219] audit: type=1800 audit(1546463591.256:26): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.241579] audit: type=1800 audit(1546463591.256:27): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. 2019/01/02 21:13:24 fuzzer started 2019/01/02 21:13:28 dialing manager at 10.128.0.26:38527 2019/01/02 21:13:28 syscalls: 1 2019/01/02 21:13:28 code coverage: enabled 2019/01/02 21:13:28 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/02 21:13:28 setuid sandbox: enabled 2019/01/02 21:13:28 namespace sandbox: enabled 2019/01/02 21:13:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/02 21:13:28 fault injection: enabled 2019/01/02 21:13:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/02 21:13:28 net packet injection: enabled 2019/01/02 21:13:28 net device setup: enabled 21:15:40 executing program 0: syzkaller login: [ 212.404912] IPVS: ftp: loaded support on port[0] = 21 [ 212.524534] chnl_net:caif_netlink_parms(): no params data found [ 212.580369] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.586933] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.594924] device bridge_slave_0 entered promiscuous mode [ 212.603272] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.609735] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.617801] device bridge_slave_1 entered promiscuous mode [ 212.645114] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.656168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.681580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.689737] team0: Port device team_slave_0 added [ 212.696493] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.704712] team0: Port device team_slave_1 added [ 212.710556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.718945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.845601] device hsr_slave_0 entered promiscuous mode [ 212.992331] device hsr_slave_1 entered promiscuous mode [ 213.252802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 213.260112] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 213.283659] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.290179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.297237] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.303767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.370823] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 213.377040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.388696] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.401005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.410555] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.418857] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.429721] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 213.445291] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 213.451397] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.464617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.472689] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.479126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.494683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.502845] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.509382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.520971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.533656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.545073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.552873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.561657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.570645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.579326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.593103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.604971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 213.616670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 213.626086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.635935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.647214] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 213.654554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.662658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.671143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.679658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.688014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.696677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.705013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.714407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.736162] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 213.756209] 8021q: adding VLAN 0 to HW filter on device batadv0 21:15:43 executing program 0: 21:15:43 executing program 0: 21:15:43 executing program 0: 21:15:43 executing program 0: 21:15:43 executing program 0: 21:15:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 21:15:43 executing program 0: socket$inet(0x2, 0x1, 0x3) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r2) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="7f454c467f000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x458) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r0, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) 21:15:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x4000) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x1000000000, 0x7e3, 0x5, 0x3, 0xa, 0x2, 0x1b, 0xc0, 0x0, 0x0, 0x6, 0x2}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 214.578405] syz-executor0 (9530) used greatest stack depth: 51488 bytes left 21:15:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x174, 0x21, 0x1, 0x70bd28, 0x25dfdbfb, {0x16}, [@typed={0x14, 0x42, @ipv6=@remote}, @typed={0x8, 0x30, @u32}, @typed={0x8, 0x10, @uid=r1}, @nested={0x134, 0x1, [@typed={0xc, 0x11, @u64=0x16b}, @typed={0x4c, 0x39, @binary="a80a35d373f748b33d3f22bb9432443a56c726fa1e9f6704912e2b7703d0391af8ff154187d31f5dc5a059cb9eeb849278ff625e54da5a3462402227a9f600029150a5c29c96"}, @typed={0xc, 0x76, @str='sit0\x00'}, @typed={0x8, 0x51, @uid=r2}, @typed={0xc, 0x38, @str='vmnet1\x00'}, @typed={0x8, 0x79, @ipv4=@loopback}, @generic="4022a2fe602edeeb84143f30de00e672d3282fe40d79514bf9f0225f07a754b4b3ca83dd5779582f0a4e5ee585e7c93b1f8a0f58b1408e8404fb06eada557611cc4da15908e1872f5cb9ac704e68c3bcf8e8b8ddd87c248c31bb718946fb8f55bbc3a32f98b262ae5d5b2eb3c27c100cb87a148e88169175381cb37f41d5e34cfbf3a030fa0290b9a252d2a0d9a7f5efc28a07d41b485bffa9d91ef4756f23ddbab14b77c5c0", @typed={0x8, 0x1a, @fd=r3}]}, @typed={0x4, 0x68}, @typed={0x4, 0x59}]}, 0x174}}, 0x80) r4 = socket$inet6(0xa, 0x3, 0x81) ioctl$sock_SIOCETHTOOL(r4, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000042f5b6030100000000eb0000000120e74d561944407d26ad7587f02d45ec1f176c040000a400000094a8dc28aa"]}) 21:15:43 executing program 0: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc00, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x0) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 21:15:43 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x8}, 0xfffffffffffffee0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000480)={0x800, 0xffffffffffffffff}) nanosleep(&(0x7f0000000240)={r2, r3+30000000}, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x80000000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="4200000071c04a47232a9753df7ec9609ca515b79048d93fe93a5cf0e0cf4e674bde317b8e4b55bbbb71df3bed1002ebf48f33377c533af63a0f23ce6fd4f400000000000000"], &(0x7f00000002c0)=0x4a) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000300)={r4, 0x1}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000003c0)={0x0, @ctrl={0x0, 0x0, @value64}}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) exit(0x7f) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x0) getsockopt$inet_int(r5, 0x10d, 0x99, &(0x7f0000000080), &(0x7f0000000040)=0x1eb) ioctl$int_in(r0, 0x5473, &(0x7f00000004c0)) sync() 21:15:44 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x204900, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x1, 0xd9}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) ioctl$KDSETLED(r0, 0x4b32, 0x40) ioctl$KDSETLED(r0, 0x4b32, 0x2) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/61, 0x114000, 0x1000, 0x80}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r0, r0}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x8, 0x200}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000200)={0x0, 0x7, 0x7f, &(0x7f00000001c0)=0x50}) getpeername$netlink(r0, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0xfff, 0x647, 0x9, 0x7, 0x80000001, 0x3}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, [], 0x25}, 0x7ff}, @in6={0xa, 0x4e22, 0x3, @remote, 0x4}, @in6={0xa, 0x4e20, 0x30b, @remote, 0x26e}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x3ff, @empty, 0xd7}, @in={0x2, 0x4e24, @multicast1}], 0x90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000500)={0x10, 0x17, 0x7, {0x7, './file0'}}, 0x10) connect$pptp(r0, &(0x7f0000000540)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) getpeername(r0, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000600)=0x80) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000640)={'raw\x00'}, &(0x7f00000006c0)=0x54) lsetxattr$security_smack_transmute(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000780)='TRUE', 0x4, 0x3) mkdirat(r0, &(0x7f00000007c0)='./file0\x00', 0x80) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000900}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0xffffffff, @bearer=@l2={'eth', 0x3a, 'vxcan1\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40004) flock(r0, 0xc) connect(r0, &(0x7f0000000900)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x80) syz_open_dev$sndmidi(&(0x7f0000000980)='/dev/snd/midiC#D#\x00', 0x6, 0x200) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000009c0)=0xfffffffffffeffff) getpeername(r0, &(0x7f0000000a00)=@rc, &(0x7f0000000a80)=0x80) unlink(&(0x7f0000000ac0)='.\x00') r2 = add_key$keyring(&(0x7f0000000b00)='keyring\x00', &(0x7f0000000b40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xfffffffffffffffa) [ 215.317576] IPVS: ftp: loaded support on port[0] = 21 [ 215.442390] chnl_net:caif_netlink_parms(): no params data found [ 215.504116] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.510653] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.518779] device bridge_slave_0 entered promiscuous mode [ 215.527388] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.534088] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.542112] device bridge_slave_1 entered promiscuous mode [ 215.573399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.584034] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.609988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.618269] team0: Port device team_slave_0 added [ 215.625461] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.633611] team0: Port device team_slave_1 added [ 215.639446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.648210] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 21:15:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffff800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf66}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdf7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x29fd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x24cb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3aa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x240448d4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000104000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100627269646765000004000200d1e0513eb8db0906c98207bc000000f8415965dba75c88395acdc5b65f00b2897a58c95758cc3f4942030c77ef208556968ca51342ab14cb8752c0803f010000004c012e70d821"], 0x34}}, 0x0) [ 215.716424] device hsr_slave_0 entered promiscuous mode [ 215.752881] device hsr_slave_1 entered promiscuous mode [ 215.793857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 215.801190] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 21:15:44 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r1}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r2, 0x90}, {r2, 0x1000}, {r0, 0x3002}], 0x3, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000280)={0x7ff}, 0x8) listen(r5, 0x0) poll(&(0x7f00000000c0)=[{r5}, {r4, 0x2}], 0x2, 0xbf3) close(r5) sendto$inet6(r3, &(0x7f0000000100), 0xd14b, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) [ 215.849377] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.855969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.863085] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.869557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.986606] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 215.993425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.008004] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.022741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.034618] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.043412] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.055929] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 216.071884] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 216.078134] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.093850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.102040] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.108489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.156328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.164583] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.171030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.180096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.188946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.197419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.205453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.215407] protocol 88fb is buggy, dev hsr_slave_0 [ 216.216719] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 216.220692] protocol 88fb is buggy, dev hsr_slave_1 [ 216.226551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.238948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.269803] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 216.301583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.342400] protocol 88fb is buggy, dev hsr_slave_0 [ 216.347863] protocol 88fb is buggy, dev hsr_slave_1 [ 216.472356] protocol 88fb is buggy, dev hsr_slave_0 [ 216.477852] protocol 88fb is buggy, dev hsr_slave_1 21:15:45 executing program 1: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r2 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x2, 0x1000}}, 0x20) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x1}, 0x5c}}, 0x18) fcntl$notify(r2, 0x402, 0x80000008) fcntl$notify(r3, 0x402, 0x1) fanotify_mark(r1, 0x50, 0x48000023, r1, &(0x7f0000000000)='./file0\x00') setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@ipx={0x4, 0x1, 0x7, "0f90d5eb2eff", 0x1f85}, {&(0x7f0000000080)=""/22, 0x16}, &(0x7f00000000c0), 0xf12bd0e9dd6a5c2f}, 0xa0) 21:15:45 executing program 1: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00', 0x14, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x9, 0x4) [ 216.592390] protocol 88fb is buggy, dev hsr_slave_0 [ 216.598096] protocol 88fb is buggy, dev hsr_slave_1 21:15:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x5}, 0x8) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, r0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f00000000c0)={0x5, [0xf8, 0x1, 0x0, 0x7, 0xac1]}) [ 216.712321] protocol 88fb is buggy, dev hsr_slave_0 [ 216.717855] protocol 88fb is buggy, dev hsr_slave_1 21:15:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c0200001900090a00000000000000007f000001000000000000000000000100fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'dummy0\x00', 0x318}) pread64(r0, &(0x7f0000000040)=""/117, 0x75, 0x0) 21:15:45 executing program 1: unshare(0x20400) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) 21:15:46 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) prctl$PR_SET_DUMPABLE(0x4, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) 21:15:46 executing program 1: unshare(0x8000400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100), 0x113) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) 21:15:46 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) prctl$PR_SET_DUMPABLE(0x4, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) 21:15:46 executing program 0: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0xc}) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000180)={0x3, {{0xa, 0x4e21, 0xfff, @ipv4={[], [], @empty}, 0x2}}}, 0x88) getsockopt$inet6_int(r1, 0x6, 0x23, &(0x7f0000000100), &(0x7f0000013000)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0\x00', 0x4200}) 21:15:46 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x43, 0x1, @scatter={0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/79, 0x4f}]}, &(0x7f0000000300)="70972f01d80a0bb0232d178ab92d62c0f6514028f728923600439d6cdab9b1989ac149e2e48b6c4ae50025c7ddf8cfb30d018b12980803a41312c9f1a88730509db8a3", &(0x7f0000000380)=""/32, 0x10001, 0x2, 0x3, &(0x7f00000003c0)}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000480)={0x6, 0x6, 0x2, 0x1, 'syz0\x00', 0x8}) sendmmsg(r0, &(0x7f0000000000), 0x40000000000011f, 0x0) 21:15:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x35b, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7fff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) r4 = fcntl$dupfd(r0, 0x0, r2) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) 21:15:46 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0xa, @sliced}) 21:15:46 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x3ffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x4007, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffffffff7ffe, r1}) 21:15:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200005) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0xf1, 0xffffffffffffff37) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x0, 0x0) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a2, 0x4}, 0x1}, 0xfffffffffffffece) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000640)) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbedb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 21:15:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000300)=""/38, 0xffffffffffffff08) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syslog(0x0, &(0x7f0000000000)=""/49, 0x31) r3 = dup(r0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000003c0)={0x1, 0x0, [{0x1000, 0x8, &(0x7f0000000340)=""/8}]}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x7fffffff, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23}, {0x2, 0x4e20, @rand_addr=0x7fffffff}, 0x144, 0x3, 0x69, 0x26, 0x0, &(0x7f0000000080)='lo\x00', 0x6, 0x48}) rt_sigpending(&(0x7f0000000040), 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) recvfrom$unix(r0, &(0x7f0000000880)=""/227, 0xe3, 0x40000102, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$binfmt_aout(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0f0100f957020000db020000d50700003702000005000000000000000000000071e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006511d88680000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000ecffffffffffffff00000000000000000000e3000000000000"], 0x121) r4 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x10000004) r5 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="2f88c04077", 0x5, 0xfffffffffffffffb) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}) flock(r2, 0x2) r6 = semget(0x1, 0x3, 0x60) semctl$SEM_INFO(r6, 0x7, 0x13, &(0x7f0000000400)=""/177) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000b00)=0x10000000000003, 0x268) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\']:vboxnet1\x00', r5) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000840)={'bond_slave_1\x00', 0x2000}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f00000002c0)=0x1e) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000380)=0x7fffffff, 0x4) sync() socketpair$unix(0x1, 0x803, 0x0, &(0x7f0000000280)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r4, &(0x7f0000000a00)="16a6d168cb94c27f7e4fb32df1d3f4749193390c4c2e8ab92d34545a4e3289ae"}, 0x10) [ 217.630111] hrtimer: interrupt took 32020 ns 21:15:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r0, r0, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x407, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x42b5}}}, 0xb8}}, 0x0) 21:15:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000300)=""/38, 0xffffffffffffff08) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syslog(0x0, &(0x7f0000000000)=""/49, 0x31) r3 = dup(r0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000003c0)={0x1, 0x0, [{0x1000, 0x8, &(0x7f0000000340)=""/8}]}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x7fffffff, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23}, {0x2, 0x4e20, @rand_addr=0x7fffffff}, 0x144, 0x3, 0x69, 0x26, 0x0, &(0x7f0000000080)='lo\x00', 0x6, 0x48}) rt_sigpending(&(0x7f0000000040), 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) recvfrom$unix(r0, &(0x7f0000000880)=""/227, 0xe3, 0x40000102, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$binfmt_aout(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0f0100f957020000db020000d50700003702000005000000000000000000000071e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006511d88680000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000ecffffffffffffff00000000000000000000e3000000000000"], 0x121) r4 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x10000004) r5 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="2f88c04077", 0x5, 0xfffffffffffffffb) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}) flock(r2, 0x2) r6 = semget(0x1, 0x3, 0x60) semctl$SEM_INFO(r6, 0x7, 0x13, &(0x7f0000000400)=""/177) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000b00)=0x10000000000003, 0x268) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\']:vboxnet1\x00', r5) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000840)={'bond_slave_1\x00', 0x2000}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f00000002c0)=0x1e) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000380)=0x7fffffff, 0x4) sync() socketpair$unix(0x1, 0x803, 0x0, &(0x7f0000000280)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r4, &(0x7f0000000a00)="16a6d168cb94c27f7e4fb32df1d3f4749193390c4c2e8ab92d34545a4e3289ae"}, 0x10) 21:15:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x500, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x0, 0x0, 0x2}, 0x20) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 21:15:47 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c140, 0x8) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000001340)=[{&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/228, 0xe4}], 0x100000000000029b, &(0x7f0000000340)=""/4096, 0xd46}, 0x40000020) r1 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000081) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'ip6tnl0\x00'}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000280)={0x1, 0x800, "8cb379e1cc7d20f29f3f0fbcf1ca4f95fd14c8c55390965e", {0xfffffffffffff801, 0x7ff}, 0x9}) 21:15:47 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000000000d05e0000000003003e00000000006f020000000000004000000000000000000000000000000000000000000038000300000000000000000000006ef4b0f868715f8f00000000ff070000000000000000000000000000000000891f6ce000000000000000"], 0x78) rt_sigreturn() sendfile(r0, r0, &(0x7f0000000080), 0x10000000000028) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x404301) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x1000) 21:15:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0xd67601614f229768) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0xda, 0x9]) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10120004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x110, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/181, 0x0, 0x100000000000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0xfffffffffffffffe) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af04, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0}) 21:15:47 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4202]}, 0x45c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="050000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004004000000", 0x38}]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5101, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 21:15:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001140)='/dev/full\x00', 0xc0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000001180)=0x1, 0x4) ptrace$setopts(0x4206, r1, 0x3, 0x28) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) socket(0xa, 0xa, 0x80000000) 21:15:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt(r0, 0xff, 0x0, &(0x7f0000000040), 0x2f1) 21:15:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001440)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) 21:15:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x8000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') ioctl$FS_IOC_GETFLAGS(r1, 0xb704, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000000200)={{0x108, 0x3, 0x3, 0x2bb, 0x233, 0x2, 0x1b9, 0x6}, "7ad76f0cc1b0b0b8fc90caaaab183ac675012e1fcce3867a5868c3a85199c819f9d8c24f0c41afaafdde376ef10f73a5459d688cca3a9f5b27dcad1fb217ed27b5a56694edf6d6e79e8d042d1fbaf90bfbb9ca1fbef9016082605eca8dc35945ce765f5f16b54cc171a870878bdb756f5178a2e25c0e9679a50a43faf3c0d65a6795c3e2ffd7b8ab0f81b9009031223f9d80542dad13067d8d0b5af96aeec27bf076ceb7c37bcb51054d22f72ac64efd5ea6592be967932ad63c6cdc4de099a4528ab4b55ddef3b06ba4e960c7288dbcfc369eca49603846897e52571e12335548f633ea9440c9369ff97e544c4f62ec50f4105bf8f3a105", [[], [], []]}, 0x418) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=ANY=[@ANYBLOB='update d5sum]\x00'], 0x1d, 0xfffffffffffffffa) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x2}) 21:15:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 21:15:48 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x200000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x6, 0x20, 0x40000000000, 0x1}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0x2) chdir(&(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xc68, 0x800) r2 = accept4(r1, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r3, 0x5a, "7bef9bdf4eda8cb9cba3d2bbbe2824e0ea6bfc59c10e6bbc1d5529b0130a5b3b5f39f159b2d46a75cc47f42d590ae43b25a64fa8678237a8588ed5a7a860105e55bea839844774b867f1ebd2438ee0e4e140766a2fcb8f80811d"}, &(0x7f0000000300)=0x62) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000380)=0x10) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000003c0)) futex(&(0x7f0000000400), 0x8b, 0x0, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)=0x1, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000004c0)={0xe, 0x8, 0x200, 0x30, 0x3, "12fd99"}, 0xf) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000500)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r5, r0, 0x0, 0x12, &(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff}, 0x30) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000005c0)={r4, 0x9}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001780)={0x3, 0x0, &(0x7f0000000600)=""/235, &(0x7f0000000700)=""/97, &(0x7f0000000780)=""/4096, 0xf000}) sendmsg$nl_generic(r0, &(0x7f0000002a80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000002a40)={&(0x7f0000001800)={0x122c, 0x3b, 0x200, 0x70bd29, 0x25dfdbfc, {0xd}, [@nested={0x1004, 0x7d, [@generic="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"]}, @nested={0xe0, 0x3f, [@generic="8fb4d1426ac469ae360626db0545035db0d6aa11a46996020be720127cf0beb553ce9e486415cec2017615c6e8adf0c492d5514890640bf977f6ef7a8f6064039798aa92a344fd1ca47a84322e5fe3b28d080f14403916b96bd8d4d65a343ac7ed684ffdc2be1a6a110c7fa953c4e98da7acd459078ab86beeb8a34752b4d8bb55d57c2f9ea00da56c714264d91c420a9d21374b1a6b7aff3e182f9d6c62328007a79ac0cf88c3473c2eb8463bb0af4103013d2d49517d95848ed2d65824e03220d1dd82c75c536cebf3f4e47f3ec38cadc78afdaa18c0a5c48d5e31"]}, @typed={0x14, 0x96, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @nested={0x8, 0x90, [@typed={0x4, 0x7f}]}, @nested={0x118, 0x22, [@typed={0xc, 0x16, @u64=0x9}, @typed={0x8, 0x19, @fd=r6}, @typed={0x100, 0x44, @binary="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"}]}]}, 0x122c}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000002ac0)={0x1, 0x6ed}, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002b00)={'batadv0\x00', 0x2400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000002b40)) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000002b80)) symlink(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)='./file0\x00') ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000002c40)) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000002cc0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x2c, r7, 0x424, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3) flock(r0, 0x2) 21:15:48 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000140), &(0x7f00000000c0)=0xfffffffffffffe5a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffeb5) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000200)={0xa0, 0x0, 0x4, {{0x1, 0x3, 0x5, 0x1cda, 0xf1, 0x6, {0x0, 0x1f, 0xf86c, 0x2, 0x3, 0x8, 0x6, 0x0, 0x101, 0x3, 0x0, r2, r3, 0x5c, 0x6}}}}, 0xa0) 21:15:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/234, 0xea}], 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8001}, 0x8) 21:15:48 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffd, 0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000001440)='mounts\x00') getsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = semget$private(0x0, 0x3, 0x43) semctl$SEM_STAT(r2, 0xfffffffffffffffd, 0x12, &(0x7f0000000180)=""/56) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x80000004}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000003040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000000)=r5) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000400)={0x4, 0xd1e, {0x52, 0x4, 0xfffffffffffffc2c, {0x5, 0xfffffffffffff801}, {0x4, 0x973}, @const={0x5, {0x100000000, 0x71f2, 0x4, 0x3}}}, {0x57, 0x3, 0x9, {0x5f, 0xbb}, {0x8001, 0xfffffffffffffff6}, @period={0x5c, 0x80000001, 0x0, 0x3, 0x2, {0x6b3, 0x9, 0x5, 0x2}, 0x5, &(0x7f00000003c0)=[0x7f, 0x7fff, 0x81, 0x2, 0x400]}}}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000300)=""/178) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x00\x00\x00\x00\x00\x01\x87\x19\x00', 0x4002}) 21:15:48 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fanotify_mark(0xffffffffffffffff, 0x10e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') getdents(r1, &(0x7f0000000240)=""/4096, 0xc24) [ 219.647578] IPVS: ftp: loaded support on port[0] = 21 21:15:48 executing program 1: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f00000002c0)=""/185, 0xffffffffffffff18, 0x800000000022, 0x0, 0x237) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x8000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 219.783620] chnl_net:caif_netlink_parms(): no params data found [ 219.859909] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.866515] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.874466] device bridge_slave_0 entered promiscuous mode [ 219.888157] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.894720] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.902739] device bridge_slave_1 entered promiscuous mode [ 219.931892] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.943591] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.982874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.991074] team0: Port device team_slave_0 added [ 220.001071] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.009318] team0: Port device team_slave_1 added [ 220.017464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.043809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 21:15:49 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000380), 0x2) [ 220.126093] device hsr_slave_0 entered promiscuous mode [ 220.162474] device hsr_slave_1 entered promiscuous mode 21:15:49 executing program 1: select(0x2ee, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) [ 220.203368] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.210815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 21:15:49 executing program 0: r0 = memfd_create(&(0x7f0000000040)='em0\xe6\xd0erpr*\xc8\xa9\xf5\xb3\x8e%\xe2\xddoc%\x00c\x0e\x04\x89\xc9\x8b\x1d\x06(\\\xc07\xe9V\xcd\xf5u\xb0M\xbf\x8f\x00\x93\x83\xc6\xfb\xcb\x84\xfbw*&$Y\x9eo\x02\xba\x89l\xcb\xb0\x03\x00\x05\xd0\\)C\xd2L\x16\xdd\xc9\xc1\x96\xe4\x90\x95\xf7\xc1\xeb^\x0ep\x90\x9ca\xe6\xff\x84d\xcd\xdd`:U\xeeG\x1f\xe6\xe1\x86\xe1\xb4\xba\x96)\xc6\xb8\xbb\xd8\r\xe2\xa9\xe9\t4\xe5\x8f\x1f\x88\x1b\x1d\xc8\xf9\x1a\xda:\xcd-\xda\x93\xe2w\x18\xe1\a\xb0\xc2\"\x8c\x1c\xfa\xc5@\xb9w:\xeey\x83\xeb!\t\x01$\xe6\x1a\x1b|\x10\xd6\xae;~AE\f0k\xcbj\xe6S\x8d\x1f^\xa3\xaeN\x80 \xe6Y\xe8\xa8\xfd\"\xb9\xcbE\x9d\b\xea\xd0\xe9r\x1cX\n\t\x889\xa7CA\x90\xd7\xbc&\xae\x00\x89\x15\xc4\x1e\xfb\x17]\xda\xef\xee%\xbb\x94\xa96$\xce\x19\xb5Hs\x1a\xc0\x8f\x13Q\xf5\xf0\x9c\x13\xac\xd2\xb8\xaf\xb0\x96Q', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') sendfile(r0, r1, &(0x7f0000000000)=0x200, 0x1080005000) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x8f, 0x69bd2e7255937260, 0x3, "c6b1c2aeba661ab8a60187772cee580a", "eacbaf175e72935316e9dc2dc589c824499b370ec476a795fd82dbbad7b389c4d4b91314006e862eef5817147aa245d09a9e5160d5e12b955bffe0a079c76d00213d690e1840713d11bc5a7d526e6154288532cf2742bc415fd9a5cb790a2a98c3f2230b20d2b9ce73cd51f0c5d9641e3704b06b73c3a676faa7"}, 0x8f, 0x2) [ 220.259122] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.265678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.272739] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.279223] bridge0: port 1(bridge_slave_0) entered forwarding state 21:15:49 executing program 1: r0 = socket(0x3, 0x3, 0x1) accept4(0xffffffffffffffff, &(0x7f0000004300)=@nfc_llcp, &(0x7f0000004380)=0x80, 0x80800) accept$packet(0xffffffffffffff9c, &(0x7f0000005b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005b80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000007cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007d00)=0x14) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000009340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009380)=0x14, 0x800) sendmmsg(r0, &(0x7f0000009740)=[{{&(0x7f00000093c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e24, 0x7, @remote, 0x8}}}, 0x80, &(0x7f0000009700)}}], 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffe75, &(0x7f00000000c0)=0x9) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x800004e20, 0x1, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2000000b, &(0x7f00008d4fe4)={0xa, 0x2000000000004e20, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup(r4, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r7}}, {@permit_directio='permit_directio'}, {@pcr={'pcr', 0x3d, 0x1c}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz_tun\x00'}}]}}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r4, r8, &(0x7f0000d83ff8), 0x8000fffffffe) 21:15:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-vsock\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x400071, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000005c00)=""/156, &(0x7f0000005b40)=""/185}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)=""/95, &(0x7f0000000500)=""/236, &(0x7f0000000400)=""/179}) r1 = dup3(r0, r0, 0x80000) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 220.504755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.516569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.523742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.550099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.558813] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.567835] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.591123] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 220.597350] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.616605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.624118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.632532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.640571] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.647065] bridge0: port 1(bridge_slave_0) entered forwarding state 21:15:49 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x0, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) uname(&(0x7f0000000240)=""/10) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000300)=""/166, &(0x7f0000000140)=0x10) [ 220.666039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.686516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.703103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.711513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.719725] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.726213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.734770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.778406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.802860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.819053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.832932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.841488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.863632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.882743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.890572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.899864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.911184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 220.922639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.930723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.943179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 220.950705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.959384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.971501] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 220.977742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.001602] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.022848] 8021q: adding VLAN 0 to HW filter on device batadv0 21:15:51 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) sendto$inet(r0, &(0x7f00000001c0)="8b00649d6508d9edf98aa0eb628ecf4238f8952fba14a81c473deb30584c2639629756df35c0c9c28c729a348c72b6c17afcc66747203ab4bf313e0b1b04adea69922166479faa10716ebef0d2074c6c6bc9", 0x52, 0x10, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000180)=0x5b) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x80800) 21:15:51 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="5ca43c151cdf6443c510fbe8e6f83d10d0fa0ceeeca17a643682a7fda27aec99e767f6f6ac95e20bd9a31d37f448085cf942a47403b395f3f928d0baebeb1e872c76e59158e9e850594315defb7669bf3e8511c5d1e1c7fd785a0d25edb5f5433473c0af0c5b6c0fc29f7dd1cb77ce477a6f7db5851a3b42204447a2ed2820fb95c133b2867356a5fe7da967991bb7392b568ef59c24a156b8aac038c06e61a39dc8d8a603cb82df33b9dc6823ad169a2ea257b31d31b1b05148aed519c11268fc670614928f29db6214d2c4b11cc947866a6c04f5c9b59827a809e31f1dd5e44a8aa92f4c7578c2203027b9c7d9f65fd9abd537ae167494c93756e20002c0d7") bind$isdn_base(r0, &(0x7f0000000040), 0x6) 21:15:51 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x88000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0xee01, 0xee00, 0xffffffffffffffff]) r3 = getuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r6 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r8 = getgid() r9 = getuid() getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) r12 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f00000005c0)={0x3d0, 0x0, 0x8, [{{0x6, 0x1, 0x10000, 0x70, 0x401, 0x74db, {0x6, 0x10000, 0x8001, 0x1, 0x6, 0x5, 0x1, 0x6, 0x620, 0x1f, 0x4, r1, r2, 0xe6a5, 0x4b7c9555}}, {0x0, 0x9, 0xc, 0x5, '\\^{vboxnet1\x92'}}, {{0x2, 0x0, 0x0, 0x1, 0x8, 0x8, {0x0, 0x4, 0x3, 0x5, 0x3e96a377, 0x10000, 0x100000000, 0xbd9a, 0x8000, 0x2, 0x20, r3, r4, 0x66b74c42, 0x4}}, {0x2, 0xffff, 0x0, 0x2}}, {{0x5, 0x3, 0x52, 0x101, 0x7, 0x2, {0x3, 0x4, 0x1, 0x80, 0x1, 0x10001, 0x2, 0x7f, 0x6, 0x511, 0x1, r5, r6, 0xdb5, 0x3f}}, {0x0, 0x5, 0x3, 0x5, '--('}}, {{0x6, 0x1, 0x9, 0xb6bd641, 0xf30, 0x5, {0x5, 0x6, 0x1f, 0x1, 0x4e, 0xfffffffffffffffc, 0x8001, 0xa0, 0x8, 0x7, 0x3ff, r7, r8, 0x0, 0x2}}, {0x4, 0x1, 0x0, 0x81}}, {{0x0, 0x1, 0x7, 0x3f, 0x6, 0x4, {0x5, 0x9, 0x4, 0xb13, 0x4, 0x5, 0x10001, 0x1, 0x2, 0x8001, 0x7, r9, r10, 0x101, 0xff}}, {0x4, 0x700, 0x0, 0x40}}, {{0x5, 0x0, 0x3, 0x9, 0x3ff, 0x56b, {0x6, 0x6, 0x101, 0x2, 0x0, 0x8, 0x1f, 0x2, 0x81, 0x9, 0x7, r11, r12, 0x2, 0x3}}, {0x1, 0x100000000, 0x18, 0x7b, '*vboxnet0\xa9$self**\'#$eth0'}}]}, 0x3d0) socketpair$unix(0x1, 0x20000000000001, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket(0x1e, 0x805, 0x0) r15 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r15, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r14, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x39f, 0xbe13, 0xffff, 0x4, 0x1, 0x3, 0x9}, 0xfffffffffffffe94) setsockopt$packet_tx_ring(r14, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) 21:15:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000001800)=""/4096, 0x1000, 0x0, 0x0, 0x2}}, 0x68) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x0, "02f1dbef3a0ee209fe109c9964f50d7bbe2ef7c2d998bbfac9226b77cd491860", 0x2, 0x400, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x3, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 21:15:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) pwrite64(r1, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0xa, [0x817d, 0x40, 0x1, 0x8d, 0x0, 0x9, 0x2, 0x3ff, 0x4, 0xffff]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x6}, &(0x7f0000000140)=0xfffffffffffffe3c) 21:15:51 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="d2", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200)=0x6, 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x0, 0x0) 21:15:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfffffffffffeffff, 0x80000) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x4, @raw_data="3f729e880ef05e282e01ed91780def1a604341807bc3f5e3e3a3ad78eec16f165283d91896bc1c513e5609aa7a3850ef3cb06ff19c9f5d6e7654810528d3ca593351b67ae096f83a6aa04c84ba7c32605df9816eab2cdcbd392ba3f07220403116c7bb2cf7ef4605977bdd897822c6d460372b25552f4323af005158740f1dc1064a8aa0716f6dccdb1d918340895783dbf47fe9b13c4a8e8584e0718869e2e0a36f43222ea15108307f3f8cc58bab4f6ec4f9c4e6821b08f8b10bdf15be2114275136a2a4a8ee6e"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x5051c1) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='/dev/vhost-net\x00', 0xf) r3 = dup(r0) pwritev(r3, &(0x7f0000001500)=[{&(0x7f0000000500)="f64d833f", 0x4}], 0x1, 0x0) r4 = getpgrp(0x0) fcntl$setown(r3, 0x8, r4) [ 222.412404] protocol 88fb is buggy, dev hsr_slave_0 [ 222.417994] protocol 88fb is buggy, dev hsr_slave_1 21:15:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000001800)=""/4096, 0x1000, 0x0, 0x0, 0x2}}, 0x68) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x0, "02f1dbef3a0ee209fe109c9964f50d7bbe2ef7c2d998bbfac9226b77cd491860", 0x2, 0x400, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x3, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 21:15:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000f6c0e645fb90ca8fd842140000000000000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000ff00000000000000000000000000000000000000003800000000010000000000000000200000000000000000200000000000000000000000000000000000000000000000000000000000000000007e2f3d"], 0x58) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x0, @pix_mp={0x1, 0x7, 0x52424752, 0x2, 0xe, [{0x20, 0x6}, {0x9, 0x1000}, {0x2, 0x5}, {0x7, 0x52e3}, {0x800, 0x5e}, {0xed3, 0x5}, {0x8, 0x9}, {0x7ff}], 0x6, 0xffffffffffffffff, 0x2, 0x0, 0x3}}) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60}, 0x60) r3 = fcntl$dupfd(r0, 0x0, r0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 21:15:51 executing program 0: r0 = socket(0x10, 0x4000000000000005, 0xc) write(r0, &(0x7f00000002c0)="786bd2792a7386c70d22fc4038327c1f000000d792c3bc576cda0aaa80ff93a3c46dd5f07e6f828ef6aa76ca2bd7958fd09d17fd0fd4dbe793ad22ebf739370f6c6484a098a042c4a12548b975891b15095c265194729d00bff4f3fefcb19e942f2bfc7c8d00fffd5d08f67581bd1b8b52b6f6c3d70187095cadfebf252c7f6a480d5708eb92f5e78cdc1e579ff3433703e89b4e4a5fcfc069308073347fe385fd2678b72a6a5e45b348bcb2a8ee2075fbc3f0598daee33ddcd6ef7aabff0841f4503cc6081908bb79ce69b2770bc43af02aae73d45d28e31a6fb2ff25d4d2d250088a4a723fd93456456550e60347723ab3034dd4810ae2d6fc03bff1a72c1913a2026d27c706522543c505cae1ee675e065c66a07e1c1a54c5241951ee48b6d65cbccccf675e47", 0x128) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x800007e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x20000cef, 0x0, r1, 0x0, [0x305f, 0xa]}, 0x2c) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x100000000) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000080)={@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x0, 0x2}}, {&(0x7f0000000400)=""/4096, 0x1000}, &(0x7f0000000000), 0x1}, 0xa0) 21:15:51 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000400)) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/82, 0x52}], 0x1) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000080)) fstat(r0, &(0x7f00000000c0)) 21:15:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000002c0)) r2 = userfaultfd(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000006c0)=[{0x0, 0x0, [0x2, 0x1a22, 0xa003, 0xffff, 0x8, 0x100000000, 0x4, 0x8, 0x101, 0x0, 0xfffffffffffffffb, 0x4872, 0x1, 0x3, 0x5, 0x9]}, {0x4, 0x0, [0x7, 0xe1, 0x9cfb, 0x8001, 0xcd8b, 0x5, 0x7fff, 0x1ff, 0x0, 0x4, 0x3, 0x470, 0x101, 0x200, 0x5, 0x6]}, {0x15, 0x0, [0x4, 0x800, 0x0, 0x8000, 0x0, 0xfff, 0x19f, 0xffff, 0x9, 0xff, 0x2, 0x9, 0x800, 0x3, 0x1, 0x3]}, {0x10, 0x0, [0x4, 0x5, 0x1, 0x5, 0x12e, 0x3, 0xb34, 0x3, 0x7f, 0x80f9, 0x7f, 0xffff, 0x7fff, 0x18, 0x6, 0x800]}, {0x6, 0x0, [0x0, 0x401, 0x0, 0x81, 0x100, 0x4, 0x7898, 0xffffffffffffff2e, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x9]}], r3, 0x1, 0x1, 0x168}}, 0x20) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r2}, {r0}], 0x2, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 21:15:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x2, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x18) [ 222.886641] QAT: Invalid ioctl [ 222.894104] QAT: Invalid ioctl 21:15:52 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280)=0x4, 0xffffffffffffffe6) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x18) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x81, 0x101000) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000002c0)=0x8001, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) getsockopt$inet_buf(r2, 0x0, 0x35, &(0x7f0000000080)=""/168, &(0x7f00000001c0)=0xa8) write$P9_RREAD(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x14) 21:15:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) unshare(0x20400) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x100) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000180)) 21:15:52 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}}}, &(0x7f0000000100)=0xe8) setuid(r0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x5, @sliced={0x10001, [0x10001, 0x6, 0x147, 0x2, 0x0, 0xcb15, 0x9, 0x101, 0x4, 0xd43, 0xcd2, 0x3, 0xfffffffffffffffe, 0x5de3, 0x2, 0x401, 0x8001, 0x800, 0x5f9, 0xdf6d, 0x1, 0x2, 0x6, 0x8, 0x99, 0xffffffff00000001, 0x3, 0x1, 0x5, 0x7, 0x1, 0xc0, 0x4, 0x5, 0x1, 0x9, 0x3, 0x9, 0x9, 0x40, 0x4, 0x1, 0x4, 0x2, 0x0, 0x7, 0x7, 0xdac1], 0x5}}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r3 = fcntl$getown(0xffffffffffffff9c, 0x9) getpgid(r3) connect$bt_rfcomm(r1, &(0x7f00000003c0)={0x1f, {0xffffffff, 0x9, 0x20, 0xffffffffffffff7f, 0x1, 0x4}, 0x7ff}, 0xa) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x5) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000400)=@generic={0x0, 0x1, 0x81}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000440)=""/119, &(0x7f00000004c0)=0x77) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000540)=0x4) move_pages(r3, 0x5, &(0x7f0000000580)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f00000005c0)=[0x53], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x4) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000640)=0xfffffffffffffff7) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000006c0)={&(0x7f0000000680)=[0x7f], 0x1, 0x80000001, 0xad, 0x3fffc0, 0x8, 0x7, {0x4, 0x100000001, 0x8, 0xfffffffffffffffb, 0x5, 0x4, 0x6, 0x4c, 0x8477, 0x4, 0x4, 0xb927, 0x0, 0x3, "7897c3bd91fdc80c8299a6f0ca8bf72f4f23ce2c220e3cc1f45c79eb363706ef"}}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000800)={0x10000, 0x1f, 0xba, &(0x7f0000000740)="76984e52d63141e062e54bb223277108f2ac03d25dd7f452c35c8452151b7f7e40a0da15275e9720bacc842b498c2877a4b6752659e8032478f61fb03282458eafdb91071cc8f91bd2a2c202a1f57b0223c9b02e5a1c8f07386930f8dd78828c62a8c47294240e24e6194f797bb93a5629f0fc4c572aea2d9ccc9e40f83a2e7b3524980c066c0653a0bff50c19ea8ecdb62d30a287f9af9ff774409a6186dfd43e0f07bffb6ef3b1cf89e439b790f476f192b1dce5fcca78389a"}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000840)={0x910, "d78fd8ed3204f1c34b0d92293e3e4c70c223cc04b2d74cf12d5871d69bffb05e", 0x0, 0x1}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf64}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000009c0)={0x0, 0x20, 0x8, 0x9}, &(0x7f0000000a00)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a40)={r5, 0x3}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x12a02000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x110, 0x13, 0x8, 0x70bd25, 0x25dfdbfc, {0x18}, [@generic="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"]}, 0x110}, 0x1, 0x0, 0x0, 0x4040000}, 0x8041) modify_ldt$read(0x0, &(0x7f0000000c80)=""/226, 0xe2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000d80)={@dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, 0x1, 0x3, [@multicast2, @rand_addr=0x9, @broadcast]}, 0x1c) perf_event_open$cgroup(&(0x7f0000000e00)={0x2, 0x70, 0x2, 0x1, 0x7, 0x7, 0x0, 0x80000001, 0x800, 0x1, 0xef, 0x0, 0xd9, 0x3, 0x9, 0x7eab, 0x1, 0x5, 0x1, 0x5, 0x4, 0x4, 0x4, 0x3, 0x545, 0x3234, 0x3, 0xa03e, 0x3, 0x0, 0x4, 0x3, 0x0, 0x0, 0x4, 0x1, 0x20, 0x3, 0x0, 0x81, 0x7, @perf_bp={&(0x7f0000000dc0), 0x2}, 0x40, 0x5, 0xfff, 0x6, 0x16f6, 0x1, 0x4}, r1, 0x5, r1, 0xc) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000e80)={0x1, 0x0, 0xfffffffffffffffa, @empty, 'bond_slave_1\x00'}) 21:15:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b4b92e1fd9b363b0cb4c14ea48f601a2ee84e1c1cd06161939689cdf0df063aed161a4671608777f2b955f9a0ca2fdd5dfee8a2c7bc70c16fbec0549eb49236407089fa0c7a5f744820aea1a6c0e47e338aac5c2a50d61fbf52f612e8ab257197a", 0x61, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000004c0)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001100)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0x7) 21:15:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\xd4\x00\x04*\x04\x00\x00\x00\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00T\x0er\xcdW\xf4BwR\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;') unshare(0x20400) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000180)={0x8, 0xa, 0x100, 0x3f, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)={0x0, @speck128, 0x0, "e1359b61ce5a0a81"}) [ 223.418141] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 21:15:52 executing program 2: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200040, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000080)) 21:15:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x2000) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={0x0, 0x0, 0x2080}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0xa, 0x0, 0xfffffff5) 21:15:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b4b92e1fd9b363b0cb4c14ea48f601a2ee84e1c1cd06161939689cdf0df063aed161a4671608777f2b955f9a0ca2fdd5dfee8a2c7bc70c16fbec0549eb49236407089fa0c7a5f744820aea1a6c0e47e338aac5c2a50d61fbf52f612e8ab257197a", 0x61, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000004c0)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001100)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0x7) 21:15:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = epoll_create(0x8) r2 = memfd_create(&(0x7f0000000100)='#v}*\xa1\xc7net1nodevem1\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) epoll_wait(r1, &(0x7f0000000200)=[{}], 0xb2, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 21:15:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(r1, &(0x7f0000000c40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa400295c) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000040)='./file0\x00', 0x0) 21:15:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x4000000000000, 0x100, 0x0, 0x0, 0x1}, 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240), 0x404f4c1b75) read(r0, 0x0, 0x0) 21:15:53 executing program 0: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000012c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) [ 224.072562] IPVS: ftp: loaded support on port[0] = 21 21:15:53 executing program 0: getresuid(&(0x7f0000000040)=0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) r2 = msgget(0x3, 0xc0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) msgctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x5, r3, r4, r0, r5, 0xa0, 0x4}, 0x80, 0x80000001, 0x3, 0xa00000000, 0x80000000, 0x4, r6, r7}) 21:15:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x0, @local, 0x3}}, 0x3, 0x7, 0x800000010000000, 0x20, 0x8fc}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e23, 0x9, @mcast2, 0x1}}, 0x6}, 0x90) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000440), &(0x7f0000000640)=0x4) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x7, 0x80) ioctl$TIOCNXCL(r3, 0x540d) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'user.', '^\x00'}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000075181cd7064319b3c400000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) [ 224.393697] chnl_net:caif_netlink_parms(): no params data found [ 224.533495] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.540065] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.548333] device bridge_slave_0 entered promiscuous mode [ 224.564035] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.570578] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.578728] device bridge_slave_1 entered promiscuous mode [ 224.642505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.665765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.711395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.719675] team0: Port device team_slave_0 added [ 224.727956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.736245] team0: Port device team_slave_1 added [ 224.744825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.753272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.945769] device hsr_slave_0 entered promiscuous mode [ 225.072395] device hsr_slave_1 entered promiscuous mode [ 225.232894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 225.240265] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 225.265296] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.271853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.278821] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.285375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.353265] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 225.359413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.373474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.381651] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.392746] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.404634] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 225.420903] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.428606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.436225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.450031] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 225.456585] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.471238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.478533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.487134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.496310] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.502808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.519351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.528073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.537214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.545331] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.551820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.563243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.570271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.587315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.595610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.614263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.621285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.630099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.643933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.657627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 225.665749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.673727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.682731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.691120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.699415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.712034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 225.718841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.726876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.744250] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 225.750347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.776970] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 225.793213] 8021q: adding VLAN 0 to HW filter on device batadv0 21:15:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x4000000000000, 0x100, 0x0, 0x0, 0x1}, 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240), 0x404f4c1b75) read(r0, 0x0, 0x0) 21:15:55 executing program 3: r0 = socket(0x22, 0x2, 0x4) bind(r0, &(0x7f0000000040)=@x25={0x9, @null=' \x00'}, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 21:15:55 executing program 2: unshare(0x2000400) fanotify_init(0x62, 0x1000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80400, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)=0x4) 21:15:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000002901)='\x00', 0x0) write(r1, &(0x7f0000000180)='4', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) accept4(r0, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f0000000400)=0x80, 0x80000) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000440)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001600)=""/104, 0x68}, 0x8b}, {{&(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/209, 0xd1}, {&(0x7f0000001800)=""/155, 0x9b}], 0x2}, 0x7}], 0x2, 0x40000000, &(0x7f00000019c0)={r7, r8+30000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000001cc0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001e00)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000001f00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f40)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000002080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000020c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002100)={0x0, @multicast1, @loopback}, &(0x7f0000002140)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000021c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002200)={'teql0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003c40)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000004300)={0x11, 0x0, 0x0}, &(0x7f0000004340)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004440)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000004540)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000004580)={@loopback, @broadcast, 0x0}, &(0x7f00000045c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004600)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000004700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000004780)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000004880)=0x2b6) getpeername$packet(0xffffffffffffff9c, &(0x7f00000048c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004900)=0x14) recvmmsg(r0, &(0x7f0000008bc0)=[{{&(0x7f0000004fc0)=@can, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1, &(0x7f0000006080)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000007080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007100)=""/138, 0x8a}, {&(0x7f00000071c0)=""/210, 0xd2}, {&(0x7f00000072c0)=""/93, 0x5d}], 0x3, &(0x7f0000007380)=""/88, 0x58}, 0x3}, {{&(0x7f0000007400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000008500)=[{&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/105, 0x69}], 0x2, &(0x7f0000008540)=""/101, 0x65}, 0x5963}, {{&(0x7f00000085c0)=@ipx, 0x80, &(0x7f0000008b00)=[{&(0x7f0000008640)=""/184, 0xb8}, {&(0x7f0000008700)=""/225, 0xe1}, {&(0x7f0000008800)=""/113, 0x71}, {&(0x7f0000008880)=""/227, 0xe3}, {&(0x7f0000008980)=""/95, 0x5f}, {&(0x7f0000008a00)=""/104, 0x68}, {&(0x7f0000008a80)=""/73, 0x49}], 0x7, &(0x7f0000008b80)=""/63, 0x3f}, 0x1}], 0x4, 0x40000000, &(0x7f0000008cc0)={0x0, 0x989680}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000008dc0)={0x0, @initdev, @dev}, &(0x7f0000008e00)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008f00)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000009000)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000009340)={@initdev, 0x0}, &(0x7f0000009380)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000a840)={0x0, @broadcast, @loopback}, &(0x7f000000a880)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000a8c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f000000a9c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000aac0)={'lapb0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000ab00)={{{@in=@empty, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f000000ac00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f000000b440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4400400}, 0xc, &(0x7f000000b400)={&(0x7f000000ac40)=ANY=[@ANYBLOB="a0070000", @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="780002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000001000008000100", @ANYRES32=r6, @ANYBLOB="ec0102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000008000100", @ANYRES32=r16, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e21626c656400000000000000000000000000080003000600000004014138a83726c2", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="b401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004008100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000008008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000600", @ANYRES32=r21, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000008000100", @ANYRES32=r22, @ANYBLOB="f800020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r23, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r25, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB="7c00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff00000008000100", @ANYRES32=r28, @ANYBLOB="fc00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r30, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400fb01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r32, @ANYBLOB="8400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r33, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r34], 0x7a0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x800011, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x98) r35 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xd64, 0x200000) ioctl$KVM_IRQ_LINE(r35, 0x4008ae61, &(0x7f0000000100)={0x20, 0xded}) 21:15:55 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x6, 0x101}) r1 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) 21:15:55 executing program 0: pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) sysfs$2(0x2, 0x6, &(0x7f00000000c0)=""/222) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 21:15:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 21:15:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x400000000000003, 0x84) ioperm(0x5389256e, 0x100000001, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d1e4ceb2c37028943e9afe94d229b5a9cf0d7e1bed3d7876635f522845691f70610e2c2098d93df6c0fb46867279a63c67f6768f394262a0d3be53a9d6bdb62018e070f0ed42f6b505cf1ee53dace21b3d015d2e5a11e2baf0f1e6acc9f9b4cc189f1a3705fa07cbdc2b5a7ebc8d65ad5ae7fdbc18caeef35fcd28de196d2e583931a350000000000", @ANYRES32=0x0], &(0x7f0000000040)=0x365) socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000140)=0xb0) 21:15:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 21:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000040)={r0, r1, 0x9, 0x14, &(0x7f0000000000)="43d27adf0de59c7a44cb80dbaf9dbc83bf233e21", 0x7, 0x4, 0x0, 0x3, 0x5, 0x3, 0x3, 'syz0\x00'}) bind(r1, 0x0, 0x0) close(r1) 21:15:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) r2 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x4a, "b201aef94dac31e7d35df5ddab90774da5f921cf96f53ec1022b309b198a1f76e29906dbb2f4d479c7244ef5c78f39e8b0e8b74a73446bf8ce3ece344715c81a3c6802d7b43d181c5967"}, &(0x7f0000000340)=0x52) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e22, 0x5, @remote, 0x8}}}, 0x84) mkdir(&(0x7f00000000c0)='./file0\x00', 0x108) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x6) write$apparmor_current(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7065726d70726f66696c6520dda6b8a99e29c2192a"], 0x15) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0xf98}) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) 21:15:56 executing program 3: r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tgkill(r0, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x3, 0x0, 0x201a, 0x0, 0x4, 0x2, 0x401, 0x1}) 21:15:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x5}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x99c1, 0x404c40) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x5, 0x4}, {0x1, 0x2}, 0x8000, 0x7, 0xf7}) [ 227.046254] kauditd_printk_skb: 3 callbacks suppressed [ 227.046292] audit: type=1326 audit(1546463756.096:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9913 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 21:15:56 executing program 2: unshare(0x8020400) r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x7) 21:15:56 executing program 1: open$dir(0x0, 0x40000, 0x48) mknod$loop(0x0, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe8b) msync(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x3) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xb8200, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2a, 0x6, 0x0, {0x3, 0x3, 0x1, 0x0, ','}}, 0x2a) 21:15:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x100080000000006, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 21:15:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x19, 0x80005, 0x100000001) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1f}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x1, @loopback, 0xff}}, 0xc9, 0x6}, 0x90) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r3}) 21:15:56 executing program 0: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = add_key$user(&(0x7f0000000b80)='user\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)="95d34118ba9e741f9af4b200152334821898d75785ce9b2780f6c931e0bf27d1df4bbb93dffd0701555444ae79d8485f27175a676631227ec2e9f29e8dd640e0c496921c0b3ae4a0ae0f5f917eb796fc9f2d5f690b94dd2ad2ff1f6f9968e905ca1c47c938b7d28ed0572e2bfaf67b4557364cc0a6fb2e4f6a188008", 0x7c, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r0, &(0x7f00000009c0)=[{&(0x7f0000000a40)="6f567c4dc0e351043de8a8ea953d7390f0c486043e932c82a6be5bb4bbb3813bf52cd416b934562d92f9783492e3b1be46f3d74dc77d749fd985a3004af86ebd7504d105e3981563b39320b3c63785e59f8095d2ec07985106598533c2d11cd443f6a63c473eb79d992e4e941259b0baac4e35faefdd1ad4a25ece2138f63a9093abfc930a120c8c290f2a718dae87c20ca604952ffe14677fb9ebf09e78534314ea22c5326f5d6a88fa96839b53314accdc91a48b8a6aef5581f62f62853d8718873e468e57c13f438e284dac9c2db48d41683db572895e429c3ade07e865345dc889f604380eb31d30d1e525415de4c00315ee5553ae6b7d0d88f2e274fd711514dd76245534df64"}, {&(0x7f0000000780)="6f0e48bc561809435e3bf251006b9dee999deeeefe53aacd92abd8fb4a09d2ca03ebb703ee06bb14d611a4c78c8162a3f4fde68f82dd2b5994cbf1aa8c0beae3a07c579087b53f1c0cbde0dad883466650177b9f8901f0982b6b9d15af1f8135a7356d23abef5ffae1655b3c4cc074ffdc07a51985effa613801468a6fd97e063857df851058ace7a0aeece044186e0d808c8ddf3c1b2863e3daed96bf718b8b81c26a4ca98fd83fc3aab158e9ca62cf28628a45cae84ef5702e013b3a3a"}, {&(0x7f0000000cc0)="9b53909f70868e0f9dde44361b7fb07e697f2f29e2b6ba44c25c2d4676c4ab3c02"}, {&(0x7f0000000d00)="b2ff21939dfaf65a5dab3785340b57e1a3488cae8679374219b91f7ca430b27ef8c27c54e8f47d71ae188e9e961432194067cb6a496cfee291a12f9ee44f31a76fe78c4195cf443e0e40bbb416546fdf45dbd18b4c2457cd445de2d9a67e0187e2ac2074df79be19d851de5a024e5dedc342cf98f132efe8a643d5a793c8606d52f4d5131487abed9311e82970634f7f06192e3892ed36c4f507e38dc5eb0c5d8d707a7aa0127cb5adf93dc2deaca1200f12dac9ffa6155489e15db8930b278e611b1fe13c3fe884a5408efb6e20c16e0c9aece568a6fd915bc0a6eee94d72bce8248edbf02f0c173cdb4249f14c53c10aa916fd49c08268b803185343170476931792eda32c3f7fd423e282ca4702573cc433ea7c050c569bb937820e02cde400"}, {&(0x7f0000000940)="65cc354506722c5fd1ed146a7b2cf4ef44a54e5d9d97ae434fcc207e7b474b87385e7429d91c3793ffe33ed28b03a49a085c433f5c2be73b9c0491a11b290753618c0d5f062c8bd52d78e6b9582adce7316662248f469f33d8783190f10882f1f1e1468bb77ed7337247d4161809dcfa2d717b"}], 0x135a, r1) 21:15:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20e82, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x20, 0x7ff}) preadv(r0, &(0x7f0000001b40)=[{&(0x7f0000000700)=""/238, 0xee}], 0x1, 0x0) 21:15:56 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="050073f9e51bee014de9989e230950a881dac89eaa8626a847211f91587f6ccbffe7f8fbfc1f998549bdd044f9ea5d9c6d3f449af17320358f564f"], 0x3b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='/dev/kvm\x00', 0xffffffffffffffff) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x20, 0x60000) add_key(0x0, 0x0, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0", 0x21, r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:15:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) flock(r0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x33}, 0xa, @in, 0x0, 0x1}}, 0x244) 21:15:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000280)={0x2, 0x0, @ioapic}) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) [ 227.848114] audit: type=1326 audit(1546463756.896:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9913 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 21:15:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/146) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="41fce4879c53ba4624004e772064656661756c7420757365723a6e67646500205f5f3b351e391a820fe3062cb6e646eb77204280ddb4691bf1f0b451437f424b70ac5d019c03fe7730bd2a1f42cba5b0ca5a7961d644b543a37ad0da549298700afd2b44ba9d8d1cbaaa6902270821191f67de6cd1a27937f5b20614a35a83643acacdd0e38168145fadd345ac53d90194870e6947050ec6c0fc3c98674094e636723971fdec6ce372d08bc9ebff688b115ec7"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000042) 21:15:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xc0, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffffffff8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = dup(r0) ioctl$KDDELIO(r2, 0x4b35, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff0b, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000030002908000000000000f9000100000004000000"], 0x18}}, 0x0) 21:15:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$adsp(0x0, 0x100000000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x101, 0x0) move_pages(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000797000/0x4000)=nil], &(0x7f0000000400)=[0x7, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000540)=':-cgroupsecurity]\xa2(\x00') personality(0x6000019) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "64d7d58f5d5cb3815e41e287bf8b07b9"}, 0x11, 0x3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000340)={r5, 0x1}, &(0x7f0000000380)=0x8) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 21:15:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000740)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x100000001) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) [ 227.989192] encrypted_key: insufficient parameters specified [ 228.027983] encrypted_key: insufficient parameters specified 21:15:57 executing program 2: mknod(&(0x7f0000000000)='./file1\x00', 0x0, 0x200) epoll_create(0x5) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) quotactl(0x2080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x75ac}}, 0x37) 21:15:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8001, 0x8, [0x3f, 0x2, 0x4, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x3, 0x6]}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r1, 0x4}, &(0x7f0000000180)=0x8) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80a092b61c6c9b2e548559eb5b1cc2ac49bfcbd272b8de3aeba46d53677de658a89ea17e9779efc590c9d566b6cc7340a5a0a83d5ea8e94d63f9f21bfcca6c20f3e2747a642672573bfa00394bd6be183436a0308c"], 0x56) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 21:15:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x12, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x200}}, 0x101, 0x40, 0x0, 0x40, 0x800}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0xc1}, &(0x7f0000000180)=0x8) close(r2) close(r1) 21:15:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r1, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x3d, 0x3, 0x44, &(0x7f0000000100)="f98b5ac78f9cd363b36c5fdd967ed21abcca2e06ca1cae1bb1459a4ccfdfc26f710dc20a97b6bb923ffc4411daf43867f2b6598d891eae0f72d1efe858bf35fb90e358f7"}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3c) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000000)={0x1, 0x7}) read(r0, &(0x7f0000000080)=""/77, 0x4d) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)=0x8) prctl$PR_SET_FPEMU(0xa, 0x1) dup3(r0, r1, 0x0) 21:15:57 executing program 3: syz_emit_ethernet(0x5, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="a69413790807d627ed1ab437", @ANYRES64, @ANYRES64], @ANYBLOB="50358fe5f4ba877f6a4d44e2184c11d24c594e3c72b53e7bdd71ae311783d4d6fc15c2f7385ad49c3d4e6ea8ea", @ANYBLOB="4f69c7520addc897fdd6dda4312b89fda9e911da403fd8acba73c6059a7aaaa47f71058380fce62875e5ab3fee08a638c9a0102dba424c6e84a2810ff0ae5d0a9f8523527f30719b830fb3cdebd30d0464bc45468cffd8bb02eba540dbee18b96722e8a071d3ed5499f441e8ab8a09001a77e509832cfff6e2816edb29e674cae4e599118b00345ae979e94cd150bc9d7836c425012ba75a4909e62ec73d0cca961817b3a7bde09047dabbf14e08b9bc1e3eef568b617b24f4ba16f0425bbcff99bc0d4140e370a063b5882f012e835ed1663040432e2036604b9df48c8fef6fe3f707662e0d99b64de8e619d9066c0522aa38", @ANYRESOCT, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="971470324cc1b8e30fba17548e30900089dfc2203b16a450298299e83d5bd794317634e566732f03f7db455e7fd589730101fbb6fafd6b4ce138bad839ee0dd9573df029b9b3def84e660e6111756587c8377ac45535d6a232fcad4c25bb2167a1b288e9764fae67", @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRESHEX]]], 0x0) 21:15:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x9}) 21:15:57 executing program 1: r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/38) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06w=\xea\x8f\xe2\xa4\xe3\x85!M\xeb&') sendfile(r0, r2, 0x0, 0x40000000009) 21:15:57 executing program 3: r0 = semget$private(0x0, 0x2, 0x400) r1 = mq_open(&(0x7f00000004c0)='\x00', 0xc0, 0x40, &(0x7f0000000500)={0x7121b810, 0x5, 0x9, 0x1000, 0x1, 0x6, 0x10001, 0x7}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) splice(r1, &(0x7f0000000540), r2, &(0x7f0000000580), 0x4f99, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000080)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000440)={{0x6, r3, r4, r5, r6, 0x8d, 0x100000001}, 0x9, 0xfffffffffffff7a7, 0x746}) unshare(0x20400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r7 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r7, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @remote}, 0x1, 0x8, 0x0, 0x1}}, 0x80) r9 = socket(0x1e, 0x1, 0x0) ioctl$sock_netdev_private(r9, 0x89f0, &(0x7f0000000080)) 21:15:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x101000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x2, @local, 0x8001}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e23, 0x9, @ipv4={[], [], @loopback}}}}, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/172) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) mq_unlink(&(0x7f0000000180)=',\x00') dup3(r0, r1, 0x0) 21:15:57 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file2\x00') 21:15:57 executing program 0: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(&(0x7f0000000540)='em0]\x00', 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) pipe2(&(0x7f0000000680), 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 21:15:58 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x401, 0x80) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x5, 0xb, 0x4, 0x10000, {0x77359400}, {0x3, 0x0, 0x0, 0x101, 0x7fff, 0x7fff, 'wej_'}, 0x66, 0x3, @fd=r1, 0x4}) tee(r0, r0, 0x2a64, 0x4) ioctl$void(r0, 0xc0045878) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000200)={{0x3, @name="a5688a9945ef1861854a2d946f0f4f68b50c42a3022432fb953e8cef72967deb"}, "c85fc9ca95939924b7c2c62712f292cc143e3c155f90055a2ac909df76d8a932", 0x1}) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) pselect6(0x40, &(0x7f0000000380)={0xd741, 0x8000, 0x39, 0x100, 0xfff, 0x9, 0xfff, 0x6}, &(0x7f00000003c0)={0xfffffffffffffffd, 0x1, 0xff, 0x0, 0x7fffffff, 0x1000, 0x10001, 0x9}, &(0x7f0000000400)={0x1, 0x7, 0x0, 0x80, 0x6, 0x2, 0xfffffffffffffffe}, &(0x7f0000000440), &(0x7f00000004c0)={&(0x7f0000000480)={0x4}, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x38, &(0x7f0000000500)=[@in6={0xa, 0x4e20, 0x81, @mcast1, 0x7fff}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x6}]}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000005c0)={r3, 0xbe0, 0x40}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000600)={r3, 0x5}, 0x8) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000640)=""/14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000006c0)={0x2, 0x8, 0x1f, 0x71d, 0xff}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xdf, 0x6ac}, 0x90) unlinkat(r1, &(0x7f00000007c0)='./file0\x00', 0x0) getdents64(r1, &(0x7f0000000800)=""/81, 0x51) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x2}}, 0x3f, 0x1}, 0x90) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000980)={'veth0_to_team\x00', {0x2, 0x4e21, @rand_addr=0x100000000}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000009c0)={0x10000000, 0x2, 0x10}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000a00)={{0x1, 0x3, 0x7, 0x1, 0x8}, 0xffffffffffff0001, 0x8000}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dlm-control\x00', 0x2800, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000ac0)=0x3, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x0) fstatfs(r0, &(0x7f0000000b00)=""/41) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b40)={r3, 0xfffffffffffffffb}, &(0x7f0000000b80)=0x8) ioctl$TUNSETLINK(r4, 0x400454cd, 0x109) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000bc0)={{0xa, 0x4e24, 0x1075, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, {0xa, 0x4e22, 0x3, @ipv4={[], [], @broadcast}, 0x4}, 0x401, [0x8001, 0xd57, 0x10001, 0x7fff, 0x0, 0x0, 0x1800000000, 0x7]}, 0x5c) 21:15:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETAF(r0, 0x400455cb, 0x0) 21:15:58 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='$@[GPL^^\x00', 0x0) unshare(0x20400) chroot(&(0x7f0000000000)='./file0\x00') ioctl$FICLONE(r0, 0x40049409, r0) fcntl$addseals(r0, 0x409, 0x0) 21:15:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) accept(r2, 0x0, 0x0) tkill(r1, 0xd) 21:15:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0xfffffffffffffffb, 0x2}, &(0x7f0000000240)=0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000008c0)=""/73, &(0x7f0000000940)=0x49) r4 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xcf9, 0x82000) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x9}}, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x60, {0x2, 0x4e22, @multicast1}, 'veth1_to_team\x00'}) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000340)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) write$P9_RMKNOD(r4, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x44, 0x3, 0x2}}, 0x14) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r7, 0x3ff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1a}, 0x7f}, @ib={0x1b, 0x1, 0x8, {"ee5bbcca1df3ecc275d3a5829545dd35"}, 0x7fffffff, 0xfffffffffffff26f, 0x9}}}, 0x118) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) write$binfmt_misc(r1, &(0x7f0000000540)={'syz1', "0567396d230985b0c802fc71658b7fcfeed121320e5bdbc246f0a688f37268744d681e3484f4a074e0aa4bd5e774a18394d902a46f5a256272e328ffee7fe8c3a37c1a8a74985be4eee44ab2aaabfeb042bc2235c7684434b3f3ca61b1e9000c867992d92edb08aafc7135a8773177489257c2c6d5fc36a3aa72d8156abe4b326339bcbe7f8f8b31fe19dab0f6b360d1570cea3f572f7618634fe844335482abf247fc68fd28da654d7d7a2777513bfe72fb32628ddda6bca0d8edbc65779dc5ef4a"}, 0xc6) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000004c0)=@req={0xa, 0x8001, 0xffff, 0xffffffffffffeb63}, 0x10) sendto$inet(r5, &(0x7f00000002c0)="ad", 0x1, 0x3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87de28601fcd3e9c61e1ae787808c2cf70f03c552d59ee51f1bf794f1ff60e385dacae0e9a37d5c56856b62a3ac4", 0x47, 0x4000010, 0x0, 0x0) 21:15:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000180)="61dd9b7e", 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xfff}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffff7b98}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) 21:15:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x4c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x200000) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) [ 229.546569] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:15:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240)=0x8000, 0x4) accept(r0, &(0x7f0000000040)=@hci={0x1f, 0x0}, &(0x7f00000000c0)=0x80) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x25}, r1}, 0x14) write(r0, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 21:15:58 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x4, 0x0, [{0x2, 0x5, 0x1, 0x4e8f}, {0x0, 0x41b7, 0xffffffff, 0xfffffffffffffff9, 0x8}, {0x40000000, 0x6, 0x7, 0xffff, 0x2}, {0x0, 0x3, 0x0, 0xbac0000000000000}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000bba000)={0x0, 0x0, 0x0, 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}, 0x0) sendmsg$unix(r4, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="00000000038681c36a3b777ff0845506924bdc91d9f3b15abf5772cbdddaf6fd6937aea08376212a3973807f222f7cc93ba5c81d1c0a40d350f7b5ade18309c22973e8144f5dfccf5c35e465f307584fb1f8a3df5c52c051ef62f3f1869ce8dfb3495eb00661ad7e34ac270ab84b1c1ade14feb4af"], 0x18}, 0x0) close(r4) close(r3) close(r2) 21:15:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) syslog(0x9, &(0x7f0000000140)=""/154, 0x9a) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xfffffffffffffde5, 0x0}, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000080)) [ 229.837462] IPVS: ftp: loaded support on port[0] = 21 21:15:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, '\xa3\x99\xe9\xc5Xr\r\x8d\x1fg(\xf1\xc5\xf0u1\xdcaP\xde\xfa\xcan\xbc\xaf\x1b\x8b\x8c6\x18L\x8f\x14{\xe9n\xa3\x1e\xfb\xf4\x9c\xa9\xb9\xd7'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'eS\x97\xeb\x00\x00\x00\x00K\xbd\xd30\xea\xaaP\xc6\xa1zL\xbeL\xf9\xa2\x7fg\x1d\x17\x1cJ,P\xf2\x88I8)\xc1\xe0\xfe\x94h\xa5\xebUeT\xa2\x80;%P.\xf5\xbcE\r_X\xf3\x8b\x16\xe1\x19\x8d', &(0x7f0000000000), 0x0, [], [0x2, 0x0, 0x773]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e10000000100000009007a7d000000000000047e000081d9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x8, 0x4, [0x6]}) 21:15:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000000)=[{&(0x7f0000000180), 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040000000000000000000007000000000000000000000000", @ANYRES32=0x0], 0x30}], 0x4924924924925df, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3}, &(0x7f0000000100)=0xfe4b) [ 230.349107] chnl_net:caif_netlink_parms(): no params data found [ 230.418843] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.425504] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.433546] device bridge_slave_0 entered promiscuous mode [ 230.444313] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.450780] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.458959] device bridge_slave_1 entered promiscuous mode [ 230.489793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.503136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.529517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.537834] team0: Port device team_slave_0 added [ 230.545957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.554215] team0: Port device team_slave_1 added [ 230.560139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.570133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.755689] device hsr_slave_0 entered promiscuous mode [ 230.922409] device hsr_slave_1 entered promiscuous mode [ 231.082883] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 231.090218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 231.115847] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.122408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.129376] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.135919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.209158] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 231.216747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.232238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.244121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.255084] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.263799] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.277608] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 231.293444] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 231.299558] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.316712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.324002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.333464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.341505] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.348006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.361897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.374332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.382720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.391079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.399157] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.405638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.414016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.427110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.434192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.456713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.466064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.474980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.484344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.496755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.506180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.515108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.529864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 231.542331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 231.550477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.558833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.567009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.575210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.586835] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 231.593089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.613746] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 231.633609] 8021q: adding VLAN 0 to HW filter on device batadv0 21:16:00 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/sctp\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x4, 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, 0x65) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/229, &(0x7f0000000140)=0xe5) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000200)={0x100000000, 0x7, 0x9, 0x8}) 21:16:00 executing program 3: lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x8, 0xfffffffffffffe01}]}, 0xc, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4) 21:16:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) mlockall(0x2) 21:16:00 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) clone(0x200806102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000100)=[{}], 0x0, [{}]}, 0x88) 21:16:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) writev(r0, &(0x7f0000000140), 0x100000000000007a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x44000, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'bcsf0\x00', 0x8}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x9, 0x1, 0x2, 0xfffffffffffffffa, 0xc, 0x2, 0x1, 0x1ff, 0x1ac, 0x7ff, 0x800, 0x1}) 21:16:01 executing program 3: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x122050, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00d\x00\xca*\xfda') getdents(r0, &(0x7f00000000c0)=""/217, 0xd9) io_setup(0x0, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x101, r0, &(0x7f00000001c0)="eaa808d357c3694cc2823be378fe18d5216beff34280896fc501678a89be65463dfeaefd6c4240eb2401d30493db30e6ec823bb6bb34febd42aa173d8498f5cd9bc6c32c8d1cf5b6e48d93b558066d55459c57dd93116210cb5b1a0d4b7532c459053e675789c554391516eb632ec14375", 0x71, 0x1, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000280)) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f356132) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r2, 0x0, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfffffffffffffff9, 0x2, 0x7, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x3ff, 0x10, 0x9fd}, &(0x7f00000003c0)=0x18) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={r4, 0xffffffff00000000, 0x0, 0x7, 0x80000000}, &(0x7f0000000440)=0x18) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x3, r3, 0x1e, r0}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3) 21:16:01 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0xfff, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 21:16:01 executing program 0: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x5c, 0x14, 0x6a81cfb693af4137, 0x0, 0x0, {{@in6, @in=@loopback}}, [@mark={0xc}]}, 0x5c}, 0x8}, 0x0) 21:16:01 executing program 4: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1, 0x2, 0x3, 0x1, 0x100, 0x10000, {0xffffffffffffffff, 0x2, 0xde, 0x8, 0x6, 0x2, 0x4, 0x7, 0x7fff, 0x2, 0x81, 0x6, 0x9, 0x0, "d8b85da9bba888363e383a6d258d381e08526fde31b16a982b5610f3becaff73"}}) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) 21:16:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) [ 232.363633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 21:16:01 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000040)="ba", 0x1}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x2c) select(0x40, &(0x7f0000000000)={0x2, 0xffffffffffff8001, 0x6, 0x18a2, 0x1, 0x7, 0xfffffffffffffffb, 0x2}, &(0x7f0000000040)={0x2, 0x2, 0x7f, 0x7fffffff, 0xfab, 0x6, 0x3, 0x6}, &(0x7f0000000080)={0xfffffffffffffffd, 0x24b, 0x1, 0x7ff, 0x1, 0x4, 0xfffffffffffffffa, 0xfffffffffffffff9}, &(0x7f00000000c0)) [ 232.435986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 21:16:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000301000)={0x2, 0x0, @rand_addr=0x80000001}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000000)="8f", 0x1, 0x4010, 0x0, 0x0) 21:16:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x200200) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/40) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 21:16:01 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x800004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001200)={r2, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast1}, 0x3}}, 0x1, 0x1, 0xfff, 0x1f, 0x9}, &(0x7f0000000100)=0x98) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000080)=""/32) write$evdev(r3, 0x0, 0x139) close(r0) 21:16:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070") close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00ff7f32002d08000000000000000001000000180000001400010007000000000000000000000000000001"], 0x2c}}, 0x0) 21:16:01 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0xa, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r5 = fcntl$getown(0xffffffffffffff9c, 0x9) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000880)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000980)=0xe8) stat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/video0\x00', 0x2, 0x0) r16 = epoll_create(0x8) ioctl$VIDIOC_QUERYBUF(0xffffffffffffff9c, 0xc0585609, &(0x7f0000000ac0)={0x5715, 0x1, 0x4, 0x80000000, {0x77359400}, {0x7, 0x8, 0x9, 0x0, 0x40, 0x100, "9acf196e"}, 0xfc, 0x1, @fd=0xffffffffffffffff, 0x4}) r18 = socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b80)={0x0, 0xffffffffffffff9c, 0x0, 0xf, &(0x7f0000000b40)='/\']vboxnet1&@{\x00', 0xffffffffffffffff}, 0x30) r20 = syz_open_dev$radio(&(0x7f0000000bc0)='/dev/radio#\x00', 0x3, 0x2) r21 = syz_open_dev$video4linux(&(0x7f0000000c00)='/dev/v4l-subdev#\x00', 0x5, 0x8000) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000c40)={0x0, 0x0}) getresuid(&(0x7f0000000c80), &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)) fstat(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000ec0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = dup(0xffffffffffffff9c) r29 = getpgid(0x0) getresuid(&(0x7f00000013c0)=0x0, &(0x7f0000001400), &(0x7f0000001440)) getgroups(0x3, &(0x7f0000003bc0)=[r10, r4, r11]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001bc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001c00)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000001d00)=0xe8) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001e00)={0x0}, &(0x7f0000001e40)=0xc) r35 = geteuid() r36 = getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001e80)={0x0, 0x0}) r38 = getuid() stat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001f80)={0x0}, &(0x7f0000001fc0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000002080)=[0xee01, 0xee00, 0xffffffffffffffff]) r43 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0)={0x0, 0x0}, &(0x7f0000002100)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r46 = socket$inet6(0xa, 0xe3ef1855c11519b, 0x6bd) accept4(0xffffffffffffffff, &(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000002240)=0x80, 0x800) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000038c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003900)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000003a00)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003a40)={0x0, 0x0, 0x0}, &(0x7f0000003a80)=0xc) r51 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) r52 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r53 = accept(0xffffffffffffff9c, &(0x7f0000003ac0)=@x25, &(0x7f0000003b40)=0x80) r54 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/uinput\x00', 0x2, 0x0) r55 = socket$netlink(0x10, 0x3, 0x5) r56 = creat(&(0x7f0000003c40)='./file0\x00', 0x8) r57 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003c80)={0x0, 0x0}, &(0x7f0000003cc0)=0xc) getresgid(&(0x7f0000003d00), &(0x7f0000003d40)=0x0, &(0x7f0000003d80)) r60 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003dc0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000003ec0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003f00)={0x0, 0x0, 0x0}, &(0x7f0000003f40)=0xc) r63 = getpgrp(0xffffffffffffffff) r64 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000048c0)={0x0, 0x0, 0x0}, &(0x7f0000004900)=0xc) r66 = openat$userio(0xffffffffffffff9c, &(0x7f0000004940)='/dev/userio\x00', 0x121400, 0x0) r67 = socket$inet(0x2, 0x80004, 0x3) r68 = syz_open_dev$evdev(&(0x7f0000004980)='/dev/input/event#\x00', 0x8001, 0x44000) pipe(&(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) r70 = syz_open_dev$binder(&(0x7f0000004a00)='/dev/binder#\x00', 0x0, 0x800) r71 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r72 = epoll_create1(0x0) r73 = socket$inet_udplite(0x2, 0x2, 0x88) r74 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r75 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004c80), 0x4) r76 = epoll_create1(0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000004cc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004d00)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000004e00)=0xe8) r79 = getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000005400)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005440)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000005540)=0xe8) r82 = getgid() r83 = getpid() getresuid(&(0x7f0000005580), &(0x7f00000055c0), &(0x7f0000005600)=0x0) getresgid(&(0x7f0000005640), &(0x7f0000005680)=0x0, &(0x7f00000056c0)) r86 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000005700)='/dev/snapshot\x00', 0xe7d76e068f7f481f, 0x0) r87 = syz_open_procfs(0x0, &(0x7f0000005740)='net/packet\x00') fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000005780)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000057c0)={0x0, 0x0}, &(0x7f0000005800)=0xc) stat(&(0x7f0000005840)='./file0\x00', &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000005980)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="a13c08e9d2054d5f4eb938b1a9c79ba7e63d7b6c7c92a8a491b445b54eb23b456c44f6a8516e891f09f92177e9dc1ad1850d140e81f66cdb337d5fceea7907280843163d8c31d7c46fd476371cbc6e43d6", 0x51}, {&(0x7f0000000200)}, {&(0x7f0000000240)="9a46c8b269f1e70269ef64b41350f26ad7044c801f99f2e5e7b0321394a26e941e6152b1e3d93abea5389d2a4cf71a78a917e61f2119935df33fc7b1f65a184927", 0x41}, {&(0x7f00000002c0)="9175de351b007bc67502efeb971c8b7e0ca8008df09006975bcc77a4c8932877585b4ac1db6714dbc5caf98926e77fd384cdb19e82f76819bb8fc2515ca5a3e15e9a32ec53f816eaf80ecba4407c33838f6506a5efa55361cd948d8ba677a2cda7c0a644e35f", 0x66}], 0x4, &(0x7f0000000f80)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r15, r16, r17, r18, r19]}, @rights={0x18, 0x1, 0x1, [r20, r21]}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x18, 0x1, 0x1, [r28]}], 0x118}, {&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001140)="ad8b2df8ab129ada7ac54c6cef636ae295790352628364f18891a03335b62c549d0b62d73209f6d67705a986e4d6cb8c10eb608df068db6b614340c635876b129def81fee00f8686d6eb0f9bcf5d744f20152ca0252176e12d4fc38ba66c712b6258e7fecc074361dc1437f96566b595e7dc4e20ff95d0196f92eaaa0fed6c7836d8bff3b3e2fb3a7e508424aeec2adb5a951242929eac8f3fabfbe4fdef35a74186a72428", 0xa5}, {&(0x7f0000001200)="3fedb510e46bcee9573406a672b128dd66fdf7347e2884575a1ba1a67a7127ea29b186e9a01c73fa451d13ef824637df6d8e1f98227dae27ed8f2835c49ee152daf816c25a730b41b6cde42e9c86e463fc69fa0e9447e0fa4509a587c89d7b4318", 0x61}, {&(0x7f0000001280)="f2c57374b3ab40e7a9f352dc1bd0acebd648d24b91c3b57b8e640179ab18086a2f9c484e5af37d0948190c321cab8e4b3563806644b5ff2d476720687f723586073390668b50e545", 0x48}, {&(0x7f0000001300)="df8e4b32219728d3e4585100c628fcd982744b76f8c28e2d480fdabc077b9b5640c84cbb82931ab13121fd959a40fcb33d4643e0179ce0f01531824fdd92384ff7e4650b91", 0x45}], 0x4, &(0x7f00000014c0)=[@cred={0x20, 0x1, 0x2, r29, r30}], 0x20, 0x4000000}, {&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001580)="e22e2c7b005f178b87ad37c6cbe63d0dc37ed577f287ea702390e0ec8109a3099b859451d4bb30425624f6a1a69a601ab5640166f40f18b897baa457c889bac8a5db6aeaf2162d93d19a4556f909257c7cc67334b318dabcf048ca14551f9f2019e3703aa85225950c728fead1fadf93b69d5b9a4189753e1a6f1d112ec59a7d9823", 0x82}, {&(0x7f0000001640)="9ee700c0ea2f8a4fb694c4a3c97a7eddd1", 0x11}, {&(0x7f0000001680)="dad83ef1b8499158805abfa5dbb72285020b685e5ca4634a8ced6114157facafefe2cb5471b2ef107172cd4672d2a0585ea7c11d818a85031b671580860a169e08f38d04b28130ed", 0x48}, {&(0x7f0000001700)="e3f400daef1be25650e81bc1bb3c6f119ae442643058bf9684238d3bdd712e61bb33086c8a", 0x25}, {&(0x7f0000001740)="709e7a1018b3479b0dea092678f4266e9f8bd9f0f0bfb853c877ab995d4e6c3b81934b35a74815d3fdcfa02e328bcc37284ebf89687fc64154a920fd2365a4fb8bce302c79ceb9d1e7ea4aabbc56f19f729ab09feea4b19ce639017ad964430f31680e216750c2dec8c7eb4712bb9a7c7af92fa43297f03693574ccfb126b0d4df12f336047c8759ca0bad7c48a0e574", 0x90}, {&(0x7f0000001800)="5c611e0d93b18b1af058bb4f8ce931a0f284aa5d769052c68e6a584e9c2c14d733c84b06997a1d80ae49f73d3dbed17afa091da48e79d4bd0803d9c4ec77", 0x3e}, {&(0x7f0000001840)="ed2384e787b50d11492f6e7edde9f767b032f84e7115169802c2003ba851af43bd94bfe45d11dc05f35ea1cf71402a08d633b2f6ae77b59b863c92b88d0539ba0dccf08edfee01a607680957f0ef696c293fb79db9d309522c928927b61d2d12c38b93368aba9387c266b708c69723ed55ed25c24f5acdccfecdf8f4559d51135aa649ba30fe75d259f41cbc85afa8731dc31ca424d1aa250bba51c418d472aaa6fba29699f90a426c085d4116da14e40833fee445ab0fe38a557d795d9ada99126e667a70f89f7e168df6de7db972bb23d4", 0xd2}, {&(0x7f0000001940)="8b480b3822d0a4ab8852bad6f5e406c8b5e7d300fa421f960ca88dd023e64723ef5c9b1e66096c03594f131e677eb52c61d47ef2326413a20be0519b68a261b8854955ec226d6037277b4fe80af29e2929379c9b0d2b5e974cb4f9d0aaf6d3f9dcbe8bf4d52af54023303b7a4901f96880170ef92dfdaf39178b3dd574e17114e904a0affaf60d0a721f5685e8659a92baaef86d0ee8d910d1dee84e339c2e1acd1fc4df82fd3b2b53d200", 0xab}, {&(0x7f0000001a00)="e0f557c7582d955d6993cfae6ac6a24257a43a25eec68062bc485fa09933d617e41bcf6a087378f5d357640919f2bccf9f6639273cce3840858fd5637d63cf75528e66a833482e5109478dc75467cc", 0x4f}, {&(0x7f0000001a80)="baa45bd4082c69792d586060d47139f9ad0622707b32010dbaaaba0a98d3adcdb4fdf98f9a76bc18c6b0da25c0597a9f6fbf0dc1ce3ae97ef68f5490a6c149c1dade1c1ed8a6f809e0684170a8fc53edd375a1113bae5792d81900fa468083f0efb7a2f4e9", 0x65}], 0xa, &(0x7f0000002280)=[@cred={0x20, 0x1, 0x2, r31, r32, r33}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @cred={0x20, 0x1, 0x2, r37, r38, r39}, @cred={0x20, 0x1, 0x2, r40, r41, r42}, @cred={0x20, 0x1, 0x2, r43, r44, r45}, @rights={0x18, 0x1, 0x1, [r46, r47]}], 0xb8, 0x2000c004}, {&(0x7f0000002340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000023c0)="c1404ad57f6551b5ac2f6da6d8f66902eddc8d972cabb90e24a59f25af5249633f4898835990a2c2f72031416158f5aa15b724b17b9c8b16c369a8de35deaec4e1e059e0e592eff5de4c4938d7c3b79c370841641bfc4fa02c1f67604d15a86e8d9e164117ce3da1d7d405dca2a47c4e4bd1bc81ac3985e103bb14ee6f77e76f3d7eb1fb7251c2da7c1b5fffe844edbfe7cce1dcdfb9e64774e111d6fe82c7e84d769193ac90d5f2360ae27e6fb9ec7b926f8702fa0a5f301828450b49478f284edde2c5cb0750b13d84058b671d8fa683d7b07dcf6ec50041b40c27", 0xdc}, {&(0x7f00000024c0)}, {&(0x7f0000002500)="6c5aefb3223cba69861c75b45f3c5eabb776560367c53e072bab73c9537db1ad0c11b9bbd44c3b61936575ac468ad19497afde99570d854b96a7cd14c4a243736b63faaa0f8883763306cee39b78b54890264baef76e034585ece5bc2cfdd67e315209dbfc5f87fd6255e4574e2af6e2ee148a9f9d88c98b1afd36d1535213f4200815f52210faa6bed61f5bd677a8761d0dd16b5ee3622196dfbabfc254f543da9de9eeaa2ede56a9e7641189231d94118a15724b085aff0c4fb78a39d76a3f3f51", 0xc2}, {&(0x7f0000002600)="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", 0xfe}, {&(0x7f0000002700)="55a438e4126f2770dfaba45a4eacfc2addf34420a1097493981278551bef87c0c9d08d7aad83d9eb7b52", 0x2a}, {&(0x7f0000002740)="72556e75a070bfdfed06542c531d473561750dea47141df3ccd8c0c9d2f0e1297ab35fb52811f385c174309950a3eb528c8c1e3e993630ebfc3edb8d124b158e5f4252473b6b96191cc86f0038ca24c52d35d143c69882d515b2ca1adafb558becac7e930c061f4e0a25580c4fa47fd248efcf02a065994497b1428852d3462d2e32e7af2020062acd61becbce99500fc8cc3bda6b827cb46e8005a402f09607d1eada954fde0007", 0xa8}, {&(0x7f0000002800)="b39a0385f7c25786bde99f9a52c4e1745e5066452495e2", 0x17}, {&(0x7f0000002840)="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", 0x1000}], 0x8, &(0x7f0000003f80)=[@cred={0x20, 0x1, 0x2, r48, r49, r50}, @rights={0x18, 0x1, 0x1, [r51, r52]}, @rights={0x20, 0x1, 0x1, [r53, r54, r55, r56]}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r57, r58, r59}, @cred={0x20, 0x1, 0x2, r60, r61, r62}], 0xa8, 0x800}, {&(0x7f0000004040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004440)=[{&(0x7f00000040c0)="38c80a8424449220678958dd9a89813213d4d01c5d96e61c2410737212462064e247207dd87ee0240040d14e7cbb6d3851eb6983f312e0956ab131e74afd49665b69fdb3e0297d2b44ed7f57f4ea3641d8f2c20640e977caea6aa59f90a15a8f480fce342ebb529d71a584be1065360a4007236df84a7b39971193c15a198f144977060b41", 0x85}, {&(0x7f0000004180)="3cf655a23562f3f998fd0d9822f371f2570933113971ba715bbfa982e14b599a2cdeaa735c2b7a45fc570ef3712fda7fa53d1da508a435f8ba903a7dc9055fa40ac18983104dde462da31b29ec4fd1555b6417f5ce95f7ca83fe84dda317d8a6a4b620b8", 0x64}, {&(0x7f0000004200)="069cbc7726f522c6ec831a4f071e00989bd76fa9806e36980287e5814c1eba49de574a848ad1f0e560b37713b7796d203f422adb464dd03b2f52c567e7c040684ec6c1e272ffe656d90ebd33502d1ca614b8a4898c46b9fca5040c52f4939e742fc15446653a4082d6976fa694e69f8e979fba734fb3149f1856173973a5102fc435bdc7cdfd92a34249369b7eda7b66e98f1920108ef0c6935f84488281965b825ef8d70f913e0c7f8c3ef5e9c6ef3bc26c579e39c4016b4913f1a0accb70831139c124023ca61ad5f28e3e26508e6acab9", 0xd2}, {&(0x7f0000004300)="e8a8eb2c1b83c5176745209a6fe219d5d6c88efe8264e377542aeaecbbe9c041f2fe9d6713a8e6280e4785c87ca6d3f7afa716a94159f8edcadd69ab9ea2b421b2906fb4ead7d86d03daf2737e26fa0e72afe7b0a5040be28cbd359c81870ff7d84e0c7ddf7f2bc0bf7d7bd584fa139e652d15e034b1039748f24576114da2d84524e09fa74e8dbe4b2971671304c0f08e515936aef5b5be981823acf7ccd96aaacd60e95ff04d411e67d2a26b70d7d0e59931c328ca8a4bbac674110b563b9f4bddb6a3821a84173a47b4b8d5f99d13226f863044916b9380cbfdb6eb5babb7390e69506d0b95e9d3fd3014b52f5e", 0xef}, {&(0x7f0000004400)="cc55b4b890314e26ffcc2008f553bd8f438b7b774d4e8b8699abd2dc16d13a64e2833eaf451f30f7596a1276ed5b58cc2ccaf5d80718da472483eac9", 0x3c}], 0x5, &(0x7f00000044c0), 0x0, 0x4}, {&(0x7f0000004500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004580)="87ebcc541945226503ac9525508d0f15f1087ce01138d2ad03b9a4c314d254f1722f881b2f6a04633f9cb1fc46aaa467e1f775f955b748ffd309d7b6b63dd4ba9754", 0x42}, {&(0x7f0000004600)}, {&(0x7f0000004640)="33897497fb0c1064baf755acbfe4c448d7bc842f262654e11b2f41d478e2f77af77c56aa5a902e136073a8c7af3fa715cc47b624a121c983888fb24a8c22153bd2edc83a86a1b7c561b56bb134e05c6c5c5f85e4cd1e158b3d9685ff31f4fabe0a31c0e6f7bbe401c013a07b896295d0cf287e11f2c354226ded2c36417eea3589e7d5f2e561d18cc116f527caf27028c4f2eda5c100f742088731c6b58c79b762e9857e9a654bb808eac1ce07150a90da880345e4a0ae04e610f486901dd9f2a2ac28655b5cde35d1c6111de38310dc0edc9c7ece3cb92b99b71fe32532d3428f", 0xe1}, {&(0x7f0000004740)="8ca2d1d75655a7dc461a57bf4dffdea3fae411b810c8208440db7fc4a6a700865ecde615138f42359122c69783e7aa27276ac0fb3b92645986b157436fd1cbf7de0dd7fae62611cd92ae7e790206732ff9660d0d938b3468452a142b0fe0e61c52b702fd358c27fa3dd199278875c50e5f66415e13ee73b6daa6", 0x7a}, {&(0x7f00000047c0)="1d4f14362754c380f3551e1855a0f28ae49c6bb357a444f10e54bee35b040140a6f964aa23867cedf839e7fdb68ff68bc48621d09c0453a7462e2f6f7faa462262060f1448313bd3741bb192b34364120ea1be8d04b6b8c49ed495cc372abfbf38672682b0f662bd774143ac90e9fafa98", 0x71}], 0x5, &(0x7f0000004e40)=[@cred={0x20, 0x1, 0x2, r63, r64, r65}, @rights={0x18, 0x1, 0x1, [r66]}, @rights={0x20, 0x1, 0x1, [r67, r68, r69]}, @rights={0x28, 0x1, 0x1, [r70, r71, r72, r73, r74]}, @rights={0x18, 0x1, 0x1, [r75, r76]}, @cred={0x20, 0x1, 0x2, r77, r78, r79}], 0xb8, 0x4040054}, {&(0x7f0000004f00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005380)=[{&(0x7f0000004f80)="4ca58c714d96d3f49879710576cb64195df86108f9e83d4959ead6d26350eaae83c197c573e1d08be547c62baa71a146df8f14a5f3d5a6ca6fd7daf3c7800ca58cdc5436ffcf3dfc134c917175b0712d74972efb78ca8b14c6b4b6f0c092f45179d727ed5fb41335b8a06ed6e13412fdc6df8a", 0x73}, {&(0x7f0000005000)="e197dc376e621968239b97a8659bed788b8d21839a0a569fd14b895c8e555fbdf457fd9eea56dfb7258dc5659e52d090356df56a403d852895d5d102dcce36b45a24342bda6b068eb9c321e4f2e35ef0f8ed2b831285ee96058e597c7e89d29ee210875d09effe90ec011b2e12b67fb12f131e538771dc9b339a8197a3397ad7a9615e7304e575557dc9d30a573b5d25f5bb7dfb82ed546127788ca1467ffb32323ea8f01eb6", 0xa6}, {&(0x7f00000050c0)="23fdb8fc62499fe2a1f47d7152c05c89d1ab39508d513767f15b814c1ad3f1a0", 0x20}, {&(0x7f0000005100)="3a5bc755dcb5dfb80816c63b9bbd373f1fb8480d70fc8917024935138407f9acc1eebab031b29677aa19ad38d437fe09c121e7f7b4fa2a5789c9820049b0a1430d6d49bb54b87a8df6673cf73f737516454a546bf172d3daf061b9b40d5270", 0x5f}, {&(0x7f0000005180)="dd2ea0085fe9776c56aaa0dfdac021a53c9fed78fc967aae3e660cf04f858aa61350c255d96cab8b6ebe0030557a424ddf7285d9b75f835dae5dd947c6ef8e3c9f86a19ce9252bf8f407157521a958fbea6648cc6d45c521c47bdb14b0b74a70ea78e46a7bce3e003bdfefb06473f9766853726bf60704f2e11629f5789c71deeedcc028398a5b236e915b23218829ceab406a7d276824805e5f9f4fdbbe2bb270a53774b4e3e3b323e5e903e1814b42016f9cb0e3098c77e820afe863c4b16d4e1b020875fb1d79159a2de2ff5bb4ba", 0xd0}, {&(0x7f0000005280)="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", 0xfa}], 0x6, &(0x7f0000005900)=[@cred={0x20, 0x1, 0x2, r80, r81, r82}, @cred={0x20, 0x1, 0x2, r83, r84, r85}, @rights={0x18, 0x1, 0x1, [r86, r87]}, @cred={0x20, 0x1, 0x2, r88, r89, r90}], 0x78, 0x4040}], 0x7, 0x4000001) r91 = socket(0x20002000000010, 0x802, 0x0) r92 = dup(r91) write(r92, &(0x7f0000000000)="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", 0xfc) 21:16:02 executing program 0: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000540)="a60158c1d574ca1866c271777a1d8a022b93bb24bbb2c2c92af13a68dc3e9d4281a841a28976bff45fd4649998c1b165742b4a5d73eb4fb202dac4fd5bca10d7e0c27a7aa3c787f9", 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) sysfs$1(0x1, &(0x7f0000000040)='\x18\xe2\xa7\x0f\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\f') 21:16:02 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x83, 0x80, 0x4, 0x1, 0x8000, 0x4}) unshare(0x8000200) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) 21:16:02 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'vlan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'nr0\x00', 0x4000}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000a00)={0x1, 0x0, {0x1, 0x8, 0x201f, 0x7, 0xc, 0x4, 0x0, 0x7}}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'caif0\x00', 0x2}, 0x18) r2 = socket(0xc, 0x4, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000a80)={'raw\x00', 0x2, [{}, {}]}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000b00)=0x9, 0x4) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)={0x0, 0x0}) process_vm_writev(r4, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0xfffffffffffffd99}], 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x22) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:16:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005c00110000000000000000000000000000000001ac1414aa000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000a00000000000000000000000000"], 0x4}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x80000) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0xa, 0xffffffffffffff86, 0xc25}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'proc--!'}, {0x20, 'systemsystem)md5sum^)bdevvboxnet0lo^#)'}, {0x20, '/dev/input/mouse#\x00'}, {0x20, 'eselinux-vmnet0mime_type-'}, {}, {0x20, '/dev/qat_adf_ctl\x00'}, {}, {0x20, '/dev/dmmidi#\x00'}], 0xa, "7d3e3a0ca0668a470ed0766c66551f8734a0383716b4c9b77d50bfd507623cb0eaa27823ac3104698a1a6b9091c179f38892f6409248fbbcea5e433c24e97f0caeb42e0358301d8f7d4d593558696b50ab700b06d74d3ee90a06f96b101c273fcf25fdbf71c7d7e4d92894a59156d00bb6381358c0817f038fca355f0f9ad07dad8675d567da70e988e38e7f"}, 0x115) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x2000) 21:16:02 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4c082, 0x0) r4 = getpgrp(0x0) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, 0x5, {{0x0, 0x400, 0x3, r4}}}, 0x28) listen(r1, 0x0) 21:16:02 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x4000000000b, @pix_mp}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0xfff, 0x8, 0x1, 0x1, 0xb5, 0x400, 0x3, 0x7, 0x2, 0x5, 0xeb, 0x2c, 0x8f, 0xfffffffffffffffa, 0x8, 0x2}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 21:16:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00\x06\x04', &(0x7f0000000040)=ANY=[@ANYBLOB="3700000000000000fdffffffffffff781afffee642e4da0f65aa6eff"]}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x10000) prctl$PR_SET_ENDIAN(0x14, 0x1) 21:16:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, &(0x7f00000000c0)='-\x00') r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) 21:16:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_bond\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="6dff9f046cf1feb3179dfaee9dc36f7240f659d2487718e3424f9a63a3534066be30e06b06f3e810170783a027b0614306702658", 0x34}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 21:16:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:02 executing program 2: unshare(0x8000400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4400) 21:16:02 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x80, &(0x7f00000003c0)=[{}, {&(0x7f0000000140)="b77aac3ac3985f46e0f203adee5195ae9d", 0x11}, {&(0x7f0000000080)="b008216cd6b437eb6e3522468b50639ed861632c6439ab3146863400c67b3c40a7e4213817cedf4dbffeca2dba42dab34725", 0x32}, {&(0x7f0000000200)="119251f892646555878259ddd73aa41a98fdf78561541c88fdd31e2eb81961d9a1085d869813be54b7fdd20104621fc98b724e4b7392ca066458ab948573b2e9732047c3cdf118044eb112dee0c9cd128e54e75c4e862765e98650c38dbe83b4ada242c0da5b64965219edebf3ed97683cfcebfcadf2f6849fc28f6d6955686c02361f69b255253a24b2803f0a2cecc7c02ca204212d62e21e12c70e1a154a0a17228f4801bb157cb40cb2d9a49edc3bac32605641389db1afa8db271e31690b83b512856f51a80668649de81f89cf90d0ec4ace3abab50871f285247fbe4766f73f7571aee91d8252efd42622a2e1cb8f", 0xf1}, {&(0x7f0000000100)="af9c230e6166bc7a4d24688c2821b54d0013029c7c1be7fa3c6d53d40e3a38e4ca188120dea4a03b13233ce5d78e", 0x2e}, {&(0x7f0000000300)="44368bb0c0932b1cff7aa00fd57bb3687f757e1ef21c5018ac7928550d467cb79dec479de867bda337e571714a31b840ec6da5a5a0ce0f01a4424c3ba357bbd5afecf20d1c8b2b18fbee0dcc55430d89c5f8190e0615b76a5edc1905505819812f94bcf1fb631a68adb511dd68ec47bbd09c04f794431559726c2cac6c98e5a35bb32ff87b27e0ede9e238553d1f39b8d13309fd0be8c93b4ec5b09b4708cd71e482ddb9a3f135718f4c31a8a7739a8c045b038595474cb88ab9", 0xba}], 0x6, &(0x7f0000007b00)}}], 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) 21:16:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00\x06\x04', &(0x7f0000000040)=ANY=[@ANYBLOB="3700000000000000fdffffffffffff781afffee642e4da0f65aa6eff"]}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x10000) prctl$PR_SET_ENDIAN(0x14, 0x1) 21:16:02 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) dup2(r3, r1) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={r4, 0x7fffd, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)={0x0, r5, 0x80000000}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={r5, r7}) signalfd(r1, &(0x7f0000000140)={0x2}, 0x8) 21:16:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tee(r2, r1, 0x0, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x6, @local, 0x80000001}, {0xa, 0x4e23, 0x1ff, @ipv4={[], [], @empty}, 0x2}, 0x8, [0xa0, 0x400, 0x3ff, 0x7fffffff, 0xffffffff, 0x6, 0x5a, 0xa7]}, 0x5c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xb4, @ipv4={[], [], @multicast2}, 0x92a9}, 0xfffffdac) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 21:16:03 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) linkat(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x400) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="06012abd7000fddbdf250a0000000c00070008000200ff07000024000200080002007f0000000800020001000000080002000189cf5c880ea2420cb70000100004000c00010073797a30000000003c0007000800020008000000080002000700000008000100ffffffff0800010001000000080001005cd3bca5f547d84dd44b070f00000800010040000000080002000400000034000200080002000500000008000200ff7f000004000400080001000200000008000200bb0000000400040008000200faffffff"], 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'dummy0\x00', 0x400}) socket$nl_xfrm(0x10, 0x3, 0x6) 21:16:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x70}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x9e, &(0x7f00001a7f05)=""/251}, 0x48) sync_file_range(r0, 0x6, 0x8d4, 0x1) 21:16:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa2302, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x101, 0x8001}, {0x0, 0x4d3a}, 0x9, 0x4, 0x100000001}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2040) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000040)={0x6, 0x4}) sendto$inet(r0, 0x0, 0x0, 0x20005000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'filter\x00'}, &(0x7f00000000c0)=0x78) 21:16:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:03 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x3d) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x8, 0x0, 0x9}) ioctl$BLKROSET(r0, 0x933, &(0x7f0000000000)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200)) 21:16:03 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa0340, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @local}]}, &(0x7f00000001c0)=0x10) 21:16:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0x10, 0x800, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80, 0x80800) r3 = getpgrp(0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000200)={r1, r2, 0x9}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007f1dfd0000b2a4a280930a06000000a84309910000000e000000000000efaf156438d54400f4386f30d1d75afb83de448daa7227c43ab8220000060cec4fab91d440f936634b04294fc1b5f5f9c701", 0x55}], 0x1}, 0x0) 21:16:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b4b92e1fd9b363b0cb4c14ea48f601a2ee84e1c1cd06161939689cdf0df063aed161a4671608777f2b955f9a0ca2fdd5dfee8a2c7bc70c16fbec0549eb49236407089fa0c7a5f744820aea1a6c0e47e338aac5c2a50d61fbf52f612e8ab257197a", 0x61, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x208000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000280)) 21:16:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x8000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1bc) epoll_create1(0x80000) fcntl$addseals(r0, 0x409, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/166) 21:16:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setpriority(0x2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x1, &(0x7f0000000080)='\x00', r3}, 0x30) 21:16:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x278, 0x0, 0x0, 0x0, 0x300}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 21:16:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) r2 = accept4$inet(r1, &(0x7f0000000380)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10, 0x80000) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000280)={'team0\x00', 0x75}) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r3 = memfd_create(&(0x7f00000000c0)='\x89\x83\xf4N[E\xce\x9cu./\x04\x00ent#\x80', 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000002c0)=""/72) execveat(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0xffc) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0xaad5) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x2) 21:16:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x80000001, 0x4) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x8d) 21:16:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000002c0)={0x5, 0x5}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r4, 0xb00, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x22}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$key(0xf, 0x3, 0x2) io_setup(0x7, &(0x7f00000000c0)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x76, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040), 0x7f916ea5d000}]) 21:16:04 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x8100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x200, 0x8, [0x0, 0x4, 0x400, 0x0, 0x20, 0x1, 0x20, 0x100]}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x5, 0xffffffff, 0x4, 0x7}, &(0x7f00000002c0)=0x98) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x200000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10000, 0x4002) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xfffffffffffffffa}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x9}, 0x8) 21:16:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 21:16:04 executing program 0: unshare(0x8020000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)) 21:16:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="04dc080000003f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x31, &(0x7f0000000040)=@srh, 0x8) 21:16:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x20000cef, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xdf700000000000, 0x400) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x814, 0x4745504d, 0x3, 0x4, 0x2, @stepwise={{0x80000001, 0x10000}, {0x2}, {0x19fb, 0x6}}}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x0, 0x2000000, "c73a91c9878b96693e34e2fd477ee8aa59576743be1ae465", {0x7f, 0xfff}, 0x5}) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/139) 21:16:04 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0x2, &(0x7f0000000180)=0x2) 21:16:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x80000001, 0x7) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x7f, 0xfffffffffffffffb}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1f) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) 21:16:04 executing program 3: r0 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1, 0x232000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x8, {{0x2, 0x4e20, @local}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @empty}}]}, 0x190) io_setup(0x41000000000003, &(0x7f0000000100)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 21:16:05 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x266403, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x6, 0x81, @value=0x37}) r1 = fcntl$getown(r0, 0x9) migrate_pages(r1, 0x0, &(0x7f0000000080)=0xfffffffffffffffc, &(0x7f00000000c0)=0x84b) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0xb44, 0x10001}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000140)={r0, r0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r2, 0x3}, &(0x7f0000000240)=0x8) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000280)={0xa, 0x9, 0x7}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x3, 0x2, 0x7ff, 0x40}, 0x98) write$FUSE_DIRENT(r0, &(0x7f0000000380)={0x88, 0x0, 0x7, [{0x1, 0x800, 0xa, 0x0, '\\+cgroup,@'}, {0x6, 0x5, 0xd, 0x80000001, 'securityuser\''}, {0x0, 0x100000001, 0xa, 0x6, '/dev/null\x00'}]}, 0x88) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='\\+cgroup,@', r0}, 0x10) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000540)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00'}, &(0x7f0000000640)=0x44) connect$inet(r5, &(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000006c0)=@sack_info={r3, 0x5, 0x3}, &(0x7f0000000700)=0xc) kcmp(r1, r1, 0x5, r4, r4) ioctl$VT_RELDISP(r5, 0x5605) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000000740)=""/144, &(0x7f0000000800)=0x90) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendto$inet(r5, &(0x7f00000008c0)="33adeda28351297aed6e18862a656095241196a91a29b9367998f75fe8bce8f27427a6db9fd84c77bccc2a4d6f8d", 0x2e, 0x4008010, &(0x7f0000000900)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r0, &(0x7f0000000940)="4deacaf629373f1d29d27f7955f5e5de68c40b7f04b8b67861741a60deb7", &(0x7f0000000980)="09b55c0bca9112827b3cb9e4866ca6e67e828c8d5fb0193f5552900abf465f5aec291b24174e2b", 0x3}, 0x20) getpeername$unix(r0, &(0x7f0000000a00)=@abs, &(0x7f0000000a80)=0x6e) write$binfmt_aout(r5, &(0x7f0000000ac0)={{0x1cc, 0x81, 0x6cf00000000, 0x1d6, 0x371, 0x9, 0xc6, 0x1ff}, "965c652378585c0be18556b0adc367b275e190173cf60a95a24e357c4782d993fa66a047cd3f86624897f4359c1f20d1cd79d59ae76ff7f2ed20236f949ce17ef0f7609b067b984e357df4b1664b978d103eaa0235f6104c4a3c337d6f1683a698b5def74d89db128ec95aa5", [[], [], []]}, 0x38c) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000f00)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@loopback}}, &(0x7f0000001000)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001040)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001140)=0xe8) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001240)={0x0, @remote, @broadcast}, &(0x7f0000001280)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000012c0)={0x0, @dev}, &(0x7f0000001300)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001500)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x180, r6, 0x412, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x120, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 236.758251] IPVS: ftp: loaded support on port[0] = 21 [ 236.889470] chnl_net:caif_netlink_parms(): no params data found [ 236.950583] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.957174] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.965508] device bridge_slave_0 entered promiscuous mode [ 236.975178] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.981648] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.989765] device bridge_slave_1 entered promiscuous mode [ 237.017283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.028184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.057014] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.065405] team0: Port device team_slave_0 added [ 237.071592] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.079881] team0: Port device team_slave_1 added [ 237.088799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.097264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.168112] device hsr_slave_0 entered promiscuous mode [ 237.212386] device hsr_slave_1 entered promiscuous mode [ 237.272883] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 237.280287] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 237.311020] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.317566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.324615] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.331088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.434709] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 237.440861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.454197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.466461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.475261] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.485610] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.494886] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 237.513862] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 237.520095] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.538020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.546265] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.552801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.587693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.596002] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.602535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.611756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.624779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.633486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.652966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.661009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.675876] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 237.682084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.707302] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 237.728870] 8021q: adding VLAN 0 to HW filter on device batadv0 21:16:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 21:16:07 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x0, 0x1, 0x0, "4801e90327899318f898b9e4dcead95051d0baf7edb24078f4d33aff04ed72de"}) 21:16:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:07 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x400002) msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="087361cc36c81272a3f58062f7a2ae1d6979bcd076f646ea54af118f9ccce4b6c4ad03"], 0x1, 0x0, 0x0) 21:16:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000008000d00000f000008001b0000000000"], 0x1}}, 0x0) 21:16:07 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 21:16:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x9, 0x2, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000)="9f1fa81ad486ce785050a01a3f6a5198ff04b4410ebca1ac5f650a8d429d95a2375e56342c9e6d9a82ecbca2788808c9e4050c1d661c7a92a9618a8d83c73eda5e645db21164c5d9923150dd3784277b", 0x0}, 0x18) 21:16:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000300)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000003c0), 0x4) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:16:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:16:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x2000000229, 0x0, 0x0, 0x4}) 21:16:08 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1f) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 21:16:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x301882, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) stat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x100000000) socket$bt_rfcomm(0x1f, 0x0, 0x3) [ 239.229222] ptrace attach of "/root/syz-executor1"[9554] was attempted by "/root/syz-executor1"[10393] 21:16:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000240)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x3}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000280), 0x3}]) 21:16:08 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0600b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) close(0xffffffffffffffff) 21:16:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000331000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000201000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000c7ff8)=@abs, 0x8) connect$unix(r0, &(0x7f0000d6a000)=@file={0x1, './file0\x00'}, 0xa) 21:16:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) close(r1) 21:16:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e6, 0x0) 21:16:08 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6009, 0x1) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 21:16:08 executing program 0: r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 21:16:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:16:08 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 21:16:09 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) [ 239.934349] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 21:16:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 21:16:09 executing program 2: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") shmctl$IPC_INFO(0x0, 0xb, 0x0) [ 240.092279] protocol 88fb is buggy, dev hsr_slave_0 [ 240.097957] protocol 88fb is buggy, dev hsr_slave_1 21:16:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000337) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:\xb4(-$\xde`\x97\x8c\xe6\xcd\x8d\x99\x03\xe5u\x97\x14\xb0\xd6\xd0\xae\xcf\xd9\x1e\x1f\xd00=#\xa3\xd4v\xd8\xbdj\x10(\xb6\xf7\x15\xe1\x88\xe7]\xca\xdc\x02\xdc\v\xbd@T\xea\xb7XmW\xffk\xc4\x96M|\xf1\x1f\xfa$\xf8IW\xc4J\xc6\xf0_\xc3\x86\x0f\xbd\x83V\x9ar\x02\xbf\xa0+\xe2.i\x7fP\xebnW\x90\x8d\xc5\xc7w\t\xeb\xd9\xec\xd8\x87WA\xee\x15O]\xafI\x03\x9b\x9f\"\x1c\vMdKm\x7f$\"cIB#\xe1Zt\xc7\xc7\x9f\xa0\xd3\x18\x1d\t\xee\x86\xe8\xda\xae\xeeo\xf8s6WK5:\a\xa5\x89\x9a8\xb4\'\xf7\a\xe6\xbe\"<\xd2IS\x04\xb4\xb4\xee\x80\a\x9d\x1b\x15\xfa\xadAB\xdf\x17l\'7\xf9[\xe17\xcb\xdcF\x87\xddW[#\xa5\x1cK&\x13\x1cF\x0e\xd5O\xf3\xd9\xc1\x0eYwk}\xbc \xe8\xd0l\xe1\xe2\x9a\x84') [ 240.212884] binder: 10465:10467 Acquire 1 refcount change on invalid ref 0 ret -22 [ 240.224361] binder: 10467 RLIMIT_NICE not set [ 240.272482] binder: 10465:10469 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 21:16:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:09 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60"], 0x1, 0x0, 0x0) 21:16:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) dup2(r1, r0) 21:16:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x2b) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:16:09 executing program 5: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) syz_execute_func(&(0x7f0000000080)="64ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c401c9e42bc442019dccd3196f") execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) write$9p(r1, 0x0, 0x0) ptrace(0x11, r0) 21:16:09 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08"], 0x12}, 0x0) 21:16:09 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 21:16:10 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6009, 0x1) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) [ 240.931875] binder: 10506 RLIMIT_NICE not set [ 240.937191] binder: 10506 RLIMIT_NICE not set [ 241.006354] binder: 10465:10511 Acquire 1 refcount change on invalid ref 0 ret -22 [ 241.020925] binder: 10511 RLIMIT_NICE not set [ 241.030115] binder: 10465:10512 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 21:16:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x501, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\xf0'}]}]}, 0x20}}, 0x0) 21:16:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r1, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}}, 0x0) 21:16:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 241.149211] binder: 10516:10518 ioctl c0306201 0 returned -14 [ 241.217482] binder: 10516:10526 BC_DEAD_BINDER_DONE 0000000000000000 not found 21:16:10 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 21:16:10 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200123275781e073703a1989b34a3c084ed2ff082bd3e47e8f7fa79cb9305b87c00049b4bafb5cc69128894e75af8c0b26ef2c2df6badbb2d17b51efc484b6637ba"], 0x1, 0x0, 0x0) 21:16:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:10 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08869c"], 0x14}, 0x0) 21:16:10 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(0xffffffffffffffff, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 21:16:10 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b5"], 0xc}, 0x0) [ 241.721500] binder: 10508 RLIMIT_NICE not set 21:16:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000331000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000201000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000c7ff8)=@abs, 0x8) connect$unix(r0, &(0x7f0000d6a000)=@file={0x1, './file0\x00'}, 0xa) 21:16:10 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9365753d794919c"], 0x1, 0x0}, 0x0) 21:16:10 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9365753d794919ca255"], 0x1, 0x0}, 0x0) 21:16:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 21:16:11 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) [ 241.932743] binder: 10516:10526 ioctl c0306201 0 returned -14 [ 241.959676] binder: 10516:10562 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 242.010939] binder: 10566 RLIMIT_NICE not set [ 242.038247] binder: 10566 RLIMIT_NICE not set 21:16:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffffffffffff}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 21:16:11 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64"], 0x1, 0x0, 0x0) [ 242.100718] binder: 10571 RLIMIT_NICE not set [ 242.106136] binder: 10565:10566 unknown command 536872576 [ 242.111947] binder: 10565:10566 ioctl c0306201 20008fd0 returned -22 21:16:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000a40)='/dev/vbi#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 21:16:11 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce16087dcf944e3bd1a2d", @ANYRESHEX], 0x2, 0x0, 0x0) 21:16:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 21:16:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") socket(0x9, 0x0, 0x0) 21:16:11 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:16:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x301882, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) stat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) 21:16:11 executing program 0: pipe(0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x36}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:16:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 21:16:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x301882, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) stat(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x900000000000000) socket$bt_rfcomm(0x1f, 0x0, 0x3) [ 242.796106] ptrace attach of "/root/syz-executor0"[10612] was attempted by "/root/syz-executor0"[10613] 21:16:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2, 0x0, 0x6052, r1, 0x2000) 21:16:12 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e"], 0x1, 0x0, 0x0) 21:16:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:12 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000197f24acc233eeae0750e03690e37cd418e50fc4909103cc53e038db282d67"], 0x1, 0x0, 0x0) 21:16:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x100000000098f907}) 21:16:12 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) 21:16:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 21:16:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:12 executing program 2: clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) exit_group(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x800000200000, @remote}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5c) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) [ 243.727568] x86/PAT: syz-executor1:10646 map pfn RAM range req write-combining for [mem 0x5ab02000-0x5ab02fff], got write-back 21:16:12 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:16:12 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000197f24acc233eeae0750e03690e37cd418e50fc4909103cc53e038db282d676a680268600f172c"], 0x1, 0x0, 0x0) [ 243.872522] x86/PAT: syz-executor1:10658 map pfn RAM range req write-combining for [mem 0x5ab02000-0x5ab02fff], got write-back [ 243.897181] binder: 10652:10654 Acquire 1 refcount change on invalid ref 0 ret -22 [ 243.923301] binder: 10652:10654 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 243.932846] binder: 10652:10654 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 243.967407] binder: 10652:10669 Acquire 1 refcount change on invalid ref 0 ret -22 [ 244.003104] binder: 10652:10669 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 21:16:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001d000d0fac00000000000000010000000c000100080000006120832ebd4590a670fac4e54d07ab240a778872ce42d50e16400801499331e185f43a5f9533", @ANYRES32=0x0], 0x2}}, 0x0) 21:16:13 executing program 1: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 244.013124] binder: 10652:10654 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 21:16:13 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c"], 0x1, 0x0, 0x0) 21:16:13 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup2(r1, r0) 21:16:13 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08869c01ed81c276f192c9fb19debe3a6c65c15215b8864abdf9b0b327404e87ec7221742ad82154301bf8205622f92319"], 0x42}, 0x0) 21:16:13 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000180)=""/67, 0x10310) flock(r0, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x400002) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="087361cc8b88e857b8f9f904e8292f36c894b7"], 0x1, 0x0, 0x0) 21:16:13 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r0, 0x0, 0x0, @ib={0x1b, 0x800, 0x0, {"628c63511fea0cddf05a67e184f9e9f4"}, 0x356, 0xa72, 0x7}}}, 0x90) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) getpid() setxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0) 21:16:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) [ 244.683710] audit: type=1326 audit(1546463773.736:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 244.765547] audit: type=1326 audit(1546463773.756:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.787160] audit: type=1326 audit(1546463773.756:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.808489] audit: type=1326 audit(1546463773.756:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.829892] audit: type=1326 audit(1546463773.756:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 21:16:13 executing program 5: 21:16:13 executing program 3: 21:16:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) [ 244.853103] audit: type=1326 audit(1546463773.756:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.874414] audit: type=1326 audit(1546463773.756:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.895725] audit: type=1326 audit(1546463773.756:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.917025] audit: type=1326 audit(1546463773.756:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 244.938394] audit: type=1326 audit(1546463773.756:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10701 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 21:16:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:14 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000140)={0x0, 0xfe, 0x1a0, 0x0}) 21:16:14 executing program 3: 21:16:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 21:16:14 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff719) prctl$PR_GET_TIMERSLACK(0x1e) 21:16:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:14 executing program 0: 21:16:14 executing program 3: [ 245.763746] binder: 10741 RLIMIT_NICE not set [ 245.769226] binder: 10741 RLIMIT_NICE not set 21:16:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:14 executing program 1: 21:16:15 executing program 3: 21:16:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:15 executing program 1: 21:16:15 executing program 0: 21:16:15 executing program 0: 21:16:15 executing program 5: [ 246.493256] binder: 10732:10744 tried to acquire reference to desc 0, got 1 instead [ 246.502917] binder: 10744 RLIMIT_NICE not set [ 246.508027] binder: undelivered death notification, 0000000000000000 21:16:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:15 executing program 1: 21:16:15 executing program 3: 21:16:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:15 executing program 0: 21:16:15 executing program 1: 21:16:15 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9365753d794919ca25597985ca83cf4d819f438a7a6c6b7b09a42bfd0c60c7d7b"], 0x1, 0x0}, 0x0) 21:16:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:15 executing program 5: 21:16:15 executing program 3: 21:16:15 executing program 5: 21:16:15 executing program 1: 21:16:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:16 executing program 3: 21:16:16 executing program 0: 21:16:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(0x0, &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:16 executing program 5: 21:16:16 executing program 1: 21:16:16 executing program 3: 21:16:16 executing program 5: 21:16:16 executing program 1: 21:16:16 executing program 0: 21:16:16 executing program 1: 21:16:16 executing program 5: 21:16:17 executing program 3: 21:16:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:17 executing program 1: 21:16:17 executing program 5: 21:16:17 executing program 0: 21:16:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:17 executing program 0: 21:16:17 executing program 3: 21:16:17 executing program 5: 21:16:17 executing program 1: 21:16:17 executing program 0: 21:16:17 executing program 3: 21:16:17 executing program 0: 21:16:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:18 executing program 5: 21:16:18 executing program 3: 21:16:18 executing program 1: 21:16:18 executing program 0: 21:16:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:18 executing program 5: 21:16:18 executing program 0: 21:16:18 executing program 3: 21:16:18 executing program 1: 21:16:18 executing program 1: 21:16:18 executing program 0: 21:16:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:19 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vfio/vfio\x00', 0x82, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000180)='G', 0x1}], 0x1) 21:16:19 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x932, 0x0) 21:16:19 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 21:16:19 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a06"], 0x1, 0x0}, 0x0) 21:16:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:19 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c20"], 0x1, 0x0, 0x0) 21:16:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x18\x00\x00\x00\xe3[\xf8\x00\x00\x82\n\xb6\rw\x03\xb8\xab\xda\x81\xab*\x86\x04\xf5\xa0\xc4\\U\x8d\xf55\xd4g\x11\xf2\x8f\xe6\n', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000006) 21:16:19 executing program 3: 21:16:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:19 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08869c01ed81c276f192c9fb19debe3a6c65c15215b8864abdf9b0b327404e87ec7221742ad8215430"], 0x3a}, 0x0) 21:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x2, 0x138, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1f, 0x0, 0x0, 'hwsim0\x00', 'bond0\x00', 'eql\x00', 'erspan0\x00', @remote, [], @local, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@remote}}}}]}]}, 0x1b0) [ 250.870664] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 250.896606] kernel msg: ebtables bug: please report to author: Total nentries is wrong 21:16:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:20 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000740), 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0x0) 21:16:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:20 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x18\x00\x00\x00\xe3[\xf8\x00\x00\x82\n\xb6\rw\x03\xb8\xab\xda\x81\xab*\x86\x04\xf5\xa0\xc4\\U\x8d\xf55\xd4g\x11\xf2\x8f\xe6\n', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000006) 21:16:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 21:16:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x402001, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x100) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x314, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='nfs4\x00', 0x0, &(0x7f0000000300)='rdma') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x3f, 0x6, 0x7, 0x574, 0x6, 0x1}) 21:16:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 251.465898] binder: 10960 RLIMIT_NICE not set [ 251.481243] binder: 10960 RLIMIT_NICE not set 21:16:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x3, @local}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58114347b289546465a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d6", 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() dup2(r1, r0) tkill(r2, 0x14) [ 252.204022] binder: 10955:10964 tried to acquire reference to desc 0, got 1 instead [ 252.213253] binder: 10964 RLIMIT_NICE not set [ 252.214608] binder: 10955:10982 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 252.311992] binder: undelivered death notification, 0000000000000000 21:16:23 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce16087dcf944e3bd1a2d"], 0x1, 0x0, 0x0) 21:16:23 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:23 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000000021fe4ac14", 0xe}], 0x1}, 0x0) 21:16:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000740), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0x2) 21:16:23 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000197f24acc233eeae0750e03690e37cd418e50fc4909103cc53e038db282d676a680268600f17"], 0x1, 0x0, 0x0) 21:16:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)='dev ', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa}) 21:16:23 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x100001, 0x0, 0x0, 0xfffffffffffffffb, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:16:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') 21:16:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:26 executing program 5: prctl$PR_SET_UNALIGN(0x6, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') fcntl$lock(r0, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) fchdir(r0) getdents64(r0, &(0x7f0000000200)=""/116, 0x184) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x0, 0x0, 0x1000, 0x4}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000007c0)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0x10001, 0x3, 0xfff, 0x3, 0x9}, &(0x7f0000000180)=0x98) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000280)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 21:16:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:26 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:26 executing program 0: pipe(0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x36}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:16:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:26 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) get_robust_list(0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_ENDIAN(0x14, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) [ 257.428795] ptrace attach of "/root/syz-executor0"[11044] was attempted by "/root/syz-executor0"[11046] 21:16:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 257.635827] binder: 11067 RLIMIT_NICE not set [ 257.640521] binder: 11067 RLIMIT_NICE not set [ 257.667421] binder: 11067 RLIMIT_NICE not set [ 257.672242] binder: 11066:11067 got transaction with invalid data ptr 21:16:26 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/140, 0x8c}, {0x0}, {0x0}], 0x3, 0x0) [ 257.678930] binder: 11066:11067 transaction failed 29201/-14, size 96-0 line 2991 [ 257.686829] binder: send failed reply for transaction 17 to 11066:11067 21:16:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 257.830782] binder: undelivered TRANSACTION_ERROR: 29190 [ 257.839727] binder: undelivered TRANSACTION_COMPLETE [ 257.845171] binder: undelivered TRANSACTION_ERROR: 29201 21:16:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:29 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x80000000000d) 21:16:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) [ 260.496755] binder: 11087 RLIMIT_NICE not set [ 260.501441] binder: 11087 RLIMIT_NICE not set [ 260.535912] binder: 11087 RLIMIT_NICE not set 21:16:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 260.540722] binder: 11083:11087 got transaction with invalid data ptr [ 260.547556] binder: 11083:11087 transaction failed 29201/-14, size 96-0 line 2991 [ 260.555322] binder: send failed reply for transaction 20 to 11083:11087 21:16:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 260.666555] binder: undelivered TRANSACTION_COMPLETE [ 260.672091] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.680973] binder: undelivered TRANSACTION_ERROR: 29190 21:16:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 260.790036] binder: 11105 RLIMIT_NICE not set [ 260.794988] binder: 11105 RLIMIT_NICE not set [ 260.804223] binder: 11105 RLIMIT_NICE not set [ 260.809109] binder: 11104:11105 got transaction with invalid data ptr [ 260.815879] binder: 11104:11105 transaction failed 29201/-14, size 96-0 line 2991 [ 260.823643] binder: send failed reply for transaction 23 to 11104:11105 21:16:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 260.874908] binder: undelivered TRANSACTION_COMPLETE [ 260.880328] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.888097] binder: undelivered TRANSACTION_ERROR: 29190 21:16:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 260.925751] binder: 11110 RLIMIT_NICE not set [ 260.932120] binder: 11109:11110 got transaction with invalid data ptr [ 260.938807] binder: 11109:11110 transaction failed 29201/-14, size 96-0 line 2991 [ 260.946576] binder: send failed reply for transaction 26 to 11109:11110 21:16:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 261.051437] binder: undelivered TRANSACTION_COMPLETE [ 261.056884] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.067817] binder: undelivered TRANSACTION_ERROR: 29190 [ 261.166523] binder_alloc: 11116: binder_alloc_buf, no vma [ 261.172288] binder: 11116:11117 transaction failed 29189/-3, size 96-0 line 2973 [ 261.179869] binder: send failed reply for transaction 29 to 11116:11117 [ 261.199309] binder: undelivered TRANSACTION_COMPLETE [ 261.205682] binder: undelivered TRANSACTION_ERROR: 29189 [ 261.267542] binder: undelivered TRANSACTION_ERROR: 29190 21:16:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:32 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x200, 0x0) execveat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000700)=[&(0x7f0000000500)='/dev/sequencer2\x00', &(0x7f00000005c0)='vboxnet1ppp1security\x00', &(0x7f0000000600)='/dev/null\x00', &(0x7f0000000680)='#eth1!:\x00', &(0x7f00000006c0)='self&]{eth0\x00'], &(0x7f0000000940)=[&(0x7f0000000740)=']eth1cgroup\x00', &(0x7f0000000780)='IPVS\x00', &(0x7f00000007c0)='vboxnet1\x00', &(0x7f0000000840)='cpusetmime_type#\'system.-:*\x00', &(0x7f0000000880)='nodevGPLvmnet0\x00', &(0x7f00000008c0)='IPVS\x00', &(0x7f0000000900)='/dev/sequencer2\x00'], 0x1000) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000002580)=""/4096) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x80, r3, 0x804, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x725}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000000}]}, 0x80}}, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0xa, 0x0, @thr={&(0x7f0000000140)="ae2a8f33e8d3337cee2caa017ad542c698a52b5152128454e3c79db61439fd8f6aad2c468d59fe701c1764d9", 0x0}}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, r2, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1f) r4 = inotify_init1(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000640)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="e00000027f0000010000000002000000ac141400000000007a1c19c72918087b62b6df12336290efbf99f3c4152d73fab0277d8099a17eda90f4ed14ceacb50dafb47f9e957e24b3a80f441919010fe500e9130d1cc21c3cc9f686b905aaa104784f2e2cf04896f2a4e1e049d703be8c3be7c7e255db8118d5"], 0x1) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @dev}, 0x10) [ 263.637285] binder_set_nice: 5 callbacks suppressed [ 263.637300] binder: 11138 RLIMIT_NICE not set [ 263.647069] binder: 11138 RLIMIT_NICE not set [ 263.658155] ptrace attach of "/root/syz-executor0"[9509] was attempted by "/root/syz-executor0"[11132] [ 263.671396] binder: 11138 RLIMIT_NICE not set [ 263.676348] binder_alloc: 11125: binder_alloc_buf, no vma 21:16:32 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 263.682065] binder: 11125:11138 transaction failed 29189/-3, size 96-0 line 2973 [ 263.689652] binder: send failed reply for transaction 32 to 11125:11138 21:16:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) [ 263.729021] ptrace attach of "/root/syz-executor0"[9509] was attempted by "/root/syz-executor0"[11141] [ 263.754935] binder: undelivered TRANSACTION_COMPLETE [ 263.760304] binder: undelivered TRANSACTION_ERROR: 29189 21:16:32 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() dup2(r1, r0) tkill(r2, 0x14) [ 263.824438] binder: undelivered TRANSACTION_ERROR: 29190 [ 263.934735] binder: 11157 RLIMIT_NICE not set [ 263.939402] binder: 11157 RLIMIT_NICE not set [ 263.964225] binder: 11157 RLIMIT_NICE not set [ 263.968892] binder_alloc: 11155: binder_alloc_buf, no vma [ 263.974692] binder: 11155:11157 transaction failed 29189/-3, size 96-0 line 2973 [ 263.982455] binder: send failed reply for transaction 35 to 11155:11157 [ 263.990259] binder: undelivered TRANSACTION_COMPLETE [ 263.996258] binder: undelivered TRANSACTION_ERROR: 29189 21:16:33 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 264.042956] binder: undelivered TRANSACTION_ERROR: 29190 21:16:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000017000000b0ffffff95000000000000001c25228ad28871e389e623ab3d5169e09abefc118964a8ca40fbbcf50f753dd19edcec901191cec3"], 0x0, 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 21:16:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) [ 266.666653] binder: 11169:11175 got reply transaction with no transaction stack [ 266.674385] binder: 11169:11175 transaction failed 29201/-71, size 96-0 line 2741 21:16:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) 21:16:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) [ 266.784144] binder: release 11169:11175 transaction 38 out, still active [ 266.791126] binder: undelivered TRANSACTION_COMPLETE [ 266.808420] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.814213] binder: send failed reply for transaction 38, target dead [ 266.899672] binder: 11189:11195 got reply transaction with no transaction stack [ 266.907496] binder: 11189:11195 transaction failed 29201/-71, size 96-0 line 2741 21:16:36 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000180)=""/67, 0x10310) flock(r0, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x400002) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="087361cc8b88e857b8f9f904e8292f36c8"], 0x1, 0x0, 0x0) 21:16:36 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 266.995966] binder: release 11189:11195 transaction 41 out, still active [ 267.003126] binder: undelivered TRANSACTION_COMPLETE [ 267.019051] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.024742] binder: send failed reply for transaction 41, target dead 21:16:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(0x0, 0x1000000000016) 21:16:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:38 executing program 0: r0 = socket(0x1e, 0x5, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000008000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) 21:16:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:16:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:38 executing program 0: r0 = socket(0x1e, 0x5, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000008000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) [ 269.773578] binder: 11220:11222 got reply transaction with no transaction stack [ 269.781263] binder: 11220:11222 transaction failed 29201/-71, size 96-0 line 2741 21:16:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 269.894536] binder: release 11220:11222 transaction 44 out, still active [ 269.901594] binder: undelivered TRANSACTION_COMPLETE 21:16:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000100)) [ 269.941974] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.947584] binder: send failed reply for transaction 44, target dead [ 269.993354] binder: 11238 RLIMIT_NICE not set 21:16:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 270.039901] binder: 11237:11242 got reply transaction with no transaction stack [ 270.047626] binder: 11237:11242 transaction failed 29201/-71, size 96-0 line 2741 21:16:39 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)=@known='security.capability\x00') 21:16:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(0x0, 0x1000000000016) 21:16:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') write$P9_RREADLINK(r0, 0x0, 0x0) 21:16:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 21:16:39 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:39 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:39 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 270.847973] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.942357] binder: 11284 RLIMIT_NICE not set 21:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 270.989149] binder: 11282:11287 got reply transaction with no transaction stack [ 270.997401] binder: 11282:11287 transaction failed 29201/-71, size 96-0 line 2741 21:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(0x0, 0x1000000000016) 21:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10}, 0x10) 21:16:40 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:40 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 271.784293] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.865357] binder: 11323 RLIMIT_NICE not set 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 271.913437] binder: 11321:11326 got reply transaction with no transaction stack [ 271.921118] binder: 11321:11326 transaction failed 29201/-71, size 96-0 line 2741 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 21:16:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 21:16:41 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:41 executing program 0: getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 272.746949] binder: undelivered TRANSACTION_ERROR: 29201 21:16:41 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f000030b000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(0x0, 0x0) [ 272.852976] binder: 11368 RLIMIT_NICE not set [ 272.857737] binder: 11368 RLIMIT_NICE not set [ 272.879202] binder: 11368 RLIMIT_NICE not set [ 272.884187] binder: 11367:11368 got transaction with invalid data ptr [ 272.890855] binder: 11367:11368 transaction failed 29201/-14, size 96-0 line 2991 21:16:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) [ 272.898639] binder: send failed reply for transaction 53 to 11367:11368 [ 272.949613] binder: undelivered TRANSACTION_COMPLETE [ 272.955159] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.961558] binder: undelivered TRANSACTION_ERROR: 29190 21:16:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:42 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) [ 273.383655] binder: 11383 RLIMIT_NICE not set [ 273.388326] binder: 11383 RLIMIT_NICE not set [ 273.426834] binder: 11383 RLIMIT_NICE not set [ 273.431600] binder: 11381:11383 got transaction with invalid data ptr [ 273.438621] binder: 11381:11383 transaction failed 29201/-14, size 96-0 line 2991 [ 273.446374] binder: send failed reply for transaction 56 to 11381:11383 21:16:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [0x40000020], [0xc1]}) 21:16:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, 0x0) [ 273.624199] binder: undelivered TRANSACTION_COMPLETE [ 273.629685] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.676582] binder: undelivered TRANSACTION_ERROR: 29190 21:16:42 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) [ 273.732633] binder: 11399 RLIMIT_NICE not set [ 273.754521] binder: 11398:11399 got transaction with invalid data ptr [ 273.761421] binder: 11398:11399 transaction failed 29201/-14, size 96-0 line 2991 [ 273.769322] binder: send failed reply for transaction 59 to 11398:11399 21:16:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x0, 0x0, [0x40000020], [0xc1]}) 21:16:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 273.905794] binder: undelivered TRANSACTION_COMPLETE [ 273.911051] binder: undelivered TRANSACTION_ERROR: 29201 21:16:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5414, &(0x7f0000000040)) [ 273.947860] binder: undelivered TRANSACTION_ERROR: 29190 21:16:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x0, 0x0, [0x40000020], [0xc1]}) [ 274.000289] binder: 11411:11412 got transaction with invalid data ptr [ 274.007260] binder: 11411:11412 transaction failed 29201/-14, size 96-0 line 2991 [ 274.015637] binder: send failed reply for transaction 62 to 11411:11412 [ 274.120786] binder: undelivered TRANSACTION_COMPLETE 21:16:43 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:43 executing program 4: syz_emit_ethernet(0x40, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xa, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0xa, 0x0, [], '0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x0, 0x0, [0x40000020], [0xc1]}) 21:16:43 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC], 0x2, 0x0, 0x0) 21:16:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 274.374715] binder: undelivered TRANSACTION_COMPLETE [ 274.485894] binder: 11440:11441 got transaction with invalid data ptr [ 274.492906] binder: 11440:11441 transaction failed 29201/-14, size 96-0 line 2991 [ 274.500592] binder: send failed reply for transaction 68 to 11440:11441 [ 274.562474] binder: undelivered TRANSACTION_COMPLETE 21:16:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [], [0xc1]}) 21:16:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:43 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x2) 21:16:43 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) [ 274.683620] binder: 11448:11449 got reply transaction with no transaction stack 21:16:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 274.875139] binder_transaction: 2 callbacks suppressed [ 274.875168] binder: 11459:11460 transaction failed 29189/-22, size 0-0 line 2834 [ 274.890440] binder: 11459:11460 got reply transaction with no transaction stack [ 274.898188] binder: 11459:11460 transaction failed 29201/-71, size 96-0 line 2741 21:16:44 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 21:16:44 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x2) [ 275.201900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:16:44 executing program 3: unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [], [0xc1]}) 21:16:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:44 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x2) [ 275.267224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:16:44 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x0) [ 275.347319] binder: 11478:11480 transaction failed 29189/-22, size 0-0 line 2834 21:16:44 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x0) 21:16:44 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d8"], 0x9}, 0x0) [ 275.391557] binder_set_nice: 13 callbacks suppressed [ 275.391570] binder: 11480 RLIMIT_NICE not set [ 275.424585] binder: 11478:11480 got reply transaction with no transaction stack [ 275.432403] binder: 11478:11480 transaction failed 29201/-71, size 96-0 line 2741 21:16:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000029c0)={0x7d, 0x0, [], [0xc1]}) 21:16:44 executing program 0: clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x0) [ 275.594716] binder_release_work: 10 callbacks suppressed [ 275.594730] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.638760] binder: undelivered TRANSACTION_ERROR: 29201 21:16:45 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:45 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000197f24acc233eeae0750e03690e37cd418e50fc4909103cc53e038db282d"], 0x1, 0x0, 0x0) [ 276.043334] binder_alloc: 11510: binder_alloc_buf, no vma [ 276.049095] binder: 11510:11512 transaction failed 29189/-3, size 0-0 line 2973 [ 276.057826] binder: 11512 RLIMIT_NICE not set [ 276.105906] binder: 11510:11519 got reply transaction with no transaction stack [ 276.113734] binder: 11510:11519 transaction failed 29201/-71, size 96-0 line 2741 21:16:45 executing program 3: unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:45 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400010000000000250000000000000005000000b0ffffff9500e8ff00000000"], 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 21:16:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8000) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1f}) 21:16:45 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) getpid() 21:16:45 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08869c01ed81c276f192c9fb19debe3a6c65c15215b8864abdf9b0b327404e87ec"], 0x32}, 0x0) 21:16:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 276.524376] kauditd_printk_skb: 174 callbacks suppressed [ 276.524414] audit: type=1326 audit(1546463805.566:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 276.622785] audit: type=1326 audit(1546463805.606:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 276.644515] audit: type=1326 audit(1546463805.606:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 276.665978] audit: type=1326 audit(1546463805.606:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=54 compat=0 ip=0x457ec9 code=0x50000 [ 276.687291] audit: type=1326 audit(1546463805.616:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 21:16:45 executing program 1: [ 276.708952] audit: type=1326 audit(1546463805.616:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 276.730796] audit: type=1326 audit(1546463805.616:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 276.752246] audit: type=1326 audit(1546463805.616:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 276.773647] audit: type=1326 audit(1546463805.616:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 276.795110] audit: type=1326 audit(1546463805.626:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11522 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 21:16:45 executing program 1: 21:16:45 executing program 0: [ 276.852866] binder: undelivered TRANSACTION_ERROR: 29201 21:16:46 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:46 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x200, 0x0) execveat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0) [ 276.971268] binder: undelivered TRANSACTION_ERROR: 29189 [ 277.070492] binder_alloc: 11554: binder_alloc_buf, no vma [ 277.076325] binder: 11554:11555 transaction failed 29189/-3, size 0-0 line 2973 21:16:46 executing program 3: mkdir(0x0, 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:16:46 executing program 1: syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c4a3056c2b00c4c27d794e00e6c166420fe2e3dae9cadd1110af1c5f196f") r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x401) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 277.134012] binder: 11562 RLIMIT_NICE not set [ 277.139977] binder: 11554:11562 got reply transaction with no transaction stack [ 277.147681] binder: 11554:11562 transaction failed 29201/-71, size 96-0 line 2741 21:16:46 executing program 0: [ 277.237785] binder: undelivered TRANSACTION_ERROR: 29201 21:16:46 executing program 1: 21:16:46 executing program 4: 21:16:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 277.361558] binder: undelivered TRANSACTION_ERROR: 29189 21:16:46 executing program 1: 21:16:46 executing program 4: [ 277.481622] binder_alloc: 11584: binder_alloc_buf, no vma [ 277.487422] binder: 11584:11585 transaction failed 29189/-3, size 0-0 line 2973 [ 277.505803] binder: 11585 RLIMIT_NICE not set [ 277.575179] binder: 11584:11591 got reply transaction with no transaction stack [ 277.582954] binder: 11584:11591 transaction failed 29201/-71, size 96-0 line 2741 21:16:46 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:46 executing program 0: 21:16:46 executing program 4: 21:16:47 executing program 3: mkdir(0x0, 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:47 executing program 1: 21:16:47 executing program 0: 21:16:47 executing program 4: 21:16:47 executing program 4: 21:16:47 executing program 1: [ 278.268606] binder: undelivered TRANSACTION_ERROR: 29201 21:16:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:47 executing program 0: 21:16:47 executing program 1: [ 278.332247] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.494550] binder: undelivered TRANSACTION_ERROR: 29189 21:16:47 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:47 executing program 4: 21:16:47 executing program 1: 21:16:48 executing program 3: mkdir(0x0, 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:48 executing program 0: 21:16:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:48 executing program 4: 21:16:48 executing program 1: 21:16:48 executing program 0: 21:16:48 executing program 1: 21:16:48 executing program 4: 21:16:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 279.106817] binder: undelivered TRANSACTION_ERROR: 29189 21:16:48 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r0, 0x1000000000016) 21:16:48 executing program 0: 21:16:48 executing program 4: 21:16:48 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:48 executing program 1: 21:16:48 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:48 executing program 4: 21:16:48 executing program 0: 21:16:49 executing program 1: 21:16:49 executing program 0: 21:16:49 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:49 executing program 4: 21:16:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:49 executing program 1: 21:16:49 executing program 0: 21:16:49 executing program 4: 21:16:49 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:49 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:49 executing program 1: 21:16:49 executing program 0: 21:16:49 executing program 4: 21:16:49 executing program 0: 21:16:49 executing program 4: 21:16:49 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:50 executing program 1: 21:16:50 executing program 0: 21:16:50 executing program 4: 21:16:50 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:50 executing program 4: 21:16:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff) 21:16:50 executing program 1: 21:16:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:50 executing program 4: 21:16:50 executing program 1: 21:16:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:51 executing program 0: 21:16:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:51 executing program 4: [ 282.357862] binder_alloc: 11746: binder_alloc_buf, no vma [ 282.363712] binder_transaction: 3 callbacks suppressed [ 282.363743] binder: 11746:11747 transaction failed 29189/-3, size 0-0 line 2973 [ 282.419267] binder: 11747 RLIMIT_NICE not set [ 282.465932] binder: 11746:11756 got reply transaction with no transaction stack [ 282.473826] binder: 11746:11756 transaction failed 29201/-71, size 96-0 line 2741 21:16:51 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, 0x0, &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:51 executing program 1: 21:16:51 executing program 0: 21:16:51 executing program 4: 21:16:51 executing program 0: 21:16:51 executing program 1: 21:16:51 executing program 4: 21:16:51 executing program 0: 21:16:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:52 executing program 1: 21:16:52 executing program 4: 21:16:52 executing program 0: [ 283.142508] binder_release_work: 1 callbacks suppressed [ 283.142523] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.162480] binder: undelivered TRANSACTION_ERROR: 29189 21:16:52 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, 0x0, &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:52 executing program 0: 21:16:52 executing program 4: 21:16:52 executing program 1: 21:16:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:52 executing program 0: [ 283.607832] binder_alloc: 11791: binder_alloc_buf, no vma [ 283.613662] binder: 11791:11793 transaction failed 29189/-3, size 0-0 line 2973 [ 283.646662] binder: 11793 RLIMIT_NICE not set 21:16:52 executing program 4: 21:16:52 executing program 1: [ 283.693243] binder: 11791:11797 got reply transaction with no transaction stack [ 283.700799] binder: 11791:11797 transaction failed 29201/-71, size 96-0 line 2741 21:16:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:52 executing program 0: 21:16:52 executing program 1: 21:16:53 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, 0x0, &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:53 executing program 4: 21:16:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:53 executing program 0: 21:16:53 executing program 1: 21:16:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 284.412036] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.422808] binder: undelivered TRANSACTION_ERROR: 29189 21:16:53 executing program 4: 21:16:53 executing program 0: [ 284.514925] binder_alloc: 11816: binder_alloc_buf, no vma [ 284.520637] binder: 11816:11817 transaction failed 29189/-3, size 0-0 line 2973 [ 284.552765] binder: 11817 RLIMIT_NICE not set 21:16:53 executing program 1: [ 284.602914] binder: 11816:11827 got reply transaction with no transaction stack [ 284.610475] binder: 11816:11827 transaction failed 29201/-71, size 96-0 line 2741 21:16:53 executing program 4: 21:16:53 executing program 1: 21:16:53 executing program 0: [ 285.274954] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.303003] binder: undelivered TRANSACTION_ERROR: 29189 21:16:54 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:54 executing program 1: 21:16:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:56 executing program 4: 21:16:56 executing program 0: 21:16:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:56 executing program 1: 21:16:56 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) [ 287.541910] binder_alloc: 11854: binder_alloc_buf, no vma [ 287.547566] binder: 11854:11855 transaction failed 29189/-3, size 0-0 line 2973 21:16:56 executing program 1: 21:16:56 executing program 0: 21:16:56 executing program 4: [ 287.584943] binder: 11862 RLIMIT_NICE not set [ 287.596358] binder: 11854:11855 got reply transaction with no transaction stack [ 287.604053] binder: 11854:11855 transaction failed 29201/-71, size 96-0 line 2741 [ 287.656946] binder: undelivered TRANSACTION_ERROR: 29201 21:16:56 executing program 4: 21:16:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 287.778814] binder: undelivered TRANSACTION_ERROR: 29189 21:16:56 executing program 0: [ 287.836581] binder_alloc: 11873: binder_alloc_buf, no vma [ 287.842442] binder: 11873:11874 transaction failed 29189/-3, size 0-0 line 2973 [ 287.884817] binder: 11876 RLIMIT_NICE not set [ 287.910382] binder: 11873:11874 got reply transaction with no transaction stack [ 287.918109] binder: 11873:11874 transaction failed 29201/-71, size 96-0 line 2741 [ 287.959597] binder: undelivered TRANSACTION_ERROR: 29201 [ 288.005550] binder: undelivered TRANSACTION_ERROR: 29189 21:16:59 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) 21:16:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:16:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000507000000000e0ff48000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x11, 0x0, &(0x7f00000000c0)="3a012d8e4cadd2a51958ed0808402a4ba6", 0x0, 0xaa1}, 0x28) 21:16:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:16:59 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) exit(0x0) mknod$loop(&(0x7f00000019c0)='./file0/bus\x00', 0x0, 0xffffffffffffffff) 21:16:59 executing program 1: socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 21:16:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)) [ 290.661630] binder_alloc: 11891: binder_alloc_buf, no vma [ 290.667533] binder: 11891:11895 transaction failed 29189/-3, size 0-0 line 2973 21:16:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x301882, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x731, 0x0, 0x91}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1}, 0x48) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) stat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) [ 290.755521] binder: 11895 RLIMIT_NICE not set 21:16:59 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d0886"], 0x13}, 0x0) [ 290.805362] binder: 11891:11909 got reply transaction with no transaction stack [ 290.813187] binder: 11891:11909 transaction failed 29201/-71, size 96-0 line 2741 21:16:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000700)=@routing={0x0, 0x6, 0x0, 0x0, 0x0, [@mcast1, @loopback, @mcast1]}, 0x38) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 21:17:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) memfd_create(&(0x7f0000000140)='pr\xefc,\x00', 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) 21:17:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0x1d1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1e) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) 21:17:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) memfd_create(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7f) [ 291.442577] binder: undelivered TRANSACTION_ERROR: 29201 [ 291.473852] binder: undelivered TRANSACTION_ERROR: 29189 21:17:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:17:02 executing program 4: ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 21:17:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:02 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 21:17:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x2008000) sendfile(r0, r1, 0x0, 0x80000000000d) [ 293.727364] binder: 11953:11955 transaction failed 29189/-22, size 0-0 line 2834 [ 293.818041] binder: 11967 RLIMIT_NICE not set 21:17:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 293.838581] binder: 11953:11955 got reply transaction with no transaction stack [ 293.846320] binder: 11953:11955 transaction failed 29201/-71, size 96-0 line 2741 [ 293.987193] binder: undelivered TRANSACTION_ERROR: 29189 21:17:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 294.041320] binder: undelivered TRANSACTION_ERROR: 29201 [ 294.137461] binder: 11972:11973 transaction failed 29189/-22, size 0-0 line 2834 [ 294.145997] binder: 11973 RLIMIT_NICE not set [ 294.153127] binder: 11972:11973 got reply transaction with no transaction stack [ 294.160848] binder: 11972:11973 transaction failed 29201/-71, size 96-0 line 2741 [ 294.213345] binder: undelivered TRANSACTION_ERROR: 29189 [ 294.219914] binder: undelivered TRANSACTION_ERROR: 29201 21:17:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 294.371947] binder: 11978:11979 transaction failed 29189/-22, size 0-0 line 2834 21:17:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 294.439036] binder: 11979 RLIMIT_NICE not set [ 294.472856] binder: 11978:11979 got reply transaction with no transaction stack [ 294.480452] binder: 11978:11979 transaction failed 29201/-71, size 96-0 line 2741 21:17:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 294.595889] binder: undelivered TRANSACTION_ERROR: 29189 [ 294.602176] binder: undelivered TRANSACTION_ERROR: 29201 21:17:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:17:05 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 21:17:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000740), 0x4) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000240)}, 0x2) 21:17:05 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000240)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 21:17:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 296.831246] binder: 12002 RLIMIT_NICE not set [ 296.836101] binder: 12002 RLIMIT_NICE not set [ 296.842441] binder: 12002 RLIMIT_NICE not set [ 296.847174] binder: 11994:12002 got transaction with invalid data ptr [ 296.853929] binder: 11994:12002 transaction failed 29201/-14, size 96-0 line 2991 [ 296.861789] binder: send failed reply for transaction 113 to 11994:12002 21:17:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:06 executing program 0: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x200800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80800) ptrace$cont(0x1f, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x4, 0x5, 0x1, 0x8, 0x0, 0x435, 0x400, 0x2, 0x541, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x100000001, 0x2, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, 0x631, 0xfff, 0x6, 0x5, 0x5, 0x2b, 0x8, 0x0, 0x8, 0x0, 0xe7, 0x0, 0xa6c1, 0x8, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8, 0xa, 0x8, 0x0, 0x5, 0xf000000000000000, 0x7fff}, r0, 0x0, 0xffffffffffffffff, 0x2) 21:17:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 297.022849] binder: undelivered TRANSACTION_COMPLETE [ 297.028174] binder: undelivered TRANSACTION_ERROR: 29201 [ 297.060234] binder: undelivered TRANSACTION_ERROR: 29190 21:17:06 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 297.109037] binder: 12023 RLIMIT_NICE not set [ 297.113871] binder: 12023 RLIMIT_NICE not set [ 297.133556] binder: 12023 RLIMIT_NICE not set [ 297.138381] binder: 12022:12023 got transaction with invalid data ptr [ 297.145305] binder: 12022:12023 transaction failed 29201/-14, size 96-0 line 2991 [ 297.153124] binder: send failed reply for transaction 116 to 12022:12023 21:17:06 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff0000000", 0x24}], 0x1}, 0x0) [ 297.279564] binder: undelivered TRANSACTION_COMPLETE [ 297.284920] binder: undelivered TRANSACTION_ERROR: 29201 [ 297.296334] binder: undelivered TRANSACTION_ERROR: 29190 21:17:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:17:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:08 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) exit(0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 21:17:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:08 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200123275781e073703a1989b34a3c084ed2ff082bd3e47e8f7fa79cb9305b87c00049b4bafb5cc69128894e75af8c0b26ef2c2df6badbb2d17b51efc484b6637bae5b4b492f3793270a916cad59d693507eb4d8138274ad3817dce4dce2d65ad1dfad3764bf2ee47b49df02f3b5bf120100156acbf59863913b1369091eb34120ca333a570e020c68debab132f7319c118ae768cde596896b2ba"], 0x1, 0x0, 0x0) 21:17:08 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 299.887029] binder: 12044 RLIMIT_NICE not set [ 299.891798] binder: 12044 RLIMIT_NICE not set [ 299.918851] binder: 12044 RLIMIT_NICE not set [ 299.923738] binder: 12038:12044 got transaction with invalid data ptr [ 299.930530] binder: 12038:12044 transaction failed 29201/-14, size 96-0 line 2991 [ 299.938597] binder: send failed reply for transaction 119 to 12038:12044 21:17:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:09 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:09 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08869c01ed81c276f192c9fb19debe3a6c65c15215b8864abdf9"], 0x2b}, 0x0) [ 299.995465] binder: undelivered TRANSACTION_COMPLETE [ 300.000883] binder: undelivered TRANSACTION_ERROR: 29201 [ 300.006615] binder: undelivered TRANSACTION_ERROR: 29190 [ 300.116092] binder: 12062 RLIMIT_NICE not set [ 300.120754] binder: 12062 RLIMIT_NICE not set [ 300.154500] binder: 12062 RLIMIT_NICE not set [ 300.159300] binder: 12060:12062 got transaction with invalid data ptr 21:17:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0321202e20000000a0000000db48c7f3f9f2eca2"], 0x14) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 300.166079] binder: 12060:12062 transaction failed 29201/-14, size 96-0 line 2991 [ 300.173848] binder: send failed reply for transaction 122 to 12060:12062 21:17:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 300.230091] binder: undelivered TRANSACTION_COMPLETE [ 300.235390] binder: undelivered TRANSACTION_ERROR: 29201 [ 300.245441] binder: undelivered TRANSACTION_ERROR: 29190 21:17:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 300.327127] binder: 12072 RLIMIT_NICE not set [ 300.331878] binder: 12072 RLIMIT_NICE not set [ 300.350311] binder: 12072 RLIMIT_NICE not set [ 300.355204] binder: 12070:12072 got transaction with invalid data ptr [ 300.361967] binder: 12070:12072 transaction failed 29201/-14, size 96-0 line 2991 [ 300.369646] binder: send failed reply for transaction 125 to 12070:12072 [ 300.494381] binder: undelivered TRANSACTION_COMPLETE [ 300.499814] binder: undelivered TRANSACTION_ERROR: 29201 [ 300.506518] binder: undelivered TRANSACTION_ERROR: 29190 21:17:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:17:11 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 21:17:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:11 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x200800, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x100001, 0x0, 0x0, 0xfffffffffffffffb, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 302.976442] binder: 12086 RLIMIT_NICE not set [ 303.008741] binder: 12085:12086 got transaction with invalid data ptr [ 303.015755] binder: 12085:12086 transaction failed 29201/-14, size 96-0 line 2991 [ 303.023532] binder: send failed reply for transaction 128 to 12085:12086 21:17:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 303.122420] binder: undelivered TRANSACTION_COMPLETE [ 303.127802] binder: undelivered TRANSACTION_ERROR: 29201 21:17:12 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 303.190857] binder: undelivered TRANSACTION_ERROR: 29190 [ 303.367737] binder: 12097:12098 got transaction with invalid data ptr [ 303.374784] binder: 12097:12098 transaction failed 29201/-14, size 96-0 line 2991 [ 303.382541] binder: send failed reply for transaction 131 to 12097:12098 21:17:12 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = dup(r2) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r4 = accept4$inet(r3, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) lstat(0x0, 0x0) stat(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)) fstat(r0, &(0x7f0000004580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000004640)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004680), &(0x7f00000046c0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) [ 303.636306] binder: undelivered TRANSACTION_COMPLETE [ 303.641776] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.649905] binder: undelivered TRANSACTION_ERROR: 29190 21:17:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 303.793870] binder: 12119:12120 got transaction with invalid data ptr [ 303.800635] binder: 12119:12120 transaction failed 29201/-14, size 96-0 line 2991 [ 303.808533] binder: send failed reply for transaction 134 to 12119:12120 [ 303.938491] binder: undelivered TRANSACTION_COMPLETE [ 303.944091] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.966793] binder: undelivered TRANSACTION_ERROR: 29190 21:17:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:17:13 executing program 0: clone(0x3102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:17:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 304.275107] binder: 12129:12134 got transaction with invalid data ptr [ 304.282080] binder: 12129:12134 transaction failed 29201/-14, size 96-0 line 2991 [ 304.289760] binder: send failed reply for transaction 137 to 12129:12134 21:17:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:13 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000040000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xd1, 0x0, &(0x7f0000000100)="ba6dc853598e52f80edca8e941e9a59d2a18851ea306f1ea45c0a61ffc23ae372f23f29ac161ea14cb06315778d56031480e18ece13e4f8fbfca1340b259a4bc6d53c09dd04654c31908d91cf3fbe3073accc4fa8bff4f7ee48ca2b5b803fd876af6e5b136f20805156e6b3b73fca41a31003826ceb0d734cd012ff91c86f70e3cb15b5bab0e96fa48a9f95c04914547699c49dfd421793ae16a3ed1a3e9bab672cc6cdc5fcd568fa9f5792d908a6b050d422a81f7ffb5196af6ba3e30b6a3f79f94af83c9cbe636936a118bbac21a61e0", 0x0, 0xe59}, 0x28) 21:17:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:13 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200123275781e073703a1989b34a3c084ed2ff082bd3e47e8f7fa79cb9305b87c00049b4bafb5cc69128894e75af8c0b26ef2c2df6badbb2d17b51efc484b6637bae5b4b492f3793270a916cad59d693507eb4d8138274ad3817dce4dce2d65ad1dfad3764bf2ee47b4"], 0x1, 0x0, 0x0) 21:17:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 304.507810] binder: undelivered TRANSACTION_COMPLETE [ 304.513234] binder: undelivered TRANSACTION_ERROR: 29201 21:17:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 304.548440] binder: undelivered TRANSACTION_ERROR: 29190 21:17:13 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130b57c70f33c8d08869c01ed81c276f1"], 0x1a}, 0x0) [ 304.642852] binder: 12158:12159 got transaction with invalid data ptr [ 304.649589] binder: 12158:12159 transaction failed 29201/-14, size 96-0 line 2991 [ 304.657990] binder: send failed reply for transaction 140 to 12158:12159 [ 304.865554] binder: undelivered TRANSACTION_COMPLETE [ 304.870735] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.878771] binder: undelivered TRANSACTION_ERROR: 29190 21:17:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x1000000000016) 21:17:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 21:17:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)={0x8000000}) 21:17:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 307.355147] binder_set_nice: 14 callbacks suppressed [ 307.355161] binder: 12177 RLIMIT_NICE not set [ 307.365020] binder: 12177 RLIMIT_NICE not set [ 307.394456] binder: 12177 RLIMIT_NICE not set 21:17:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 307.399203] binder: 12176:12177 got transaction with invalid data ptr [ 307.406084] binder: 12176:12177 transaction failed 29201/-14, size 96-0 line 2991 [ 307.413837] binder: send failed reply for transaction 143 to 12176:12177 21:17:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 307.506554] binder: undelivered TRANSACTION_COMPLETE 21:17:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) [ 307.638172] binder: 12197 RLIMIT_NICE not set [ 307.642977] binder: 12197 RLIMIT_NICE not set [ 307.660991] binder: 12197 RLIMIT_NICE not set [ 307.665986] binder: 12196:12197 got transaction with invalid data ptr [ 307.672746] binder: 12196:12197 transaction failed 29201/-14, size 96-0 line 2991 [ 307.680416] binder: send failed reply for transaction 146 to 12196:12197 21:17:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 307.844635] binder: undelivered TRANSACTION_COMPLETE 21:17:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(0x0, 0x0, 0x2) tkill(r1, 0x1000000000016) 21:17:19 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200"], 0x1, 0x0, 0x0) 21:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) [ 310.431287] binder: 12223 RLIMIT_NICE not set [ 310.479533] binder: 12218:12227 got reply transaction with no transaction stack [ 310.487361] binder: 12218:12227 transaction failed 29201/-71, size 96-0 line 2741 21:17:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(0x0, 0x0, 0x2) tkill(r1, 0x1000000000016) 21:17:19 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x200000000040a) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0xfffffffffffffffc, 0x6, 0x3}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) accept$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0x200018b5, 0x4000000000cd, 0x2, 0x5}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000480)={0xfffffffffffffffa, 0x2, 0xffffffff, 0xc70, 0x7, 0x0, 0x480000000000000, 0x3, 0x4001, 0x1, 0x7f, 0x7}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000300)) rt_sigpending(&(0x7f0000000000), 0x8) arch_prctl$ARCH_GET_CPUID(0x1011) 21:17:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(0x0, 0x0, 0x2) tkill(r1, 0x1000000000016) 21:17:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x0, 0x0, 0x0) 21:17:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 21:17:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x0) tkill(r1, 0x1000000000016) [ 310.897041] binder: BINDER_SET_CONTEXT_MGR already set [ 310.902606] binder: 12252:12255 ioctl 40046207 0 returned -16 21:17:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 310.969783] binder: 12252:12260 BC_DEAD_BINDER_DONE 0000000000000000 not found 21:17:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 311.283293] binder_release_work: 4 callbacks suppressed [ 311.283308] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.372914] binder: 12270 RLIMIT_NICE not set [ 311.420127] binder: 12269:12271 got reply transaction with no transaction stack [ 311.427747] binder: 12269:12271 transaction failed 29201/-71, size 96-0 line 2741 21:17:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x0) tkill(r1, 0x1000000000016) 21:17:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x0, 0x0, 0x0) 21:17:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x0) tkill(r1, 0x1000000000016) 21:17:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x0, 0x0, 0x0) 21:17:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 311.683692] binder: BINDER_SET_CONTEXT_MGR already set [ 311.689199] binder: 12252:12260 ioctl 40046207 0 returned -16 [ 311.719876] binder: 12252:12291 BC_DEAD_BINDER_DONE 0000000000000000 not found 21:17:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) 21:17:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(0x0, 0x1000000000016) 21:17:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 312.188598] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.304419] binder: 12315 RLIMIT_NICE not set 21:17:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6052, r1, 0x2000) 21:17:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(0x0, 0x1000000000016) [ 312.353497] binder: 12314:12317 got reply transaction with no transaction stack [ 312.361133] binder: 12314:12317 transaction failed 29201/-71, size 96-0 line 2741 21:17:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 312.443977] ion_mmap: failure mapping buffer to userspace [ 312.478205] ion_mmap: failure mapping buffer to userspace 21:17:21 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev}}}}}}, 0x0) 21:17:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) 21:17:21 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 21:17:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:21 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd738c4925d87130"], 0xb}, 0x0) 21:17:21 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x4004092b, &(0x7f0000000140)={0x0, 0x0, 0x1a0, 0x0}) 21:17:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 313.233547] binder: BINDER_SET_CONTEXT_MGR already set [ 313.238971] binder: 12359:12360 ioctl 40046207 0 returned -16 [ 313.256379] binder: undelivered TRANSACTION_ERROR: 29201 21:17:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) 21:17:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6052, r1, 0x2000) 21:17:22 executing program 3: pipe(&(0x7f0000000080)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x5, 0x36}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:17:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(0x0, 0x1000000000016) 21:17:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 313.327698] binder: 12359:12360 ioctl c0306201 0 returned -14 [ 313.341291] binder: 12360 RLIMIT_NICE not set [ 313.393660] binder: 12359:12363 got reply transaction with no transaction stack [ 313.401268] binder: 12359:12363 transaction failed 29201/-71, size 96-0 line 2741 [ 313.430937] ion_mmap: failure mapping buffer to userspace 21:17:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:17:22 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) [ 313.475268] ion_mmap: failure mapping buffer to userspace 21:17:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:17:22 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x0, 0x0) 21:17:22 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd381fd"], 0x4}, 0x0) 21:17:22 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 314.039981] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.069854] binder: 12402:12403 ioctl c0306201 0 returned -14 [ 314.081945] binder: 12403 RLIMIT_NICE not set [ 314.129082] binder: 12402:12404 got reply transaction with no transaction stack [ 314.136875] binder: 12402:12404 transaction failed 29201/-71, size 96-0 line 2741 21:17:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) 21:17:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1}}], 0x1, 0x0, 0x0) 21:17:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0), 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0), 0xfee9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 21:17:23 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x0) 21:17:23 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x4500) r0 = semget$private(0x0, 0x3, 0x205) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x2, 0x8000000000000, 0x7, 0x9, 0x4, 0x1]) gettid() clone(0x4007ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getrandom(&(0x7f0000000080)=""/44, 0xfd30, 0x0) 21:17:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x29) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x20820000, r0}, 0x2b) 21:17:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 314.942572] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.014495] binder: 12453:12454 ioctl c0306201 0 returned -14 [ 315.039707] binder: 12454 RLIMIT_NICE not set [ 315.087404] binder: 12453:12455 got reply transaction with no transaction stack [ 315.095076] binder: 12453:12455 transaction failed 29201/-71, size 96-0 line 2741 21:17:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) 21:17:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:24 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000197f24acc233eeae0750e03690e37cd418e50fc4909103cc53e038db282d676a680268600f172c4d0d1a7917bd7a81"], 0x1, 0x0, 0x0) 21:17:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x0) 21:17:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x261, &(0x7f0000000080)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x4924944, 0x0) 21:17:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) pipe(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,', 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='ppp0%em0wlan1cgroupselinux[+\x00', 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x9b, "b362f805ef6631c36e59ac72a8571aae91f321912f2972e74ef1411524250a282b701c72611e8d2c162a74ab59794202e3d65da03afee977c2bcb3b847a4d1e09b282b70ad880e04286a8d136e968463a4be2f4bbc8a4420823b6ae0f5ce3a5037e35015e9cd051d92aa5b3047edf6fc7d63defcdeaf9745cf5c5242a7afe2ff0e2bd2d7ee877da7ed361adf82a1bd3bdfa9e888a32c3b8db801b8"}, 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = dup(r1) timerfd_gettime(r2, &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000600)=""/36, 0x24, 0x2040, &(0x7f0000000640)={0x2, 0x4e22, @remote}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000680)={{0xfff, 0x1, 0x1000, 0x10000}, 'syz0\x00', 0x24}) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r3, &(0x7f0000000080), 0x80000003) 21:17:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 315.899312] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.955467] binder: 12496 RLIMIT_NICE not set [ 316.004282] binder: 12494:12499 got reply transaction with no transaction stack [ 316.012023] binder: 12494:12499 transaction failed 29201/-71, size 96-0 line 2741 21:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:25 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c6486"], 0x1, 0x0, 0x0) 21:17:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) tkill(r1, 0x0) 21:17:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:25 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280b"], 0x1, 0x0, 0x0) 21:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:25 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_getparam(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x0, 0x3, 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 316.860362] binder: undelivered TRANSACTION_ERROR: 29201 21:17:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) [ 316.948434] binder: 12539 RLIMIT_NICE not set [ 316.995764] binder: 12538:12541 got reply transaction with no transaction stack [ 317.003614] binder: 12538:12541 transaction failed 29201/-71, size 96-0 line 2741 21:17:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x14) 21:17:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:26 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9"], 0x1, 0x0}, 0x0) 21:17:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) [ 317.764701] binder: undelivered TRANSACTION_ERROR: 29201 21:17:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084504, &(0x7f0000000080)=""/14) 21:17:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:28 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) 21:17:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) [ 319.762717] binder: 12576 RLIMIT_NICE not set [ 319.810405] binder: 12575:12587 got reply transaction with no transaction stack [ 319.818122] binder: 12575:12587 transaction failed 29201/-71, size 96-0 line 2741 21:17:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r1, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) 21:17:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:29 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usb(0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000002, 0x0, r0, 0x0, [0x14]}, 0x21) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:17:29 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) 21:17:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 320.705156] binder: undelivered TRANSACTION_ERROR: 29201 21:17:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 323.279601] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 323.290980] clocksource: 'acpi_pm' wd_now: 1ba303 wd_last: 689ace mask: ffffff [ 323.300459] clocksource: 'tsc' cs_now: b15abcd81f cs_last: af996b906f mask: ffffffffffffffff [ 323.311034] tsc: Marking TSC unstable due to clocksource watchdog [ 323.338458] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 323.347421] sched_clock: Marking unstable (323396779691, -58339565)<-(323463650780, -125210622) [ 323.942072] clocksource: Switched to clocksource acpi_pm 21:17:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x1009}}, 0x20) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="460f0095f582800042e5000fc72e0f01ca0f009b1800000066baf80cb8e484b182ef66bafc0ced420f07360f01c9b9b80a00000f32660f3881b700580000", 0x3e}], 0x1, 0x0, 0x0, 0x0) getpid() setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x3) 21:17:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.235757] binder: 12642 RLIMIT_NICE not set [ 324.284299] binder: 12641:12649 got reply transaction with no transaction stack [ 324.291958] binder: 12641:12649 transaction failed 29201/-71, size 96-0 line 2741 21:17:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b99, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xc1O\x11s\xb1\x98\xa6L\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1\xfb\xc2Q\xd7\xe6\x18p\x06e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000280)=""/33}, 0x28) socketpair$unix(0x1, 0x8000000001, 0x0, &(0x7f0000000080)) [ 324.395960] kauditd_printk_skb: 59 callbacks suppressed [ 324.395987] audit: type=1326 audit(1546463853.449:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 324.423072] audit: type=1326 audit(1546463853.449:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 21:17:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.444578] audit: type=1326 audit(1546463853.449:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 21:17:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) [ 324.739969] audit: type=1326 audit(1546463853.559:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 324.761620] audit: type=1326 audit(1546463853.559:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=298 compat=0 ip=0x457ec9 code=0x50000 [ 324.783077] audit: type=1326 audit(1546463853.579:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 324.804537] audit: type=1326 audit(1546463853.599:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 21:17:33 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 21:17:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.825952] audit: type=1326 audit(1546463853.609:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 324.847368] audit: type=1326 audit(1546463853.619:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x457ec9 code=0x50000 [ 324.868713] audit: type=1326 audit(1546463853.629:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12637 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 21:17:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x2710}, 0x1, 0x7d, 0x2}], 0x18) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0x18) 21:17:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0) 21:17:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) [ 325.142316] binder: undelivered TRANSACTION_ERROR: 29201 21:17:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:34 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) clone(0x7fd, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/93, 0x5d, 0x2) 21:17:34 executing program 3: socketpair(0xd, 0xa, 0x40, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x8}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000040), 0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0xffffffffffffff10, &(0x7f00000019c0)}, 0xffffffffffffff1e) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x18}, 0x298) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) sendmsg$kcm(r0, &(0x7f0000001980)={&(0x7f0000001680)=@l2={0x1f, 0x6, {0xa4b, 0x2, 0xfffffffffffff800, 0x0, 0x3, 0x54}, 0x7, 0x9bb5}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)="cf0a3a8385d021a4aab43abec3f4a71dbddefa347e9dccf3d9eed5d9412d34577c4654b2cd9a5014e919448d43ff65e429bccdebd9e7299785506a6c3cc23ff20184257feadc0c8c55786c7be8bf107039ea1bd14360d8e18f8971825a75e40a528cfdc473a24e4b15f25f28e64fa55cbcb987a2448c3cdddd43f7150ce8db21a9753ef0d2bd98e2068bd0d97dcd293f865052e6e7dddfd81a61841b6ea8831ce17c7e2698fb90fcb4d09fc46d88939d138244934bf17eedc3fe42db", 0xbc}], 0x1}, 0x45) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xcc, 0x18}, 0xc) socketpair(0xf, 0x0, 0xda7, &(0x7f0000000240)) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000001640)=""/15) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1d, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x4, 0x3, 0x0, 0x9, 0x56, 0x8}, @exit, @jmp={0x5, 0x9, 0xc, 0xb, 0x7, 0x10, 0xfffffffffffffffc}, @generic={0x8, 0x9, 0xb19, 0xfffffffffffffff7, 0x3f}, @ldst={0x0, 0x3, 0x1, 0xb, 0x9, 0xffffffffffffffc0}, @ldst={0x3, 0x2, 0x7, 0xd, 0x3, 0xffffffffffffffff}, @map={0x18, 0xf, 0x1, 0x0, r3}, @exit]}, 0x0, 0x0, 0x1000, &(0x7f00000005c0)=""/4096, 0x0, 0x1, [], 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000440)="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"}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="2523391f3a64777724e0cc5c"]) [ 325.347959] binder: 12695 RLIMIT_NICE not set 21:17:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x4500) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x2, 0x8000000000000, 0x7, 0x9, 0x4, 0x1]) fcntl$setpipe(r0, 0x407, 0x2) r2 = gettid() clone(0x4007ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x24040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getrandom(&(0x7f0000000080)=""/44, 0xfd30, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), 0x4) ptrace(0x10, r2) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000002c0)=""/217) [ 325.415394] binder: 12694:12706 got reply transaction with no transaction stack [ 325.423235] binder: 12694:12706 transaction failed 29201/-71, size 96-0 line 2741 21:17:34 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x200, 0x0) execveat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000002580)=""/4096) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:17:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000001}, {{@in6=@ipv4, 0x0, 0x2b}, 0x2, @in6=@local, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x188, 0x0) 21:17:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5f, 0x800, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000000c0), 0x0}, 0x20) 21:17:35 executing program 2: seccomp(0x1, 0x1, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) [ 326.107601] binder: undelivered TRANSACTION_ERROR: 29201 21:17:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 326.223777] binder: 12751:12754 got reply transaction with no transaction stack [ 326.231394] binder: 12751:12754 transaction failed 29201/-71, size 96-0 line 2741 21:17:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000340)) socketpair$unix(0x1, 0x1000000c, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)) 21:17:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2a2, 0x10400003) 21:17:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 326.481288] binder: release 12751:12754 transaction 170 out, still active [ 326.488426] binder: undelivered TRANSACTION_COMPLETE [ 326.498828] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.504642] binder: send failed reply for transaction 170, target dead 21:17:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 326.619903] binder: 12782:12784 got reply transaction with no transaction stack [ 326.627610] binder: 12782:12784 transaction failed 29201/-71, size 96-0 line 2741 21:17:35 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00090000000000000000"], 0x1, 0x0, 0x0) 21:17:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 326.760871] binder: release 12782:12784 transaction 173 out, still active [ 326.768140] binder: undelivered TRANSACTION_COMPLETE [ 326.838829] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.844616] binder: send failed reply for transaction 173, target dead [ 326.950845] binder: 12792:12797 got reply transaction with no transaction stack [ 326.958671] binder: 12792:12797 transaction failed 29201/-71, size 96-0 line 2741 21:17:36 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:36 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_bond\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 21:17:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 327.107324] binder: release 12792:12797 transaction 176 out, still active [ 327.114443] binder: undelivered TRANSACTION_COMPLETE [ 327.126230] binder: undelivered TRANSACTION_ERROR: 29201 [ 327.131844] binder: send failed reply for transaction 176, target dead 21:17:36 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_bond\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 327.251638] ptrace attach of "/root/syz-executor2"[12815] was attempted by "/root/syz-executor2"[12816] [ 327.279969] binder: 12806:12814 ioctl c0306201 0 returned -14 [ 327.303649] binder: 12806:12814 got reply transaction with no transaction stack [ 327.311238] binder: 12806:12814 transaction failed 29201/-71, size 96-0 line 2741 21:17:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/14) 21:17:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 327.475886] binder: release 12806:12814 transaction 179 out, still active [ 327.483161] binder: undelivered TRANSACTION_COMPLETE [ 327.507925] binder: undelivered TRANSACTION_ERROR: 29201 [ 327.513653] binder: send failed reply for transaction 179, target dead 21:17:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 327.589074] binder: 12831:12834 ioctl c0306201 0 returned -14 [ 327.628390] binder: 12831:12834 got reply transaction with no transaction stack [ 327.636184] binder: 12831:12834 transaction failed 29201/-71, size 96-0 line 2741 [ 327.652150] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 21:17:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 327.835816] binder: release 12831:12834 transaction 182 out, still active [ 327.842952] binder: undelivered TRANSACTION_COMPLETE [ 327.854535] binder: undelivered TRANSACTION_ERROR: 29201 [ 327.860128] binder: send failed reply for transaction 182, target dead 21:17:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:37 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9", @ANYRESHEX], 0x2, 0x0, 0x0) 21:17:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:37 executing program 3: 21:17:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.182781] binder: 12850:12851 ioctl c0306201 0 returned -14 [ 328.209204] binder: 12850:12851 got reply transaction with no transaction stack [ 328.217005] binder: 12850:12851 transaction failed 29201/-71, size 96-0 line 2741 21:17:37 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x400001000009, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x100000000098f907}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)) 21:17:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:37 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce160", @ANYRESHEX], 0x2, 0x0, 0x0) 21:17:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 328.427366] binder: release 12850:12851 transaction 185 out, still active [ 328.434492] binder: undelivered TRANSACTION_COMPLETE [ 328.476059] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.481609] binder: send failed reply for transaction 185, target dead 21:17:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x3, @local}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58114347b289546465a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d6", 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() dup2(r1, r0) tkill(r2, 0x14) [ 328.618544] binder: 12872:12877 got reply transaction with no transaction stack [ 328.626387] binder: 12872:12877 transaction failed 29201/-71, size 96-0 line 2741 21:17:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001900010200000000000000001d0100002c000200217b266c6f6c6f2e2c47504c275d76626f786e65743123bf5e5b0000000000000000000000000000"], 0x1}}, 0x0) 21:17:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000580), 0xefee) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x1a0ffffffff}}, 0x50) 21:17:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:38 executing program 2: 21:17:38 executing program 3: 21:17:38 executing program 2: 21:17:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 329.460949] binder: release 12872:12873 transaction 188 out, still active [ 329.468180] binder: undelivered TRANSACTION_COMPLETE [ 329.501152] binder: undelivered TRANSACTION_ERROR: 29201 [ 329.506935] binder: send failed reply for transaction 188, target dead 21:17:38 executing program 2: 21:17:38 executing program 3: 21:17:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 329.652061] binder: 12909:12912 got reply transaction with no transaction stack [ 329.659673] binder: 12909:12912 transaction failed 29201/-71, size 96-0 line 2741 21:17:38 executing program 3: 21:17:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:39 executing program 2: 21:17:39 executing program 3: 21:17:39 executing program 3: 21:17:39 executing program 2: 21:17:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 330.484112] binder: release 12909:12910 transaction 191 out, still active [ 330.491253] binder: undelivered TRANSACTION_COMPLETE [ 330.535734] binder: undelivered TRANSACTION_ERROR: 29201 [ 330.541466] binder: send failed reply for transaction 191, target dead 21:17:39 executing program 3: 21:17:39 executing program 2: [ 330.688449] binder: 12938:12942 got reply transaction with no transaction stack [ 330.696200] binder: 12938:12942 transaction failed 29201/-71, size 96-0 line 2741 21:17:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:39 executing program 3: 21:17:40 executing program 2: 21:17:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:40 executing program 3: 21:17:40 executing program 2: 21:17:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:40 executing program 3: 21:17:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:40 executing program 2: 21:17:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) [ 331.505789] binder: release 12938:12939 transaction 194 out, still active [ 331.512913] binder: undelivered TRANSACTION_COMPLETE 21:17:40 executing program 3: [ 331.562231] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.568169] binder: send failed reply for transaction 194, target dead 21:17:40 executing program 2: [ 331.666335] binder: 12972:12982 got reply transaction with no transaction stack [ 331.674039] binder: 12972:12982 transaction failed 29201/-71, size 96-0 line 2741 21:17:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:40 executing program 3: 21:17:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:41 executing program 2: 21:17:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:41 executing program 3: 21:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:41 executing program 2: 21:17:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 332.406554] binder: release 12972:12973 transaction 197 out, still active [ 332.413743] binder: undelivered TRANSACTION_COMPLETE [ 332.418976] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.424650] binder: send failed reply for transaction 197, target dead 21:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:41 executing program 2: 21:17:41 executing program 3: [ 332.583748] binder: 13015:13020 got reply transaction with no transaction stack [ 332.591274] binder: 13015:13020 transaction failed 29201/-71, size 96-0 line 2741 21:17:41 executing program 3: 21:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:41 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:17:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:42 executing program 2: 21:17:42 executing program 3: 21:17:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:17:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 333.316934] binder: release 13015:13018 transaction 200 out, still active [ 333.324058] binder: undelivered TRANSACTION_COMPLETE [ 333.329269] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.335056] binder: send failed reply for transaction 200, target dead 21:17:42 executing program 2: 21:17:42 executing program 3: 21:17:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 333.501543] binder: 13050:13053 got reply transaction with no transaction stack [ 333.509201] binder: 13050:13053 transaction failed 29201/-71, size 96-0 line 2741 21:17:42 executing program 3: 21:17:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00'}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:43 executing program 2: 21:17:43 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:43 executing program 3: 21:17:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00'}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.253982] binder: release 13050:13051 transaction 203 out, still active [ 334.261399] binder: undelivered TRANSACTION_COMPLETE [ 334.266812] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.272410] binder: send failed reply for transaction 203, target dead 21:17:43 executing program 3: [ 334.358508] binder: 13082:13083 got reply transaction with no transaction stack [ 334.366301] binder: 13082:13083 transaction failed 29201/-71, size 96-0 line 2741 21:17:43 executing program 2: 21:17:43 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00'}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:43 executing program 2: 21:17:43 executing program 3: [ 334.597371] binder: release 13082:13083 transaction 206 out, still active [ 334.604599] binder: undelivered TRANSACTION_COMPLETE [ 334.615448] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.621499] binder: send failed reply for transaction 206, target dead 21:17:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:43 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 334.779206] binder: 13101:13104 got reply transaction with no transaction stack [ 334.787132] binder: 13101:13104 transaction failed 29201/-71, size 96-0 line 2741 21:17:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:43 executing program 2: 21:17:43 executing program 3: 21:17:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.011535] binder: release 13101:13104 transaction 209 out, still active [ 335.018671] binder: undelivered TRANSACTION_COMPLETE 21:17:44 executing program 2: [ 335.065060] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.070659] binder: send failed reply for transaction 209, target dead 21:17:44 executing program 3: 21:17:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.217925] binder: 13120:13121 got reply transaction with no transaction stack [ 335.225722] binder: 13120:13121 transaction failed 29201/-71, size 96-0 line 2741 21:17:44 executing program 2: 21:17:44 executing program 3: 21:17:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000480)}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 335.364634] binder: release 13120:13121 transaction 212 out, still active [ 335.371916] binder: undelivered TRANSACTION_COMPLETE [ 335.386266] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.392053] binder: send failed reply for transaction 212, target dead 21:17:44 executing program 2: [ 335.501434] binder: 13137:13140 got reply transaction with no transaction stack [ 335.509192] binder: 13137:13140 transaction failed 29201/-71, size 96-0 line 2741 21:17:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:44 executing program 3: 21:17:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:44 executing program 2: 21:17:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000480)}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.818921] binder: release 13137:13140 transaction 215 out, still active [ 335.826239] binder: undelivered TRANSACTION_COMPLETE [ 335.913879] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.919413] binder: send failed reply for transaction 215, target dead 21:17:45 executing program 3: 21:17:45 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) [ 335.987655] binder: 13157:13158 got reply transaction with no transaction stack [ 335.995817] binder: 13157:13158 transaction failed 29201/-71, size 96-0 line 2741 21:17:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000480)}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 336.166061] binder: release 13157:13158 transaction 218 out, still active [ 336.173176] binder: undelivered TRANSACTION_COMPLETE [ 336.183055] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.188680] binder: send failed reply for transaction 218, target dead 21:17:45 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) [ 336.303314] binder: 13166:13177 got reply transaction with no transaction stack [ 336.310838] binder: 13166:13177 transaction failed 29201/-71, size 96-0 line 2741 21:17:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="030000000000000008001b0000000000eff66f6591076b39e4aa89b84ec79c6ce32b2384b5038d1cb4e425aa40f2c467dbb74665875fe47f70ae8766dbcdebfe6371cf1072379205d137d573b5853ea7b94cbb0f2700e3264addec129c2f942204746c69befcd3c7900a"], 0x1}}, 0x0) 21:17:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:45 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) 21:17:45 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 336.689341] binder: release 13166:13177 transaction 221 out, still active [ 336.696505] binder: undelivered TRANSACTION_COMPLETE [ 336.704902] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.710422] binder: send failed reply for transaction 221, target dead [ 336.822047] binder: 13191 RLIMIT_NICE not set 21:17:45 executing program 3: [ 336.854365] binder: 13190:13191 got reply transaction with no transaction stack [ 336.862017] binder: 13190:13191 transaction failed 29201/-71, size 96-0 line 2741 21:17:46 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) 21:17:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:17:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 337.073938] binder: release 13190:13191 transaction 224 out, still active [ 337.081041] binder: undelivered TRANSACTION_COMPLETE [ 337.100864] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.106892] binder: send failed reply for transaction 224, target dead 21:17:46 executing program 3: [ 337.266722] binder: 13218 RLIMIT_NICE not set [ 337.298716] binder: 13211:13218 got reply transaction with no transaction stack [ 337.306536] binder: 13211:13218 transaction failed 29201/-71, size 96-0 line 2741 [ 337.552191] binder: release 13211:13218 transaction 227 out, still active [ 337.559178] binder: undelivered TRANSACTION_COMPLETE [ 337.564580] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.570093] binder: send failed reply for transaction 227, target dead 21:17:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5, 0xa3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:17:46 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 21:17:46 executing program 3: 21:17:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 337.718978] binder: 13234 RLIMIT_NICE not set 21:17:46 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) [ 337.746690] binder: 13231:13234 got reply transaction with no transaction stack [ 337.754400] binder: 13231:13234 transaction failed 29201/-71, size 96-0 line 2741 21:17:46 executing program 3: 21:17:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 337.933491] binder: release 13231:13234 transaction 230 out, still active [ 337.941009] binder: undelivered TRANSACTION_COMPLETE 21:17:47 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x400002) msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="087361cc36c81272a3f58062f7a2ae1d6979bc"], 0x1, 0x0, 0x0) 21:17:47 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) [ 337.989012] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.995208] binder: send failed reply for transaction 230, target dead [ 338.102806] binder: 13257 RLIMIT_NICE not set [ 338.110244] binder: 13249:13257 got reply transaction with no transaction stack [ 338.118066] binder: 13249:13257 transaction failed 29201/-71, size 96-0 line 2741 [ 338.419212] binder: release 13249:13257 transaction 233 out, still active [ 338.426442] binder: undelivered TRANSACTION_COMPLETE [ 338.446149] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.451677] binder: send failed reply for transaction 233, target dead 21:17:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:47 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x0, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) 21:17:47 executing program 3: socket$alg(0x26, 0x5, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x6e, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x2c, 0x31, 0x301, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}]}, 0x2c}}, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='nfs4\x00', 0x0, &(0x7f0000000300)='rdma') accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:17:47 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 21:17:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 338.517732] binder: 13265 RLIMIT_NICE not set [ 338.554170] binder: 13262:13265 got reply transaction with no transaction stack [ 338.561904] binder: 13262:13265 transaction failed 29201/-71, size 96-0 line 2741 21:17:47 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x0, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) 21:17:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0xffffffffffffff42, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0)) 21:17:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 338.673052] binder: release 13262:13265 transaction 236 out, still active [ 338.680116] binder: undelivered TRANSACTION_COMPLETE 21:17:47 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9365753d794919ca25597985ca83cf4d819f438a7a6c6b7b09a42bfd0c60c7d7b74"], 0x1, 0x0}, 0x0) [ 338.735998] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.741645] binder: send failed reply for transaction 236, target dead 21:17:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 338.808230] binder: 13287 RLIMIT_NICE not set 21:17:47 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x0, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) [ 338.865064] binder: 13286:13287 transaction failed 29201/-71, size 96-0 line 2741 [ 339.024979] binder: release 13286:13287 transaction 239 out, still active [ 339.032239] binder: undelivered TRANSACTION_COMPLETE [ 339.038392] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.044230] binder: send failed reply for transaction 239, target dead 21:17:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000580), 0xefee) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 21:17:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:48 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) 21:17:48 executing program 3: timer_create(0x0, 0x0, &(0x7f0000044000)) [ 339.579323] binder: 13311 RLIMIT_NICE not set [ 339.597979] binder: 13310:13311 transaction failed 29201/-71, size 96-0 line 2741 21:17:48 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) 21:17:48 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xc, 0x0, [], "3356b4a6"}}}}}}, 0x0) 21:17:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x2000, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000240)=0x80000001) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x800000000000002, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) write$P9_RGETLOCK(r6, 0x0, 0x0) write(r3, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:17:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 339.805661] binder: release 13310:13311 transaction 242 out, still active [ 339.812993] binder: undelivered TRANSACTION_COMPLETE [ 339.830022] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.835926] binder: send failed reply for transaction 242, target dead 21:17:49 executing program 3: syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2cb, 0x0) 21:17:49 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xc, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0xc, 0x0, [], "3c56b4a6"}}}}}}, 0x0) [ 339.974221] binder: 13336 RLIMIT_NICE not set [ 339.992389] binder_transaction: 2 callbacks suppressed [ 339.992407] binder: 13329:13336 got reply transaction with no transaction stack [ 340.005982] binder: 13329:13336 transaction failed 29201/-71, size 96-0 line 2741 21:17:49 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60ce"], 0x1, 0x0, 0x0) 21:17:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:49 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0x8}}}}}}, 0x0) 21:17:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 21:17:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 340.434700] binder: release 13329:13336 transaction 245 out, still active [ 340.441673] binder: undelivered TRANSACTION_COMPLETE [ 340.447013] binder: send failed reply for transaction 245, target dead [ 340.554111] binder: 13360 RLIMIT_NICE not set [ 340.596260] binder: 13359:13360 got reply transaction with no transaction stack 21:17:49 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0x8}}}}}}, 0x0) 21:17:49 executing program 3: 21:17:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 340.755348] binder: release 13359:13360 transaction 248 out, still active [ 340.762637] binder: undelivered TRANSACTION_COMPLETE [ 340.775061] binder: send failed reply for transaction 248, target dead 21:17:49 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0x8}}}}}}, 0x0) [ 340.879078] binder: 13379 RLIMIT_NICE not set [ 340.886208] binder: 13376:13379 got reply transaction with no transaction stack 21:17:50 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x8150000}, 0x200000}) 21:17:50 executing program 2: syz_emit_ethernet(0x40, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xa, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xa, 0x0, [], '0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 21:17:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 341.503404] binder_release_work: 2 callbacks suppressed [ 341.503420] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.616627] binder: 13404:13405 got reply transaction with no transaction stack [ 341.624392] binder_transaction: 2 callbacks suppressed [ 341.624422] binder: 13404:13405 transaction failed 29201/-71, size 96-0 line 2741 21:17:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 21:17:50 executing program 2: syz_emit_ethernet(0x40, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xa, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xa, 0x0, [], '0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff0000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 341.822879] binder_thread_release: 1 callbacks suppressed [ 341.822901] binder: release 13404:13405 transaction 254 out, still active [ 341.836270] binder_release_work: 1 callbacks suppressed [ 341.836280] binder: undelivered TRANSACTION_COMPLETE 21:17:50 executing program 2: syz_emit_ethernet(0x41, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xb, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xb, 0x0, [], "3c56b4"}}}}}}, 0x0) [ 341.912277] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.917875] binder_send_failed_reply: 1 callbacks suppressed [ 341.917889] binder: send failed reply for transaction 254, target dead [ 341.983841] binder_set_nice: 1 callbacks suppressed [ 341.983856] binder: 13429 RLIMIT_NICE not set [ 342.024276] binder: 13423:13429 got reply transaction with no transaction stack [ 342.031993] binder: 13423:13429 transaction failed 29201/-71, size 96-0 line 2741 21:17:51 executing program 2: syz_emit_ethernet(0x41, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xb, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xb, 0x0, [], "3c56b4"}}}}}}, 0x0) 21:17:51 executing program 2: syz_emit_ethernet(0x41, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0xb, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0xb, 0x0, [], "3c56b4"}}}}}}, 0x0) 21:17:51 executing program 4: [ 342.624977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 342.653750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 21:17:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:51 executing program 2: 21:17:51 executing program 4: 21:17:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x46, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 342.682286] binder: release 13423:13429 transaction 257 out, still active [ 342.689366] binder: undelivered TRANSACTION_COMPLETE [ 342.695237] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.700832] binder: send failed reply for transaction 257, target dead [ 342.804552] binder: 13452 RLIMIT_NICE not set 21:17:51 executing program 3: 21:17:51 executing program 2: 21:17:51 executing program 4: [ 342.881244] binder: 13451:13452 got reply transaction with no transaction stack [ 342.889007] binder: 13451:13452 transaction failed 29201/-71, size 96-0 line 2741 21:17:52 executing program 3: 21:17:52 executing program 2: 21:17:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x46, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 343.057136] binder: release 13451:13452 transaction 260 out, still active [ 343.064364] binder: undelivered TRANSACTION_COMPLETE 21:17:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 343.115701] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.121286] binder: send failed reply for transaction 260, target dead [ 343.271193] binder: 13473 RLIMIT_NICE not set [ 343.280556] binder: 13467:13473 got reply transaction with no transaction stack [ 343.288353] binder: 13467:13473 transaction failed 29201/-71, size 96-0 line 2741 21:17:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:52 executing program 4: 21:17:52 executing program 3: 21:17:52 executing program 2: 21:17:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x46, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 343.584160] binder: release 13467:13473 transaction 263 out, still active [ 343.591204] binder: undelivered TRANSACTION_COMPLETE [ 343.599132] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.604858] binder: send failed reply for transaction 263, target dead [ 343.689288] binder: 13481 RLIMIT_NICE not set [ 343.710564] binder: 13477:13481 got reply transaction with no transaction stack [ 343.718381] binder: 13477:13481 transaction failed 29201/-71, size 96-0 line 2741 21:17:52 executing program 2: 21:17:52 executing program 3: 21:17:52 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) 21:17:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x47, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d18"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 343.845724] binder: release 13477:13481 transaction 266 out, still active [ 343.852964] binder: undelivered TRANSACTION_COMPLETE [ 343.880418] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.886186] binder: send failed reply for transaction 266, target dead [ 343.958451] ptrace attach of "/root/syz-executor4"[10066] was attempted by "/root/syz-executor4"[13492] 21:17:53 executing program 2: 21:17:53 executing program 3: [ 344.024496] ptrace attach of "/root/syz-executor4"[10066] was attempted by "/root/syz-executor4"[13495] [ 344.047407] binder: 13497 RLIMIT_NICE not set [ 344.060108] binder: 13493:13497 got reply transaction with no transaction stack [ 344.067871] binder: 13493:13497 transaction failed 29201/-71, size 96-0 line 2741 21:17:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:53 executing program 2: 21:17:53 executing program 3: 21:17:53 executing program 4: 21:17:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x47, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d18"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 344.577147] binder: release 13493:13497 transaction 269 out, still active [ 344.584411] binder: undelivered TRANSACTION_COMPLETE [ 344.609693] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.615546] binder: send failed reply for transaction 269, target dead 21:17:53 executing program 2: 21:17:53 executing program 3: 21:17:53 executing program 4: [ 344.785328] binder: 13514 RLIMIT_NICE not set [ 344.817151] binder: 13513:13514 got reply transaction with no transaction stack [ 344.825020] binder: 13513:13514 transaction failed 29201/-71, size 96-0 line 2741 21:17:53 executing program 2: 21:17:53 executing program 4: 21:17:54 executing program 3: [ 344.993828] binder: release 13513:13514 transaction 272 out, still active [ 345.000932] binder: undelivered TRANSACTION_COMPLETE [ 345.036503] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.042352] binder: send failed reply for transaction 272, target dead 21:17:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x47, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d18"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:54 executing program 4: 21:17:54 executing program 2: 21:17:54 executing program 3: [ 345.597428] binder: 13540 RLIMIT_NICE not set 21:17:54 executing program 4: [ 345.620525] binder: 13536:13540 got reply transaction with no transaction stack [ 345.628343] binder: 13536:13540 transaction failed 29201/-71, size 96-0 line 2741 21:17:54 executing program 3: 21:17:54 executing program 2: 21:17:54 executing program 4: 21:17:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:55 executing program 3: [ 345.882364] binder: release 13536:13540 transaction 275 out, still active [ 345.889474] binder: undelivered TRANSACTION_COMPLETE [ 345.901325] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.907095] binder: send failed reply for transaction 275, target dead [ 346.072229] binder: 13557 RLIMIT_NICE not set [ 346.076876] binder: 13557 RLIMIT_NICE not set 21:17:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 346.138777] binder: 13557 RLIMIT_NICE not set [ 346.143537] binder_alloc: 13554: binder_alloc_buf, no vma [ 346.149145] binder: 13554:13557 transaction failed 29189/-3, size 96-0 line 2973 [ 346.156927] binder: send failed reply for transaction 278 to 13554:13557 [ 346.441947] binder: undelivered TRANSACTION_COMPLETE [ 346.447121] binder: undelivered TRANSACTION_ERROR: 29189 21:17:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:55 executing program 2: 21:17:55 executing program 4: 21:17:55 executing program 3: 21:17:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:55 executing program 4: [ 346.609899] binder_alloc: 13567: binder_alloc_buf, no vma [ 346.615713] binder: 13567:13568 transaction failed 29189/-3, size 96-0 line 2973 [ 346.623545] binder: send failed reply for transaction 281 to 13567:13568 21:17:55 executing program 3: 21:17:55 executing program 2: [ 346.694812] binder: undelivered TRANSACTION_COMPLETE [ 346.700141] binder_release_work: 1 callbacks suppressed [ 346.700153] binder: undelivered TRANSACTION_ERROR: 29189 21:17:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 346.805919] binder: undelivered TRANSACTION_ERROR: 29190 21:17:55 executing program 3: 21:17:55 executing program 4: [ 346.903362] binder_alloc: 13580: binder_alloc_buf, no vma [ 346.909116] binder: 13580:13581 transaction failed 29189/-3, size 96-0 line 2973 [ 346.916885] binder: send failed reply for transaction 284 to 13580:13581 [ 346.962460] binder: undelivered TRANSACTION_COMPLETE [ 346.967768] binder: undelivered TRANSACTION_ERROR: 29189 21:17:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 347.082459] binder: undelivered TRANSACTION_ERROR: 29190 21:17:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:56 executing program 2: 21:17:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:56 executing program 4: 21:17:56 executing program 3: [ 347.556255] binder_set_nice: 6 callbacks suppressed [ 347.556270] binder: 13597 RLIMIT_NICE not set [ 347.566295] binder: 13597 RLIMIT_NICE not set [ 347.589181] binder: 13597 RLIMIT_NICE not set [ 347.594077] binder_alloc: 13594: binder_alloc_buf, no vma 21:17:56 executing program 2: 21:17:56 executing program 3: 21:17:56 executing program 4: [ 347.599670] binder: 13594:13597 transaction failed 29189/-3, size 96-0 line 2973 [ 347.607377] binder: send failed reply for transaction 287 to 13594:13597 [ 347.624766] binder: undelivered TRANSACTION_COMPLETE [ 347.630149] binder: undelivered TRANSACTION_ERROR: 29189 21:17:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:56 executing program 4: [ 347.778348] binder: undelivered TRANSACTION_ERROR: 29190 21:17:56 executing program 3: [ 347.947534] binder: 13614 RLIMIT_NICE not set [ 347.952369] binder: 13614 RLIMIT_NICE not set [ 347.984862] binder: 13614 RLIMIT_NICE not set [ 347.989582] binder_alloc: 13612: binder_alloc_buf, no vma [ 347.995810] binder: 13612:13614 transaction failed 29189/-3, size 96-0 line 2973 [ 348.003488] binder: send failed reply for transaction 290 to 13612:13614 21:17:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 348.048785] binder: undelivered TRANSACTION_COMPLETE [ 348.054207] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.131283] binder: undelivered TRANSACTION_ERROR: 29190 21:17:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:57 executing program 2: 21:17:57 executing program 4: 21:17:57 executing program 3: 21:17:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 348.553347] binder: 13625 RLIMIT_NICE not set [ 348.558047] binder: 13625 RLIMIT_NICE not set 21:17:57 executing program 4: 21:17:57 executing program 3: 21:17:57 executing program 2: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000000)=@ng={0x4, 0x5}, 0x2, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 348.598006] binder: 13625 RLIMIT_NICE not set [ 348.602797] binder_alloc: 13624: binder_alloc_buf, no vma [ 348.608889] binder: 13624:13625 transaction failed 29189/-3, size 96-0 line 2973 [ 348.616710] binder: send failed reply for transaction 293 to 13624:13625 21:17:57 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 348.714380] binder: undelivered TRANSACTION_COMPLETE [ 348.719762] binder: undelivered TRANSACTION_ERROR: 29189 21:17:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) creat(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:17:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 348.850501] binder: undelivered TRANSACTION_ERROR: 29190 [ 348.959317] binder: 13646 RLIMIT_NICE not set 21:17:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 349.100456] binder: release 13645:13646 transaction 296 out, still active [ 349.107611] binder: undelivered TRANSACTION_COMPLETE [ 349.127700] binder: release 13645:13646 transaction 296 in, still active [ 349.134916] binder: send failed reply for transaction 296, target dead 21:17:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffbfffbfaf, 0x0) 21:17:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:17:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x11, @broadcast, 0x0, 0x1, 'r\x00\x02@\x00 \x00'}, 0x2c) 21:17:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x05\x05\x00'}, &(0x7f0000001fee)='R\trcst\xe3c%sgrVex:De', 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 21:17:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf432, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa, 0x0, 0x0, 0x0, 0x8906}}}}}, 0x0) 21:17:58 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x1e0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = inotify_init() readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 21:17:58 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000010000000000000000000000197f24acc233eeae0750e03690e37cd4a4e50fc4909103cc53e038db282d676a683568600f172c4d0d1a7917bd7a010eccc1c9daa847cbb69ecb188871e80023d9"], 0x1, 0x0, 0x0) 21:17:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd3, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 349.681168] binder: release 13666:13667 transaction 298 out, still active [ 349.688413] binder: undelivered TRANSACTION_COMPLETE 21:17:58 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce16087dcf944e3bd1a2db81d8e584574f9f041"], 0x1, 0x0, 0x0) [ 349.736627] binder: release 13666:13667 transaction 298 in, still active [ 349.743770] binder: send failed reply for transaction 298, target dead 21:17:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 349.920714] binder: release 13693:13694 transaction 300 out, still active [ 349.928034] binder: undelivered TRANSACTION_COMPLETE 21:17:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 349.975470] binder: release 13693:13694 transaction 300 in, still active [ 349.982650] binder: send failed reply for transaction 300, target dead 21:17:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:17:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 21:17:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) 21:17:59 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 21:17:59 executing program 4: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6003, 0x1) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) [ 350.478881] binder: 13711:13712 ioctl c0306201 0 returned -14 [ 350.483450] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure 21:17:59 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e409cc1d76800000000ae0f50e03690e30d3ebf04e4fc7459e6"], 0x1, 0x0, 0x0) 21:17:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 350.612383] binder: release 13711:13712 transaction 302 out, still active [ 350.619501] binder: undelivered TRANSACTION_COMPLETE [ 350.652176] binder: release 13711:13712 transaction 302 in, still active 21:17:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) [ 350.659190] binder: send failed reply for transaction 302, target dead 21:17:59 executing program 3: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x200800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80800) ptrace$cont(0x1f, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x4, 0x5, 0x1, 0x8, 0x0, 0x435, 0x400, 0x0, 0x541, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x100000001, 0x2, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, 0x631, 0xfff, 0x6, 0x5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x3, 0xa6c1, 0x8, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xa, 0x8, 0x8, 0x5, 0xf000000000000000}, r0, 0x0, 0xffffffffffffffff, 0x2) 21:17:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 350.869476] binder: release 13735:13737 transaction 304 out, still active [ 350.876832] binder: undelivered TRANSACTION_COMPLETE 21:18:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f00000000c0)={0x11, @broadcast, 0x0, 0x1, 'r\x00\x02@\x00 \x00'}, 0x2c) [ 350.919464] binder: release 13735:13737 transaction 304 in, still active [ 350.926674] binder: send failed reply for transaction 304, target dead [ 350.935612] ptrace attach of "/root/syz-executor3"[13748] was attempted by "/root/syz-executor3"[13749] 21:18:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 351.106325] binder: undelivered TRANSACTION_COMPLETE [ 351.121039] binder: send failed reply for transaction 306, target dead 21:18:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 21:18:00 executing program 2: 21:18:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 21:18:00 executing program 3: 21:18:00 executing program 3: mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:18:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="e63f10bf92f13ac0b4687d1d68258af0f2b4", 0x12}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) 21:18:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5335, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000015) 21:18:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 21:18:00 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200123275781e073703a1989b34a3c084ed2ff082bd3e47e8f7"], 0x1, 0x0, 0x0) [ 351.589237] binder: send failed reply for transaction 308, target dead 21:18:00 executing program 4: [ 351.789764] binder: send failed reply for transaction 310, target dead 21:18:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 21:18:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, 0x0) 21:18:01 executing program 3: 21:18:01 executing program 4: 21:18:01 executing program 3: 21:18:01 executing program 4: 21:18:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) [ 352.603220] binder: send failed reply for transaction 312 to 13806:13807 [ 352.610231] binder_release_work: 2 callbacks suppressed [ 352.610240] binder: undelivered TRANSACTION_COMPLETE [ 352.620977] binder: undelivered TRANSACTION_ERROR: 29189 21:18:01 executing program 2: 21:18:01 executing program 4: 21:18:01 executing program 3: [ 352.756346] binder_set_nice: 17 callbacks suppressed [ 352.756360] binder: 13820 RLIMIT_NICE not set [ 352.766447] binder: 13820 RLIMIT_NICE not set 21:18:01 executing program 2: [ 352.880509] binder: undelivered TRANSACTION_COMPLETE [ 352.936795] binder: send failed reply for transaction 314, target dead 21:18:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:02 executing program 4: 21:18:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, 0x0) 21:18:02 executing program 5: 21:18:02 executing program 3: 21:18:02 executing program 2: 21:18:02 executing program 4: 21:18:02 executing program 2: 21:18:02 executing program 3: 21:18:02 executing program 5: 21:18:02 executing program 4: 21:18:02 executing program 2: 21:18:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:03 executing program 3: 21:18:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, 0x0) 21:18:03 executing program 2: 21:18:03 executing program 5: 21:18:03 executing program 4: 21:18:03 executing program 3: 21:18:03 executing program 4: 21:18:03 executing program 3: 21:18:03 executing program 2: 21:18:03 executing program 5: 21:18:03 executing program 2: 21:18:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:03 executing program 4: 21:18:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags}) 21:18:04 executing program 3: 21:18:04 executing program 5: 21:18:04 executing program 2: 21:18:04 executing program 4: 21:18:04 executing program 4: 21:18:04 executing program 3: 21:18:04 executing program 5: 21:18:04 executing program 2: 21:18:04 executing program 4: 21:18:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:04 executing program 3: 21:18:05 executing program 2: 21:18:05 executing program 5: 21:18:05 executing program 4: 21:18:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags}) 21:18:05 executing program 3: 21:18:05 executing program 3: 21:18:05 executing program 5: 21:18:05 executing program 4: 21:18:05 executing program 2: 21:18:05 executing program 5: 21:18:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:05 executing program 3: 21:18:05 executing program 4: 21:18:05 executing program 2: 21:18:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x4}], 0x2af, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags}) 21:18:06 executing program 5: 21:18:06 executing program 4: 21:18:06 executing program 2: 21:18:06 executing program 3: 21:18:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:06 executing program 5: 21:18:06 executing program 2: 21:18:06 executing program 4: 21:18:06 executing program 3: 21:18:06 executing program 2: 21:18:06 executing program 3: 21:18:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:07 executing program 5: 21:18:07 executing program 4: 21:18:07 executing program 3: 21:18:07 executing program 2: 21:18:07 executing program 0: 21:18:07 executing program 3: 21:18:07 executing program 4: 21:18:07 executing program 2: 21:18:07 executing program 5: 21:18:07 executing program 0: 21:18:07 executing program 3: 21:18:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x200000001, 0x6, 0x8, 0x4, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 21:18:07 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001f40), 0xc) syz_open_dev$mice(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:18:07 executing program 4: 21:18:07 executing program 3: 21:18:07 executing program 4: 21:18:07 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200123275781e073703a1989b34a3c084ed2ff082bd3e47e8f7fa79"], 0x1, 0x0, 0x0) 21:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x8a09a642352224fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8, 0x200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200, 0x0) pipe(&(0x7f00000009c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000980)=0x0) getpgid(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x81, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x18) ioctl(r7, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030800000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea041325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r6, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) 21:18:08 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="bdd381fd778c4925d87130b57c60f33c8908869c01ed81c276f192c9fb19debe3a6c65c15215b8864abdf9b0b327404e87ec"], 0x32}, 0x0) 21:18:08 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) 21:18:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 21:18:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) r3 = epoll_create1(0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0xe341739f8b7ef7d6, &(0x7f00000001c0), &(0x7f0000000300)=0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, r4}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000340)={0x7ff, 0x2, 0xaf}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc9c6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x66c, 0x3, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) sendfile(r6, r5, &(0x7f0000000180), 0x10013c93a) 21:18:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 359.263253] IPVS: ftp: loaded support on port[0] = 21 21:18:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c03, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, "b869ffb4d8c86c385942ef4f50dccabba5c12c5e9dd7f92a5b28c7250ab60614cdb789cb94db6705a053ed10895b465a52a88b593a4e9f953633ba71c4d498a5", "1a52992c5d6aa5756c3a1bae4d40bd1eae09a1614bfa839965657610f4dd1f6bcea26df2202b1dde5b773b62765ec3c061a6db25595218ab553189502bb54061", "dbe7c852a58eb9495ba53e9d5530f0b92d9498348840dc65b3c3276f2407bf7c"}) 21:18:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 21:18:08 executing program 3: socketpair$unix(0x1, 0x400000003, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x0) 21:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x8a09a642352224fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8, 0x200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200, 0x0) pipe(&(0x7f00000009c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000980)=0x0) getpgid(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x81, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x18) ioctl(r7, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030800000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea041325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r6, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) 21:18:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') [ 359.574277] IPVS: ftp: loaded support on port[0] = 21 21:18:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 21:18:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:08 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16ea) read(r0, &(0x7f0000000140)=""/255, 0xff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x2, 0x2}, 0xc) 21:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x8a09a642352224fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8, 0x200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200, 0x0) pipe(&(0x7f00000009c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000980)=0x0) getpgid(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x81, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x18) ioctl(r7, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030800000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea041325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r6, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) 21:18:09 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce16087dcf944e3bd1a2db81d8e584574f9f041d50a1a61", @ANYRESHEX], 0x2, 0x0, 0x0) 21:18:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000320029080000000000000000030000000c00f000080009007f49a5150e361e20062befb4502987b2ecca0717694497426734c20f1bda5bc4d937a355fe49c82d62a0adc08ff4b9131d7e7ab55814ceb3fc479b1242ed68ecf52c4b51004165c76f014e06f983f3b2dec365939216b647fbf84e", @ANYRES32=0x0], 0x2}}, 0x0) 21:18:09 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) pivot_root(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 21:18:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x2c3, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4000000}]}]}, 0x20}}, 0x0) 21:18:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:09 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6786"], 0x1, 0x0, 0x0) 21:18:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 21:18:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x2c) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 21:18:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000140)="0f01cf0f01efba4200ed260f015d0af020b3f03c673636660f383d98fd0500000f01df0fbea800000f0118baf80c66b8be3bb28f66efbafc0cec", 0x3a}], 0x231, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x0, &(0x7f0000000480), 0x0) set_mempolicy(0x2, &(0x7f00000002c0)=0x6bc, 0x81) perf_event_open(&(0x7f0000000180)={0x1, 0xfcfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000380), 0x0}, 0x18) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x46, 0xc80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000200)={0x20, 0x0, 0x4, {0x1, 0x4, 0x1d, 0x10000}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000500), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x8a09a642352224fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8, 0x200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200, 0x0) pipe(&(0x7f00000009c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000980)=0x0) getpgid(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x81, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x18) ioctl(r7, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030800000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea041325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000e00)=ANY=[@ANYBLOB="cb2b4d8d30ea9b5255175d43fca389e342de5ec740fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d44225bc274a1f1576385a885b764dc4babfdf01646fa85765072f75f3267f1ced252e7419523d2075fb98f5696d17b505512d51a0a1e53f8e26cded9e551d2e68def4954fa7ffd3f81026e193e999bc357521a8e9799fe114e204db050bf9a50c94d3d01f8a436ccaf26a8bd4cd371f401cff939fa559e71ce024fc3c4540465cd73fd534855cb6c01fbcad172ee88d3a24a108134b2e349048cb3fd0000c00000000000a3014904343ccf35f92584556943fc0d38cea7e868b819004d05a190fcb27e1b682765f16ba1733cc86ddf9b7cbfc1cea713a9279937652b78963ed3d352daa19eb5b567f8156ef8661d30269dacb35b9e877e0c557efa2e6e2066ede2b5efb6ed7a40f42386c06e90c13ede70e584d826126e0acc8d9d6c446b45fa4912d4c3f59995b4cd7c738c9d1b9333f407ffaa5499d213a0c375fc672a4905617dbefd2030c5593984e80b4932fdd35a0864cad3db9d9b14c550c89efb9d79987bd170f9f580ef8fe820fffb7aff479d3d0b77cbfab7c263b06b28e41bcf9beb1232ca4a6e129cd719b48d5b28c6ae0db602887399d025b8d9ef9a2d85679395f05b4fa857f333aca96142d9f20545af9ccaca0c2d87524f6b23c17997f988e42f22fa55ae0e57099661d3f982869fc3b62ef3cead0b399499b96f4c88b901a2da76a358b8d68b1c31177700c6f32a8dab9eb2b917516734badbf94fe95b76f375f1dee7b85c1d95a7896742b513d057ab4e714bb83f4c6a9e1579330480762035d49df91e76b5ada42fcec8e9733605900b739fac300e02a717ae34707371f0479c99a6b462543ae2827addae3b5f21f75930586f37980dfa1be93b82027394b8bcaa1065d5fac44d2b3394bfc80bee719bf7dfd366e1876f6255ca6bb8bb59f9a2d0f73f04572b5d4f693fab9b4f3cc581e10d98748b3eb556a8a8b678ae0000000068b39741e4e9b368b79a4510c5a1e56361e2237924017f961c137eea82dd0ddac39b00d09d6f2693986f1c0f75acbbee5c33ef583aadd2f365d3dce30aa091ae023dc8f993ae54b388be2a669712ee3fe97939bd2ee69b4df61d8df8c7798e52d2f8aa901842db8951ed75ce09e6e57f54000000000090886364e87a26d5b757500d6da522321d391999a14a4af0343a6aa897f8b7900b15e98650332591d20b2487b34280128af0a906cb6057b94792c4552cfe5c57097185aef27efd78570c9535246dd3fd0d5655b38b10dc3e8f924239a5ffbda050c39199b5b2b25aea0266500a87d803"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r6, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) 21:18:09 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e40"], 0x1, 0x0, 0x0) 21:18:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000140)=""/31, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) 21:18:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:09 executing program 3: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0xc, 0x1, 0x25}], 0xc}}], 0x1, 0x0) 21:18:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x338, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_getres(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000010001208"]}) 21:18:10 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000001c00)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x401, r0, &(0x7f0000000340)="ac12fcb5c7ad5a6184817554006d1ddc4f2045e0e328ec10afcbec", 0x1b, 0xfffffffffffffffa, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x0, 0x0]) ppoll(&(0x7f0000000280)=[{}], 0x20000000000000ec, &(0x7f0000000200), &(0x7f0000000240), 0x8) 21:18:10 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9365753d794919ca25597985ca83cf4d819f438a7a6c6b7b09a42bfd0c60c7d7b7408f49fc3d0b7a3a85cf31c12cb1a02743eb43c4cab9332"], 0x1, 0x0}, 0x0) 21:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 21:18:10 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000000000000000800120000000000000009000000000015006e39498b80bc0000000000000000b4900059a2000000000000265bac760700000000000000000000000000000000030006001600000002002000ac14ffbb000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:18:10 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x0, "70f3d0f554c3e3aa88d031bb057b60075d49df64f2b8ed24eb386634d481ae36eb76dfd2ae8d8a83ed4986c1958d6e046c005a9fa4b0d97d3e61090a042baf51f8499ad75e0cfb2b02922406e6b0580e"}, 0xd8) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20040004, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) 21:18:10 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) dup2(r1, r0) 21:18:10 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000000000000000086dd60090001000000fd0000000000000000000000000001000000000000000000000000000000000000000000000000"], 0x0) 21:18:10 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce16087dcf944e3bd1a2db81d8e584574f9", @ANYRESHEX], 0x2, 0x0, 0x0) 21:18:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000140001ec01a7ec00000000001e000000c1000000"], 0x1}}, 0x0) 21:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:10 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 21:18:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000440)={0x0, 0x0, 0x8, {0x77359400}, 0x80, 0x100}) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000006e000009000000000000000000000000000000020000000000000007000000000000000001e009000000001c0000000000000000000000000000000000000000000000000000000000000002000000000000005f0d000000000000ff03000000000000010100010000000000000000000000000000000000000000000000000000000000000000000000000700000000e3ffffff0000c0466fd8110200000000000000020802000000000000000000000000000000000000000000000000000000000000008d49883b75c93b3a000000000000020000000000000002000000000000805bd3000600000000000000000000000000000000000000000000000000000000000000000000000014030000000000000200000000000000000000000100000001050602000000000000000000000000000000000000000000000000000000000000000000000000e18800000000000000000000ffffffff1af9ffffffffffff010904f90000000000000000000000000000000000000000000000000000000000000000000000000300000000000000a565fa5f000000000000000000000000010003fe0000000000000020000000000000000000000000000000000000000000000000000000007f00000000000000780000000000000040000000000000000323e6ff0000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ff07000000000000000000000000000000060603000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x9) r5 = socket(0xa, 0x3, 0x8) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x3, 0x80000, 0x5, 0xfffffffffffffffd}, {0x7fefadfb, 0x8, 0x10000, 0x9}, {0x9, 0x20, 0x100000001, 0x80}, {0xffffffffffffff01, 0x984c, 0xfffffffffffffffd, 0xc96}, {0xffffffff, 0x3, 0x0, 0x5a}, {0x3f, 0x112000, 0xfffffffffffffff8, 0xc0}, {0xe60, 0x5, 0x100, 0x1}, {0xa7a, 0x2, 0xffffffffffffff81, 0x4}, {0x3, 0x7, 0x4, 0x7}]}, 0x10) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000001980)=0xfffffffffffffdee) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'bridge0\x004\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000001940)='nbd\x00') ptrace$getsig(0x4202, r2, 0xffff, &(0x7f0000000500)) getpgid(r2) fstat(r0, &(0x7f00000018c0)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04072c077000fcdbdf2712040c0006008e00000047ca8f6e"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000580)) write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file0', [{0x20, 'proc-ppp0selfGPLselinux'}, {0x20, 'bridge0\x004\x01\x00'}, {0x20, 'nbd\x00'}, {0x20, '\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00'}, {0x20, 'TRUE'}], 0xa, "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"}, 0x104a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x8000, 0x10003, 0x80000000}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2001, 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x20) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0xa) 21:18:10 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d0280bdb2f3e8c64869c37be72e4fddd7e60cece27e03c205d939c0ae1605bf012af8cf8f203c50200123275781e073703a1989b34a3c084ed2ff082bd3e47e8f7fa79cb9305b87c00049b4bafb5cc69128894e75af8c0b26ef2c2df6badbb2d17"], 0x1, 0x0, 0x0) 21:18:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 21:18:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffbfffbfad, 0x0) [ 361.998107] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.005912] bridge0: port 1(bridge_slave_0) entered disabled state 21:18:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.782632] device bridge_slave_1 left promiscuous mode [ 362.788431] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.833191] device bridge_slave_0 left promiscuous mode [ 362.839009] bridge0: port 1(bridge_slave_0) entered disabled state 21:18:12 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={r0, r1}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/103, 0x67, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8907, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000006c0)=0x80) prlimit64(0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280)) r3 = socket(0xa, 0x3, 0x8) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00z\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) 21:18:12 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67869c37be72e4fddd7e79f2cb860d7908f9907106cb932d0ce16087dcf944e3bd1a2db81d8e584574f9f041d50a1a61026809133995c7", @ANYRESHEX], 0x2, 0x0, 0x0) 21:18:12 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00002e2f66694c653000502a9b8cfef4517198ac47082bea7078f4d249bbf8e1b8412638f149ea36720caf00b436623a068d3983e2b6ec1e3b0113272330d70394c9365753d794919ca25597985ca83cf4d819f438a7a6c6b7b09a42bfd0c60c7d7b7408f49fc3d0b7a3a85cf31c12cb1a0274"], 0x1, 0x0}, 0x0) 21:18:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffbfffbfb3, 0x0) 21:18:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000300)="9b", 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 21:18:12 executing program 2: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) inotify_init1(0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x200800, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 363.165388] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.172448] bridge0: port 1(bridge_slave_0) entered disabled state 21:18:12 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfffffffffffffc85) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) 21:18:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0xffffff8f) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000200)}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)=""/113, 0xfb00}], 0x1, &(0x7f00000002c0)=""/73, 0x49}}], 0x2, 0x0, 0x0) [ 363.339472] ptrace attach of "/root/syz-executor2"[14247] was attempted by "/root/syz-executor2"[14248] 21:18:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000680)={0x60, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @initdev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 21:18:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="6745b100b9700800000f32c4824129a7954c2a8248b800000100000000000f23c80f21f835000050000f23f8c7442400b8000000c744240203000000ff1c24260f019be4000000f08141d1731b7b850f21c1b8010000000f01d966b8e0008ec8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 363.967448] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.974031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.981186] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.987792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.994710] device bridge0 entered promiscuous mode [ 364.014361] Started in network mode [ 364.018150] Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 364.027080] New replicast peer: 172.30.0.0 [ 364.031648] Enabled bearer , priority 10 [ 364.052446] ================================================================== [ 364.059864] BUG: KMSAN: uninit-value in __copy_skb_header+0x292/0x760 [ 364.061703] CPU: 1 PID: 14267 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #2 [ 364.061703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.061703] Call Trace: [ 364.061703] dump_stack+0x173/0x1d0 [ 364.061703] kmsan_report+0x12e/0x2a0 [ 364.061703] __msan_warning+0x82/0xf0 [ 364.061703] __copy_skb_header+0x292/0x760 [ 364.061703] __skb_clone+0xa2/0x990 [ 364.061703] skb_clone+0x3e8/0x580 [ 364.061703] netlink_deliver_tap+0x7b3/0xec0 [ 364.061703] netlink_unicast+0x9cd/0x1020 [ 364.061703] ctrl_getfamily+0xad2/0xba0 [ 364.061703] ? ctrl_fill_info+0x1d40/0x1d40 [ 364.061703] genl_rcv_msg+0x185f/0x1a60 [ 364.061703] ? __msan_poison_alloca+0x1f0/0x2a0 [ 364.061703] netlink_rcv_skb+0x444/0x640 [ 364.061703] ? genl_unbind+0x390/0x390 [ 364.061703] genl_rcv+0x63/0x80 [ 364.061703] netlink_unicast+0xf40/0x1020 [ 364.061703] netlink_sendmsg+0x127f/0x1300 [ 364.061703] ___sys_sendmsg+0xdb9/0x11b0 [ 364.061703] ? netlink_getsockopt+0x1460/0x1460 [ 364.061703] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 364.061703] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 364.061703] ? __fget_light+0x6e1/0x750 [ 364.061703] __se_sys_sendmsg+0x305/0x460 [ 364.061703] __x64_sys_sendmsg+0x4a/0x70 [ 364.061703] do_syscall_64+0xbc/0xf0 [ 364.061703] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 364.061703] RIP: 0033:0x411db1 [ 364.061703] Code: 75 14 b8 2e 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 18 00 00 c3 48 83 ec 08 e8 ea fa ff ff 48 89 04 24 b8 2e 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 fb ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 364.061703] RSP: 002b:00007f26950e59c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 364.061703] RAX: ffffffffffffffda RBX: 00007f26950e5a58 RCX: 0000000000411db1 [ 364.061703] RDX: 0000000000000000 RSI: 00007f26950e5a00 RDI: 0000000000000005 [ 364.061703] RBP: 0000000000000005 R08: 0000000000000009 R09: 0000000000000000 [ 364.061703] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f26950e5a40 [ 364.061703] R13: 00000000004cd338 R14: 00000000004db1a0 R15: 00000000ffffffff [ 364.061703] [ 364.061703] Uninit was created at: [ 364.061703] kmsan_internal_poison_shadow+0x92/0x150 [ 364.061703] kmsan_kmalloc+0xa6/0x130 [ 364.061703] kmem_cache_alloc+0x572/0xb90 [ 364.061703] skb_clone+0x300/0x580 [ 364.061703] netlink_deliver_tap+0x7b3/0xec0 [ 364.061703] netlink_unicast+0x9cd/0x1020 [ 364.061703] ctrl_getfamily+0xad2/0xba0 [ 364.061703] genl_rcv_msg+0x185f/0x1a60 [ 364.061703] netlink_rcv_skb+0x444/0x640 [ 364.061703] genl_rcv+0x63/0x80 [ 364.061703] netlink_unicast+0xf40/0x1020 [ 364.061703] netlink_sendmsg+0x127f/0x1300 [ 364.061703] ___sys_sendmsg+0xdb9/0x11b0 [ 364.061703] __se_sys_sendmsg+0x305/0x460 [ 364.061703] __x64_sys_sendmsg+0x4a/0x70 [ 364.061703] do_syscall_64+0xbc/0xf0 [ 364.061703] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 364.061703] ================================================================== [ 364.061703] Disabling lock debugging due to kernel taint [ 364.061703] Kernel panic - not syncing: panic_on_warn set ... [ 364.061703] CPU: 1 PID: 14267 Comm: syz-executor0 Tainted: G B 4.20.0-rc7+ #2 [ 364.061703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.061703] Call Trace: [ 364.061703] dump_stack+0x173/0x1d0 [ 364.061703] panic+0x3ce/0x961 [ 364.061703] kmsan_report+0x293/0x2a0 [ 364.061703] __msan_warning+0x82/0xf0 [ 364.061703] __copy_skb_header+0x292/0x760 [ 364.061703] __skb_clone+0xa2/0x990 [ 364.061703] skb_clone+0x3e8/0x580 [ 364.061703] netlink_deliver_tap+0x7b3/0xec0 [ 364.061703] netlink_unicast+0x9cd/0x1020 [ 364.061703] ctrl_getfamily+0xad2/0xba0 [ 364.061703] ? ctrl_fill_info+0x1d40/0x1d40 [ 364.061703] genl_rcv_msg+0x185f/0x1a60 [ 364.061703] ? __msan_poison_alloca+0x1f0/0x2a0 [ 364.061703] netlink_rcv_skb+0x444/0x640 [ 364.061703] ? genl_unbind+0x390/0x390 [ 364.061703] genl_rcv+0x63/0x80 [ 364.061703] netlink_unicast+0xf40/0x1020 [ 364.061703] netlink_sendmsg+0x127f/0x1300 [ 364.061703] ___sys_sendmsg+0xdb9/0x11b0 [ 364.061703] ? netlink_getsockopt+0x1460/0x1460 [ 364.061703] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 364.061703] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 364.061703] ? __fget_light+0x6e1/0x750 [ 364.061703] __se_sys_sendmsg+0x305/0x460 [ 364.061703] __x64_sys_sendmsg+0x4a/0x70 [ 364.061703] do_syscall_64+0xbc/0xf0 [ 364.061703] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 364.061703] RIP: 0033:0x411db1 [ 364.061703] Code: 75 14 b8 2e 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 18 00 00 c3 48 83 ec 08 e8 ea fa ff ff 48 89 04 24 b8 2e 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 fb ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 364.061703] RSP: 002b:00007f26950e59c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 364.061703] RAX: ffffffffffffffda RBX: 00007f26950e5a58 RCX: 0000000000411db1 [ 364.061703] RDX: 0000000000000000 RSI: 00007f26950e5a00 RDI: 0000000000000005 [ 364.061703] RBP: 0000000000000005 R08: 0000000000000009 R09: 0000000000000000 [ 364.061703] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f26950e5a40 [ 364.061703] R13: 00000000004cd338 R14: 00000000004db1a0 R15: 00000000ffffffff [ 364.061703] Kernel Offset: disabled [ 364.061703] Rebooting in 86400 seconds..