0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x6000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40007ff, 0x0) r1 = socket$tipc(0x1e, 0x7, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x181280) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x20, 0x80000000, &(0x7f0000000140)=0x7}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x3, 0x40000001, 0x81, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) fstatfs(r1, &(0x7f0000000200)=""/202) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r2}) 13:53:39 executing program 5: setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000340), 0x4) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x3, {0x7, 0x1d, 0x7fffffff, 0x310204, 0x5, 0xfffffffffffffff9, 0x2}}, 0x50) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) timer_create(0x4, &(0x7f0000000040)={0x0, 0x7, 0x6}, &(0x7f0000000080)=0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @loopback}, &(0x7f0000000400)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0xfc) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0x3, &(0x7f0000000240)='!\xc1\x00', r3}, 0x30) 13:53:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x6000000) 13:53:39 executing program 1 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:53:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) move_pages(r1, 0x6, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x4, 0x8, 0xff], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6) 13:53:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7000000) 13:53:39 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 831.370614][T13652] binder_alloc: binder_alloc_mmap_handler: 13576 20001000-20004000 already mapped failed -16 [ 831.401771][T13652] binder: 13576:13652 ioctl c018620b 0 returned -14 [ 831.402233][T13882] binder: BINDER_SET_CONTEXT_MGR already set [ 831.430421][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 831.467702][ T2988] binder: release 13576:13652 transaction 366 out, still active 13:53:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:53:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0xa000000) 13:53:39 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40000000000401, 0x3) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 831.475857][T13882] binder: 13576:13882 ioctl 40046207 0 returned -16 [ 831.492637][ T2988] binder: send failed reply for transaction 366, target dead [ 831.596334][T13906] binder: 13898:13906 ioctl c018620b 0 returned -14 [ 832.382075][T14000] binder_alloc: binder_alloc_mmap_handler: 13898 20001000-20004000 already mapped failed -16 [ 832.393241][T13998] binder: 13898:13998 ioctl c018620b 0 returned -14 [ 832.407262][T14000] binder: BINDER_SET_CONTEXT_MGR already set [ 832.413429][T14000] binder: 13898:14000 ioctl 40046207 0 returned -16 [ 832.420511][T14001] binder_alloc: 13898: binder_alloc_buf, no vma [ 832.427034][T14001] binder: 13898:14001 transaction failed 29189/-3, size 24-8 line 3147 [ 832.435942][ T12] binder: release 13898:13998 transaction 370 out, still active [ 832.446486][ T12] binder: send failed reply for transaction 370, target dead 13:53:41 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xc000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:53:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x10000000) 13:53:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={r4}) kcmp(r1, r2, 0x6, r0, r0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:41 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2e, 0x4, 0x0, {0x0, 0x1, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x7530}}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 13:53:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 833.430274][T14014] binder: 14010:14014 ioctl c018620b 0 returned -14 13:53:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r2 = request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='/dev/video#\x00', 0xfffffffffffffff8) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="6deea3a610356580efb4dccdb31872a880574660180f6fef34fe58fa91773b4e5c6acedf7af40ad805e3ae9a89fa8e0480ec7cf2ed3453916e05c9013efc25d834a5e31f71509890d64d4209edc87880ab6e70139df4401cb32c540618d7d5daa43eaa101e76522377658632eb4cac029be0cd1a221b652af3bd37", 0x7b, 0xffffffffffffffff) r4 = request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='/dev/video#\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r2, r3, r4}, &(0x7f0000000500)=""/22, 0x16, &(0x7f0000000640)={&(0x7f0000000540)={'sha256-avx\x00'}, &(0x7f0000000580)="3787a1597ef389527f48b95e825cca03a71301aca4d99a8a9470e58342959742cdd9af67179288ef09d069e72a15f366cf6aaa5760ea51604921093f1ccf40b081f00559bdc16c336fc25707ddea3e65ba02dcda82aa100b94798547f413de1877faefb704e4c3214835722ffa64c57a8b5b697a79342eb9400b46a8ef966d0c53ae71bd76a4e4d0d11315ad9c9cbc463d458f023eaa71ec45", 0x99}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x6, 0x30, 0x43, 0x1}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x100000000}, &(0x7f0000000200)=0x90) 13:53:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x40000000) 13:53:41 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4600180}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xcc, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1dc3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x12}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x78}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x2, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:53:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x13, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x1000, 0x2, [0x5, 0xff]}, 0xc) 13:53:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x48000000) 13:53:42 executing program 4: getuid() r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x82, 0x20000) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000080)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x3, 0x2, 0x80002, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x200, 0x9, 0x2f, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) [ 834.012964][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 834.214604][T14084] binder_alloc: binder_alloc_mmap_handler: 14010 20001000-20004000 already mapped failed -16 [ 834.231117][T14084] binder: 14010:14084 ioctl c018620b 0 returned -14 [ 834.238387][T14246] binder: BINDER_SET_CONTEXT_MGR already set [ 834.250053][T14246] binder: 14010:14246 ioctl 40046207 0 returned -16 [ 834.262444][T14247] binder_alloc: 14010: binder_alloc_buf, no vma [ 834.275271][T14247] binder: 14010:14247 transaction failed 29189/-3, size 24-8 line 3147 [ 834.288267][ T12] binder: send failed reply for transaction 375 to 14010:14084 [ 834.300704][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:53:44 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x3f000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x7fff, 0xffff, @loopback, 0x9}}}, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0xb0d, 0x1}, 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:53:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x4c000000) 13:53:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000002, 0x0) 13:53:44 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x4, 0x22344ef7ad1bec9d, 0x7}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl(r0, 0x9, &(0x7f00000001c0)="8a4781eff9a90f06886b1e6ba1532e9d8ad963a69d0f7f45dddeb2d646cc146110c7267fd80c33f915dafdfb3d7cf94ca45c0bf5d54de7a4bd1e095254d560e24c83493a9b32de66ab72c524126ddb9ccc4785f536fef36e73a047f2737054587c4bbed7cc53d77cc236d1d77cd15babe7b284da87ac552ba9177bd39953c344c08006b4c87d99") 13:53:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:53:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000003, 0x0) [ 835.819815][T14258] binder: 14255:14258 ioctl c018620b 0 returned -14 13:53:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x3, 0x201, 0x9, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xf, @capture={0x1000, 0x1, {0x8, 0x7fff}, 0xd5, 0x3}}) recvmmsg(0xffffffffffffff9c, &(0x7f00000034c0)=[{{&(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000140)=""/28, 0x1c}], 0x3, &(0x7f0000000380)=""/22, 0x16}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/189, 0xbd}], 0x1, &(0x7f00000004c0)=""/62, 0x3e}, 0x7}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000780)=""/215, 0xd7}], 0x5, &(0x7f0000000900)=""/4096, 0x1000}, 0x200}, {{&(0x7f0000001900)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001980)=""/11, 0xb}], 0x1, &(0x7f0000001a00)=""/4096, 0x1000}}, {{&(0x7f0000002a00)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a80)=""/143, 0x8f}, {&(0x7f0000002b40)=""/16, 0x10}, {&(0x7f0000002b80)=""/214, 0xd6}], 0x3, &(0x7f0000002cc0)=""/202, 0xca}, 0x3}, {{&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e40)=""/199, 0xc7}, {&(0x7f0000002f40)=""/23, 0x17}, {&(0x7f0000002f80)=""/66, 0x42}, {&(0x7f0000003000)=""/53, 0x35}, {&(0x7f0000003040)=""/241, 0xf1}], 0x5, &(0x7f00000031c0)=""/220, 0xdc}, 0x2}, {{&(0x7f00000032c0)=@ipx, 0x80, &(0x7f0000003400)=[{&(0x7f0000003340)=""/140, 0x8c}], 0x1, &(0x7f0000003440)=""/118, 0x76}, 0x4400000000000}], 0x7, 0x2, &(0x7f0000003680)={0x77359400}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000036c0)={@rand_addr="80902d6262c8f714b94d2fcceab1ccd6", r1}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003700)={0x0, 0x4}, &(0x7f0000003740)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000003780)={r3, 0x2}, &(0x7f00000037c0)=0x8) 13:53:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x68000000) 13:53:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x8, 0x2000) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/171) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x1b) tkill(r1, 0x1000000000016) gettid() 13:53:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000004, 0x0) [ 836.281464][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 836.608887][T14326] binder_alloc: binder_alloc_mmap_handler: 14255 20001000-20004000 already mapped failed -16 [ 836.621742][T14326] binder: 14255:14326 ioctl c018620b 0 returned -14 [ 836.635341][T14491] binder: BINDER_SET_CONTEXT_MGR already set [ 836.642236][T14492] binder_alloc: 14255: binder_alloc_buf, no vma [ 836.652905][T14491] binder: 14255:14491 ioctl 40046207 0 returned -16 [ 836.662028][T14492] binder: 14255:14492 transaction failed 29189/-3, size 24-8 line 3147 [ 836.676999][ T12] binder: send failed reply for transaction 380 to 14255:14326 [ 836.697579][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:53:46 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xfeffffff}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@int=0x80000000, 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000080)={0x5, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) 13:53:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000005, 0x0) 13:53:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x6c000000) 13:53:46 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0xf000, 0x7000, 0x7b, 0x4, 0x6}) 13:53:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:53:46 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x5faf1a68, 0x800) r1 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xfff, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) fchdir(r0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 838.040319][T14502] binder: 14500:14502 ioctl c018620b 0 returned -14 13:53:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000006, 0x0) 13:53:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x74000000) 13:53:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e21, 0x2, @rand_addr="980ed290f1286d76245af39c21b3b1ac", 0x1}, {0xa, 0x4e24, 0x1, @empty, 0x80000001}, 0x5, [0x3, 0x259d, 0x51f4, 0x6b, 0x5, 0x0, 0x80, 0x8]}, 0x5c) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x3, &(0x7f00000000c0)={0x0, 0x12, 0x3}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff59b, 0x800) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0xfffffffe}) 13:53:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x88000000000) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='/dev/video#\x00', 0xc, 0x3) 13:53:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000007, 0x0) [ 838.452646][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 838.809915][T14572] binder_alloc: binder_alloc_mmap_handler: 14500 20001000-20004000 already mapped failed -16 [ 838.820917][T14572] binder: 14500:14572 ioctl c018620b 0 returned -14 [ 838.828642][T14636] binder: BINDER_SET_CONTEXT_MGR already set [ 838.834856][T14636] binder: 14500:14636 ioctl 40046207 0 returned -16 [ 838.851212][T14637] binder_alloc: 14500: binder_alloc_buf, no vma [ 838.857709][T14637] binder: 14500:14637 transaction failed 29189/-3, size 24-8 line 3147 [ 838.873394][ T2988] binder: send failed reply for transaction 385 to 14500:14502 13:53:48 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xfffffffe}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7a000000) 13:53:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000008, 0x0) 13:53:48 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:53:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000009, 0x0) [ 840.339715][T14646] binder: 14642:14646 ioctl c018620b 0 returned -14 13:53:48 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7aecff7f) 13:53:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000a, 0x0) [ 840.700947][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 841.106283][T14655] binder_alloc: binder_alloc_mmap_handler: 14642 20001000-20004000 already mapped failed -16 [ 841.122827][T14655] binder: 14642:14655 ioctl c018620b 0 returned -14 [ 841.130280][T14673] binder: BINDER_SET_CONTEXT_MGR already set [ 841.142236][T14674] binder_alloc: 14642: binder_alloc_buf, no vma [ 841.149083][T14673] binder: 14642:14673 ioctl 40046207 0 returned -16 [ 841.161774][T14674] binder: 14642:14674 transaction failed 29189/-3, size 24-8 line 3147 [ 841.170946][ T12] binder: release 14642:14655 transaction 390 out, still active [ 841.188277][ T12] binder: send failed reply for transaction 390, target dead 13:53:49 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 13:53:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7fffec7a) 13:53:50 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x4000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000b, 0x0) 13:53:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:53:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7ffff000) 13:53:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000280), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x1}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xc31f, 0x81, 0x1000, 0x80, 0x210d, 0x7ff, 0xfffffffffffffff7, {0x0, @in={{0x2, 0x4e24, @local}}, 0x401, 0x0, 0x3f, 0x3f}}, &(0x7f00000000c0)=0xb0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000480)={@dev, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@can_newroute={0x1c, 0x18, 0x410, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x10001, 0x80000001, 0x5c, 0xd11}}}, ["", "", ""]}, 0x30}}, 0x4000) 13:53:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000c, 0x0) 13:53:51 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5f3, 0x200000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 13:53:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7ffffffff000) [ 842.666201][T14798] binder: 14791:14798 ioctl c018620b 0 returned -14 [ 842.739800][T14804] binder: BINDER_SET_CONTEXT_MGR already set [ 842.762947][T14804] binder: 14791:14804 ioctl 40046207 200002c0 returned -16 13:53:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmdt(r2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:53:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000d, 0x0) 13:53:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0xf0ff7f00000000) [ 843.119045][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 843.429817][T14804] binder_alloc: binder_alloc_mmap_handler: 14791 20001000-20004000 already mapped failed -16 [ 843.442718][T14804] binder: 14791:14804 ioctl c018620b 0 returned -14 [ 843.456228][T14828] binder: BINDER_SET_CONTEXT_MGR already set [ 843.462426][T14828] binder: 14791:14828 ioctl 40046207 0 returned -16 [ 843.472405][T14829] binder_alloc: 14791: binder_alloc_buf, no vma [ 843.481968][T14829] binder: 14791:14829 transaction failed 29189/-3, size 24-8 line 3147 [ 843.497467][T14804] binder: BINDER_SET_CONTEXT_MGR already set [ 843.506477][T14804] binder: 14791:14804 ioctl 40046207 200002c0 returned -16 [ 843.506545][ T2988] binder: release 14791:14804 transaction 395 out, still active [ 843.533556][ T2988] binder: send failed reply for transaction 395, target dead 13:53:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000e, 0x0) 13:53:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x41, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x3f, 0x40]) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0xa4b6) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 13:53:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0xf0ffffff7f0000) 13:53:53 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x100000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 845.025446][T14844] binder: 14837:14844 ioctl c018620b 0 returned -14 [ 845.081875][T14849] binder: release 14837:14849 transaction 400 out, still active [ 845.240103][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:53:53 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x20000000, &(0x7f0000066000)={0x0, 0x12, 0x4}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:53:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xe7, 0x2000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') name_to_handle_at(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x51, 0x3, "9302c06de967370b7c45a8b4bd42496bc9e56153b25a19c3278dbaf3e75f5f7a4b3bbac86389938e5351144f59a977ae3972b195d77a1b67161ff19bbdd21d4ed75104aa04879c472b"}, &(0x7f0000000400), 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x144, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff07b4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x762e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x645a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x576a}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x8d}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe5}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x100000000000000) 13:53:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000f, 0x0) 13:53:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x40802) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x3, 0x1, 0xffffffffffffffff, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000010, 0x0) 13:53:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x200000000000000) [ 845.821436][T14849] binder_alloc: binder_alloc_mmap_handler: 14837 20001000-20004000 already mapped failed -16 [ 845.859300][T14849] binder: 14837:14849 ioctl c018620b 0 returned -14 13:53:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8000000003, 0x80000000003ff) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3, 0xffffffff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x5}, 0x8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 845.891544][T14871] binder: BINDER_SET_CONTEXT_MGR already set [ 845.903927][T14874] binder_alloc: 14837: binder_alloc_buf, no vma [ 845.915968][T14871] binder: 14837:14871 ioctl 40046207 0 returned -16 [ 845.930633][T14874] binder: 14837:14874 transaction failed 29189/-3, size 24-8 line 3147 13:53:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = dup(r0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x0, 0x7530}}, 0x100) 13:53:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 845.952566][ T2988] binder: send failed reply for transaction 400, target dead [ 846.134820][T14887] binder: 14886:14887 ioctl c018620b 0 returned -14 [ 846.922054][T14888] binder_alloc: binder_alloc_mmap_handler: 14886 20001000-20004000 already mapped failed -16 [ 846.933017][T14888] binder: 14886:14888 ioctl c018620b 0 returned -14 [ 846.940369][T14889] binder: BINDER_SET_CONTEXT_MGR already set [ 846.946733][T14889] binder: 14886:14889 ioctl 40046207 0 returned -16 [ 846.953930][T14890] binder_alloc: 14886: binder_alloc_buf, no vma [ 846.960396][T14890] binder: 14886:14890 transaction failed 29189/-3, size 24-8 line 3147 [ 846.969416][ T12] binder: send failed reply for transaction 405 to 14886:14888 [ 846.978511][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:53:55 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x200000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000011, 0x0) [ 847.596277][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:53:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$KVM_NMI(r0, 0xae9a) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0xfffffffffffffffb, 0x10}, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x9, 0x7, 0xf1, 0x7}) ioctl$KVM_RUN(r0, 0xae80, 0x0) tkill(r1, 0x1000000000016) 13:53:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x300000000000000) 13:53:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x7, 0x3, 0x6, @random="6c08ded7c5f2", 'veth1_to_hsr\x00'}) sendto$ax25(r1, &(0x7f0000000240)="557312143039e157bee3d2eab55c605db41e181cfe7c49883fda737417c5a76979af280ed9c93a98dcdc50eccea7a50b03f7d44d13b382b9a43345af1273bbfcdbc6931eb63b8a7c08afc9ec5533870050df77068934da2b7e0b49ec36b21625855970e5f66f51bcb17d5d586a3d0c9dabb0982eeff9f8c2e0a0e73c192101bc93ca6fcbc8a929079824f85c54f867813781c3600de1ea8c39da21163f9e1e2f71b1c06c33c170dd01dbc1eec92a5c05034b925e0fb2d497a7ab915d6d23d646bb551ca65ed5b77c1bf34d10aa092191dbd127936065ee3180211b58d2a4696f018f1f30", 0xe4, 0x8000, &(0x7f00000001c0)={{0x3, @null}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 13:53:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:53:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000012, 0x0) 13:53:57 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4000fff, 0x800) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 848.734450][T14909] binder: 14905:14909 ioctl c018620b 0 returned -14 13:53:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000013, 0x0) 13:53:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x400000000000000) [ 848.825368][T14909] binder: BINDER_SET_CONTEXT_MGR already set [ 848.834020][T14909] binder: 14905:14909 ioctl 4018620d 200002c0 returned -16 13:53:57 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) 13:53:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = msgget$private(0x0, 0x40) msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000441b7f010ed3e8f0aa40d90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002553c34917cf56"], 0xeb, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioprio_get$pid(0x1, r2) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="60bd0c42f804196ca47db77279477978ec77d537b8cc3c224d7a2acf443debf49a1a1c09fa0e6eace2dec18702169b16d0cd6ad8a23da9dcc3b124a741fecc474122a6e0b9a0a420ce44db09ff0768603699af2ea1250143bb41213e74dfcf7bf8b3990e45fc64bb801a311bcdcc555ad1230c52a4a93e7517fda59f3c68c6efe1d91f5048ca8ab931aa06ce7aeedb2b97745d1fb83251989ddefb8d80d516815f7653d88f0c2fbaefa1214701a41bcb5fd4682e8dcbc9e22abc4ab6635c2dcbe380945f5e056ac093164ccecb9b3fc1a1eb4470f13ed2b0ed79460cd4b21d8e8aab79493b880b856262978860e0f09f", 0xf0) tkill(r2, 0x1000000000016) [ 849.522742][T15134] binder_alloc: binder_alloc_mmap_handler: 14905 20001000-20004000 already mapped failed -16 [ 849.539468][T14909] binder: 14905:14909 ioctl c018620b 0 returned -14 [ 849.546722][T15134] binder: BINDER_SET_CONTEXT_MGR already set [ 849.559183][T15134] binder: 14905:15134 ioctl 40046207 0 returned -16 [ 849.566407][T15135] binder_alloc: 14905: binder_alloc_buf, no vma [ 849.590765][T15135] binder: 14905:15135 transaction failed 29189/-3, size 24-8 line 3147 [ 849.599554][T14909] binder: BINDER_SET_CONTEXT_MGR already set [ 849.606761][ T2988] binder: release 14905:14928 transaction 410 out, still active [ 849.614576][T14909] binder: 14905:14909 ioctl 4018620d 200002c0 returned -16 [ 849.622165][ T2988] binder: send failed reply for transaction 410, target dead 13:53:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x300000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000014, 0x0) 13:53:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x500000000000000) 13:53:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x7c, r2, 0x0, 0x0, 0x1}}, 0x20) 13:53:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x58) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'vxcan1\x00', 0x4}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x80, 0x8000000080, 0x8a, 0x50b7, 0x4}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x89, 0x7fff, 0x9}, 0x10) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000200)={{0x1, 0x7, 0x800, 0x6, '\x00', 0x9}, 0x6, 0x4, 0x2, r3, 0x4, 0x9c, 'syz1\x00', &(0x7f00000001c0)=['/dev/video#\x00', 'vxcan1\x00', '\x00', 'vxcan1\x00'], 0x1b, [], [0x3, 0x1, 0x2, 0x3]}) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x14) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180), 0x4) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000400)={0x60, 0x3, 0x1f800000000000, 0x210, 0x0, 0xb5, 0xe}) 13:53:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 849.803291][T15145] binder: 15141:15145 ioctl c018620b 0 returned -14 13:53:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x600000000000000) 13:53:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000015, 0x0) 13:53:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x108c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) timer_create(0x7, &(0x7f0000066000)={0x0, 0x2, 0x0, @thr={&(0x7f0000000300)="c2753adf8c2e61557485b17d4ee799457b41e3e2740b1dbf8781c17e055c7f35b6023f70544a37a3a114b38ba183db26333215ef6a24c9e9f0da97e66df2608c25b06e25a2af98d93693bbfe3b01006e55ebad8a527acdca5146fb2d5e2951a9e2fe328e1e1ed3b9ae9655b0f70b6fc356655e6d52f03a85b420c18ec67c74391d10715b905e3eb9102e5afeb839b6464011fb176da1a84eee7350bc4e60e8299547be887483d542c399b0c6c7d3b1d07fef539f53d1b2af6c2b57880e4ba3bff992d0e2cfa62f36e46ab3fa8431f62bd593", &(0x7f0000000680)="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"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x4fb90ece365d2b9f) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000200)=""/29, &(0x7f0000000240)=0x1d) 13:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000016, 0x0) 13:53:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x975, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 850.269106][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 850.589329][T15153] binder_alloc: binder_alloc_mmap_handler: 15141 20001000-20004000 already mapped failed -16 [ 850.601956][T15153] binder: 15141:15153 ioctl c018620b 0 returned -14 [ 850.615484][T15282] binder: BINDER_SET_CONTEXT_MGR already set [ 850.621740][T15283] binder_alloc: 15141: binder_alloc_buf, no vma [ 850.638186][T15282] binder: 15141:15282 ioctl 40046207 0 returned -16 [ 850.646814][T15283] binder: 15141:15283 transaction failed 29189/-3, size 24-8 line 3147 [ 850.660675][ T2988] binder: send failed reply for transaction 415 to 15141:15145 13:54:00 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x600000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x700000000000000) 13:54:00 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180)="aa5aa9a70f7b60a089c5a8769031d20416e4674d52b1c6b826896c73d49172eb5b5a0e7faa9415c8b211243c0e27c42e192e438cb3095bd8c8174cc7c8c9c77c7afc4610305c1522f722d3d0bed2f32596081199d5dbf655a8a3654040d244783bbc699e9f59fa187e5fc746ca846aa1f6b66c31c6232ff9f656cc453070b5a98946e000d9114739c6f8a73c14eb516c709b5534385a9461567baec085b25aa149b8cc44aa052c82fb815f45fc63767a27cd6ee41f77d41fbe60c5ea94c0d2bcc1bf886237948ba155eb54790c39735e0dfb615929fe4ec2460c38256d860d96c2259587332740e9db8feda8497d7f503aa3b7fdaedd4cd936", &(0x7f0000000680)="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"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_ifreq(r1, 0x8990, &(0x7f00000000c0)={'yam0\x00', @ifru_mtu=0x2}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000017, 0x0) 13:54:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x10a02) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0x2, 0x2, 0x7fffffff, 0x1, 0x4}, 0x1ff, 0xe13}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x7, 0x9, 0x2400000000, 0x7, 0xffffffff, 0x100}, 0x4, 0x1, 0xb0fb, 0x8, 0x0, "b1eeff24453ba9d4caf962db0090937545cc73e07afbbe28641c25c6b8340c2c16308b52e0b38de06a58899e7e46a4615b5f4b5685f5230fb836295950512a07b36213e266b7e83492de6a5b958f9a0ada3e3affc3f13f4b2200b0dcfdc36560aa6fc14d2369a3dc393d618f1752b9e3fd50ce7d95e834dc11078e5e9934d591"}) 13:54:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000018, 0x0) [ 852.081353][T15296] binder: 15291:15296 ioctl c018620b 0 returned -14 13:54:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0xa00000000000000) 13:54:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000019, 0x0) 13:54:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffff9c}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x39e6ce6483147950) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000180)={0x9d, &(0x7f00000000c0)=""/157}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x1000000000000000) [ 852.531197][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 852.846025][T15306] binder_alloc: binder_alloc_mmap_handler: 15291 20001000-20004000 already mapped failed -16 [ 852.862993][T15306] binder: 15291:15306 ioctl c018620b 0 returned -14 [ 852.870493][T15329] binder: BINDER_SET_CONTEXT_MGR already set [ 852.882938][T15329] binder: 15291:15329 ioctl 40046207 0 returned -16 [ 852.890994][T15330] binder_alloc: 15291: binder_alloc_buf, no vma [ 852.904152][T15330] binder: 15291:15330 transaction failed 29189/-3, size 24-8 line 3147 [ 852.912876][ T2988] binder: release 15291:15306 transaction 420 out, still active [ 852.929335][ T2988] binder: send failed reply for transaction 420, target dead 13:54:02 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xc00000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:02 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x246, 0x200003) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0xffffffffffffffe0, 0x9, 0x9, 0x1000}}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 854.489595][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:03 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) getitimer(0x0, &(0x7f0000000040)) 13:54:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000001a, 0x0) 13:54:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x4000000000000000) 13:54:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:03 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000000)={0x1f, 0x30, 0x1, 0xffffffffffffff9c}) ftruncate(r0, 0x5) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, 0x1, 0x100, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x401, 0x4000) open_by_handle_at(r0, &(0x7f00000000c0)={0x8b, 0x6, "78ddb0e10bff10edc8c9980cbdf22086e25251d161544698c0d4f5d591ae718cb61ad2cce05cdac21210de7d3a0604d940bbfd6479f55323496132f77bf0fa0e81a4e53c9f53f95d7517a344f348b05592d235ff7bac129dba2b3dd17611ca86dda7c6d608a143731ec19fc1582cf190256df9d110afd6026af721880163bd750eee6c"}, 0x200) [ 855.081786][T15347] binder: 15342:15347 ioctl c018620b 0 returned -14 13:54:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x10400, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0xa2a) 13:54:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000001b, 0x0) 13:54:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x4800000000000000) 13:54:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4000fff, 0xfffffffffffffffe) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x3, 0x100, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:03 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x100000001, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 855.869028][T15354] binder_alloc: binder_alloc_mmap_handler: 15342 20001000-20004000 already mapped failed -16 [ 855.880018][T15354] binder: 15342:15354 ioctl c018620b 0 returned -14 [ 855.887629][T15573] binder: BINDER_SET_CONTEXT_MGR already set [ 855.893819][T15573] binder: 15342:15573 ioctl 40046207 0 returned -16 [ 855.902094][T15574] binder_alloc: 15342: binder_alloc_buf, no vma [ 855.914339][T15574] binder: 15342:15574 transaction failed 29189/-3, size 24-8 line 3147 [ 855.927512][ T2988] binder: release 15342:15347 transaction 425 out, still active [ 855.940109][ T2988] binder: send failed reply for transaction 425, target dead 13:54:04 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x3f00000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000001c, 0x0) 13:54:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x4c00000000000000) 13:54:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000001340)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x82, [0x1, 0x9, 0x7fff, 0x6, 0x81, 0x6, 0x8001, 0x200, 0x4, 0x3ff, 0x1, 0x0, 0x905, 0x8, 0x20, 0xc22, 0xe025, 0x5, 0x1, 0x23b, 0x2, 0x7fff, 0x6, 0xfffffffffffffbff, 0x385, 0x81, 0x8001, 0x800, 0x101, 0x100000001, 0x800, 0x6df3, 0x6, 0x6d1d1c49, 0x200, 0xffffffff, 0x0, 0x3, 0x6, 0x8000, 0x200, 0x2, 0x0, 0x400, 0x9, 0x7f, 0x1000, 0x3], 0xe}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = getpgid(r1) process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f00000001c0)=""/125, 0x7d}], 0x2, &(0x7f0000001300)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/13, 0xd}], 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:04 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) tkill(r1, 0x1000000000016) 13:54:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 856.685391][T15582] binder: 15580:15582 ioctl c018620b 0 returned -14 13:54:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000001d, 0x0) 13:54:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x3, 0x7f, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x6800000000000000) 13:54:05 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/30) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) 13:54:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000001e, 0x0) 13:54:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40080, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x4, 0x69c}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x3, 0x1, 0x8, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 857.186101][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 857.448107][T15837] binder_alloc: binder_alloc_mmap_handler: 15580 20001000-20004000 already mapped failed -16 [ 857.461368][T15604] binder: 15580:15604 ioctl c018620b 0 returned -14 [ 857.471445][T15837] binder: BINDER_SET_CONTEXT_MGR already set [ 857.480671][T15838] binder_alloc: 15580: binder_alloc_buf, no vma [ 857.489871][T15837] binder: 15580:15837 ioctl 40046207 0 returned -16 [ 857.499739][T15838] binder: 15580:15838 transaction failed 29189/-3, size 24-8 line 3147 [ 857.512038][ T2988] binder: send failed reply for transaction 430 to 15580:15604 [ 857.529058][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:54:07 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x8000000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x6c00000000000000) 13:54:07 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000000c0)) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xff, 0x410000) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:07 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0xfffffffffffffffd, &(0x7f0000000180)={0x0, 0x12, 0x2000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x4, 0x4) tkill(r1, 0x1000000000016) sched_getaffinity(r1, 0x8, &(0x7f0000000040)) 13:54:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000021, 0x0) 13:54:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:07 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000ff8, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x2040) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x1, 0xf, 0x4, 0x100, {0x0, 0x2710}, {0x0, 0x8, 0x1ff, 0x2, 0x4, 0x9, "ff113fea"}, 0x4, 0x2, @fd=r1, 0x4}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 858.936155][T15856] binder: 15845:15856 ioctl c018620b 0 returned -14 13:54:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7400000000000000) 13:54:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000022, 0x0) 13:54:07 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r1, 0x9) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1b3b, 0x200) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x5, 0x4) 13:54:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000023, 0x0) 13:54:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7a00000000000000) [ 859.389592][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 859.717813][T15890] binder_alloc: binder_alloc_mmap_handler: 15845 20001000-20004000 already mapped failed -16 [ 859.728349][T15862] binder: 15845:15862 ioctl c018620b 0 returned -14 [ 859.736052][T15890] binder: BINDER_SET_CONTEXT_MGR already set [ 859.742261][T15890] binder: 15845:15890 ioctl 40046207 0 returned -16 [ 859.760380][T15891] binder_alloc: 15845: binder_alloc_buf, no vma [ 859.766942][T15891] binder: 15845:15891 transaction failed 29189/-3, size 24-8 line 3147 [ 859.777226][ T2988] binder: release 15845:15862 transaction 435 out, still active [ 859.789565][ T2988] binder: send failed reply for transaction 435, target dead 13:54:09 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xfeffffff00000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = dup(r0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/38, &(0x7f0000000140)=0x26) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x4100) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x499a, 0xff, 0x80000000, 0xfd4}) 13:54:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x7aecff7f00000000) [ 861.469601][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:10 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000001, 0x80000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x41, 0x3, @thr={&(0x7f0000000040)="2ff721a6345a5ba066b44b3ee1cbab25341de7f1afdf21bf914e64d9068c901a3bde21e0416bbafe2c169dc754c05dc7c1aad63db00f723be41fff58f6bcfaab", &(0x7f0000000180)="2e28d9fce739713805e599d16ca9e9e05e4c2a6e02ee8efdb45756ecb75cc7734be53544824508d98c76e45e52355ba75a377255668e1a4d75b48540ffda106cf7dab468077e7c7edc9884fd32f5ff7583ca6581debe70f0583ada7c31f085454bc001b65ad394e4af1e8abc2ad193072a2e695952b2ae79a1377214b7bc835cf211ce9d500ddfbc7719b5ab5ff4d232ec1d579d3972324c895f891a493cfd8e0e6b3f153830df4f53d14e333f058500b43e8a3ccc7ee5bd6134877400986faa3c69"}}, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x80}, 0x6) tkill(r1, 0x1000000000016) 13:54:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000024, 0x0) 13:54:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r0, 0xa0) preadv(r0, &(0x7f00000006c0), 0xf2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sendto$llc(r1, &(0x7f0000000000)="e170fcdf0cac668bc7f40d851f127739ad472680571d4ef960291f2501622d9a535e0999d00a6afbd8f77d9de8fdb5b316baa6a7bb7a3b549d3ee2c3cbc1", 0x3e, 0x40000, &(0x7f0000000040)={0x1a, 0x317, 0x80, 0x6e, 0x5deb, 0x1, @random="866946b3f83e"}, 0x10) preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:10 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r2 = dup3(r1, r1, 0x80000) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4004, 0xe000}) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000000c0)=0x4, 0xfffffec0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x7) 13:54:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) 13:54:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000025, 0x0) [ 861.982193][T15916] binder: 15909:15916 ioctl c018620b 0 returned -14 13:54:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000700)=""/4096) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 862.060025][T15922] binder: 15909 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 862.060038][T15922] binder: 15909:15922 ioctl c018620c 200002c0 returned -22 13:54:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xe3b0a58d49ac21b5, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0xf5, 0x0, [0x9, 0x3ff, 0x19, 0x5]}) 13:54:10 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xffffffff00000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:10 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/dev\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xff, 0x8000) setsockopt$llc_int(r1, 0x10c, 0xe, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x20, 0x0, [], {0x0, @reserved}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0xc2, 0x2, {0xffffffffffffffff, 0x1, 0x9, 0x1, 0x5}}) [ 862.657408][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 862.763339][T15955] binder_alloc: binder_alloc_mmap_handler: 15909 20001000-20004000 already mapped failed -16 [ 862.780430][T15955] binder: BINDER_SET_CONTEXT_MGR already set [ 862.786619][T15955] binder: 15909:15955 ioctl 40046207 0 returned -16 [ 862.800102][T15922] binder: 15909:15922 ioctl c018620b 0 returned -14 [ 862.807615][T15957] binder_alloc: 15909: binder_alloc_buf, no vma [ 862.814068][T15957] binder: 15909:15957 transaction failed 29189/-3, size 24-8 line 3147 [ 862.822810][T15922] binder: 15909 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 862.822823][T15922] binder: 15909:15922 ioctl c018620c 200002c0 returned -22 [ 862.839262][ T12] binder: release 15909:15922 transaction 440 out, still active [ 862.848056][ T12] binder: send failed reply for transaction 440, target dead 13:54:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x90, r2, 0xf0a, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x823}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x567}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) accept(r0, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000300)=0x80) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:13 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x44ca81, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r1}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)) 13:54:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='^\x9cz\x8fip\x16_m\x01\x00vi\x87\x84') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000026, 0x0) 13:54:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:13 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x800, 0xfffffffffffffffc, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 865.039710][T15972] binder: 15963:15972 ioctl c018620b 0 returned -14 13:54:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:13 executing program 4: sysfs$3(0x3) r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x100001, 0x400102) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000000, 0x109000) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x1, 0xfffffffffffffffe, 0x100000001, 0x100000000, 0x16, 0x4, 0x0, 0x80000000, 0x9, 0x9, 0x10001, 0xa6b}) 13:54:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) timer_settime(r2, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8001, 0x100) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x1000000, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) fsetxattr$security_smack_entry(r2, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/video#\x00', 0xc, 0x1) 13:54:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000027, 0x0) 13:54:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x458040, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) 13:54:14 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x50080) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ustat(0x10000, &(0x7f00000001c0)) 13:54:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 865.716968][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 865.831671][T16030] binder_alloc: binder_alloc_mmap_handler: 15963 20001000-20004000 already mapped failed -16 13:54:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) [ 865.873805][T16030] binder: 15963:16030 ioctl c018620b 0 returned -14 [ 865.875542][T16114] binder: BINDER_SET_CONTEXT_MGR already set [ 865.932205][ T12] binder: release 15963:16030 transaction 445 out, still active [ 865.946582][T16114] binder: 15963:16114 ioctl 40046207 0 returned -16 [ 865.960603][ T12] binder: send failed reply for transaction 445, target dead 13:54:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 866.147298][T16127] binder: 16126:16127 ioctl c018620b 0 returned -14 13:54:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) quotactl(0x1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)="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") 13:54:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004100)='/dev/sequencer2\x00', 0x111041, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/213) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000042c0)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004280)={&(0x7f00000041c0)={0xc0, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8e2e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf13}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:14 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000028, 0x0) [ 866.892622][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 866.929934][T16128] binder_alloc: binder_alloc_mmap_handler: 16126 20001000-20004000 already mapped failed -16 [ 866.946522][T16128] binder: 16126:16128 ioctl c018620b 0 returned -14 [ 866.957516][T16146] binder: BINDER_SET_CONTEXT_MGR already set [ 866.966834][T16147] binder_alloc: 16126: binder_alloc_buf, no vma [ 866.977436][T16146] binder: 16126:16146 ioctl 40046207 0 returned -16 [ 866.987131][T16147] binder: 16126:16147 transaction failed 29189/-3, size 24-8 line 3147 [ 866.999333][ T2988] binder: send failed reply for transaction 449 to 16126:16128 [ 867.026329][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:54:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) 13:54:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x3, 0x5, 0xff, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x1000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:16 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x4, 0x9000}) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) getsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) getsockopt$inet6_buf(r0, 0x29, 0xee, &(0x7f0000000180)=""/191, &(0x7f0000000240)=0xbf) 13:54:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000029, 0x0) 13:54:16 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x301040, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000ffe, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x8, 0x3, 0x100, 0x21, 0xfffffffffffffffe, 0x5, 0xe}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 868.440573][T16158] binder: 16154:16158 ioctl c018620b 0 returned -14 13:54:16 executing program 4: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x270}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x20e, 0x0, 0xfffffffffffffffc, r2}, 0x10) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:17 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) tkill(r1, 0x1000000000016) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000180)=""/224, &(0x7f00000000c0)=0xfffffea4) 13:54:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24400, 0x82) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6457, 0x1) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000180)={0x1, "af060e3cfd8e150c46548258a4d3ce978440205d73ad01ee06f4c5496cfbc698", 0x3, 0x1, 0x7, 0x6, 0x2}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x7fff, 0x200000000000000, 0x80, 0x3, 0xb5, 0xfff, 0x100000000, 0x4, 0x3, 0x3d996bf3, 0x4, 0x3f, 0x80000000, 0x800, 0xfdb7, 0x4, 0xedc, 0x0, 0x4c, 0xfffffffffffff800, 0x9, 0x1, 0x80000000, 0x100000001, 0xfffffffffffffffb, 0x9, 0x57, 0xffffffff, 0x456a, 0x2d8, 0x6, 0x8]}) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) 13:54:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x840) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @rand_addr="8215e3ffef47a20a25522a48617ccfec", 0x895}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000280)={r2, 0xff, 0x1}, 0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000240)={0x4, 0xd000}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0xff}, &(0x7f0000000200)=0x8) [ 869.179335][T16379] binder_alloc: binder_alloc_mmap_handler: 16154 20001000-20004000 already mapped failed -16 [ 869.237502][T16208] binder: 16154:16208 ioctl c018620b 0 returned -14 [ 869.237864][T16380] binder_alloc: 16154: binder_alloc_buf, no vma [ 869.251986][T16380] binder: 16154:16380 transaction failed 29189/-3, size 24-8 line 3147 [ 869.283629][T16379] binder: BINDER_SET_CONTEXT_MGR already set [ 869.289665][T16379] binder: 16154:16379 ioctl 40046207 0 returned -16 [ 869.319454][ T2988] binder: release 16154:16208 transaction 454 out, still active [ 869.328110][ T2988] binder: send failed reply for transaction 454, target dead 13:54:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002a, 0x0) 13:54:17 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) write$input_event(r0, &(0x7f0000000040)={{}, 0x3, 0x9, 0x8}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) fcntl$setflags(r0, 0x2, 0x200005) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000840)) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x9e, 0xff, 0x401, 0xbce, 0x1, 0x2, 0x3f, 0x80000000, 0x343, 0x38, 0x11d, 0x9, 0x6, 0x20, 0x2, 0x1, 0x4, 0xfffffffffffffc00}, [{0x6, 0x9a, 0x1, 0x8, 0x9a, 0x8001, 0xf9, 0x9}], "3f297f67c8545b812178f1352503e9a63c7b631bcf00db54ceb96bc0ede41972356d9a248f14691465f2469f16260b94486ece17234327064848b5ea07a0cc1d3a6587", [[], [], [], [], [], []]}, 0x69b) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x109002, 0x0) bind(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @local}, 0x1, 0x2, 0x1, 0x1}}, 0x80) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) socket$nl_route(0x10, 0x3, 0x0) 13:54:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0xfdfdffff, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:17 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:17 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x5, 0x7ff, 0x4, 0x9, 0x1c0000, 0xb2e, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/80, 0x50}], 0x3, &(0x7f0000000340)=""/119, 0x77}, 0x1}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000700)=""/204, 0xcc}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/20, 0x14}, {&(0x7f0000000800)=""/216, 0xd8}], 0x5}, 0x2a5fc000000000}, {{&(0x7f0000000980)=@caif=@dgm, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/18, 0x12}, {&(0x7f0000000a00)=""/79, 0x4f}], 0x2, &(0x7f0000000ac0)=""/35, 0x23}, 0x8}, {{&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/126, 0x417}, {&(0x7f0000000c00)=""/182, 0xb6}], 0x2}, 0x4}], 0x4, 0x10001, &(0x7f0000000e00)) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000040), 0x0, 0x0) 13:54:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) getsockname$ax25(r0, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @null, @rose, @netrom, @rose, @remote, @default]}, &(0x7f0000000100)=0x48) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 13:54:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000240)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x8, 0x100000001, 0x1000, 0x6b, 0x0, 0x6, 0x38, 0xa, 0x3b, 0x8d7, 0x9, 0x8, 0x7, 0xffff, 0x8, 0x4, 0x94, 0x40, 0x1f, 0x204700000000, 0x7, 0x9, 0xfffffffffffffffc, 0x2, 0x5db, 0x9, 0x277, 0x0, 0x2, 0x9, 0xff, 0x80000001, 0x2ef8, 0xcafe, 0x1, 0x5, 0x0, 0x1000, 0x3, @perf_config_ext={0x6, 0x5}, 0x81c, 0xd994, 0xde60, 0xb, 0x6, 0xa00000, 0x7}, r1, 0x2, r0, 0x2) r3 = dup3(r2, r2, 0x80000) name_to_handle_at(r3, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0xd8, 0x400, "c8ceb7d02f7024ef8386ce2bb0289567e7588f44b832fb002e15e3f5789000e7ec6b6e65459476958edf786d514b2c7b0d7fe5fdc68135c884f4da9d84fcd9375533e8f46a3fae95788898dd2858289c8102b339c481b4f3ef9af28cde96c7cabbddf864379bf09482ad4fa0745b2fdb754a0a36029b194a9f0f36627c8e9692eef9bdee4a7d30a7abcae4fc69c2e0a569195da8c30cc9b7222b555d59f633c43af269df8987c6867f067294f8ee4866d90b88250a58ccbc6d04f83f51404874a47566a644c2342f1cbc1243e49cdd0f"}, &(0x7f00000004c0), 0x400) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x200201, 0x0) renameat(r3, &(0x7f0000000280)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xda, 0x2, 0x400, "9711389ab76b8e2448bf633082f0648a", "c96888b7eda98c2b7eb41079711bceb9d643d3dca23500f7502d37d30afd172232506016a449e4d4d63c905777ea3be0ea5f290ccec2fd3ea9b28b6acb261273e6d243ae7a59e0d2b2aa7db6b046b0ed45ba673eb0176aae5a40b2e7e21800ab5e6a5c3ce49ee27b7c0c032027b31f5dd57028a50788c241956578847aeaf0f0872974c16269295bc01dd4a1ef3c0c39a3ab569fc9f980e0c0f455ec77e417ccf55ed2a291e5168045741bd6adb80a595b9d76e4cdf203c75ae566d0dc4d5e79f535b5a96f"}, 0xda, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000340)={0x0, 0x3}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x212, 0x0) [ 869.524260][T16393] binder: 16389:16393 ioctl c018620b 0 returned -14 13:54:18 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x5, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 13:54:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x40) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0xb0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) recvfrom$x25(r0, &(0x7f00000000c0)=""/160, 0xa0, 0x2, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1000, 0x4) 13:54:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000080)) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r1, 0xab08) 13:54:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002b, 0x0) 13:54:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x200080) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000140)={{0x3, @name="6f1fe0d31b220b3fe581773c9372ebad46cff346f1c51c57ded8bede5e16d639"}, 0x8, 0x0, 0x8001}) [ 870.021815][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 870.280378][T16495] binder_alloc: binder_alloc_mmap_handler: 16389 20001000-20004000 already mapped failed -16 [ 870.308055][T16495] binder: 16389:16495 ioctl c018620b 0 returned -14 [ 870.337733][T16532] binder: BINDER_SET_CONTEXT_MGR already set [ 870.375294][T16532] binder: 16389:16532 ioctl 40046207 0 returned -16 [ 870.376102][T16533] binder_alloc: 16389: binder_alloc_buf, no vma [ 870.414548][ T2988] binder: release 16389:16495 transaction 459 out, still active [ 870.430638][ T2988] binder: send failed reply for transaction 459, target dead [ 870.483929][T16533] binder: 16389:16533 transaction failed 29189/-3, size 24-8 line 3147 13:54:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0xfffffdfd, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 870.650537][T16539] binder: 16538:16539 ioctl c018620b 0 returned -14 13:54:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="120000003c2319d01716618e"], &(0x7f0000000100)=0x1a) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0xfffffffffffffffb}, 0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002c, 0x0) 13:54:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x900) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x3, 0x3}) preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 871.269734][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 871.443686][T16540] binder_alloc: binder_alloc_mmap_handler: 16538 20001000-20004000 already mapped failed -16 [ 871.460557][T16540] binder: 16538:16540 ioctl c018620b 0 returned -14 [ 871.468258][T16559] binder: BINDER_SET_CONTEXT_MGR already set [ 871.482365][T16560] binder_alloc: 16538: binder_alloc_buf, no vma [ 871.489294][T16559] binder: 16538:16559 ioctl 40046207 0 returned -16 [ 871.502122][T16560] binder: 16538:16560 transaction failed 29189/-3, size 24-8 line 3147 [ 871.511242][ T12] binder: send failed reply for transaction 464 to 16538:16540 [ 871.528101][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:54:21 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0xc, 0x101, 0x7, {0x2, 0xffff, 0x3, 0x2}}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ptrace$setopts(0x4200, r1, 0x5, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000080)) tkill(r1, 0x1000000000016) fcntl$addseals(r0, 0x409, 0x8) fcntl$notify(r0, 0x402, 0x6) 13:54:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = dup(r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080), 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002d, 0x0) 13:54:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x4, 0xb3, 0xffff, 0x10000, 0x11, 0x7, 0x7, 0x80, 0x3, 0x8}) preadv(r0, &(0x7f00000006c0), 0x0, 0x20000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xf1, 0x3, 0xfffffffffffff0c8, 0x5, 0x0, 0x1, 0x80000, 0x8, 0x100, 0xfff, 0x6, 0x7, 0xffffffffffffffd4, 0x578, 0x6, 0x7, 0x100, 0x4, 0x1f, 0xf7, 0xffffffffffffff01, 0x3f, 0x30, 0x6, 0x2, 0x4, 0x7ff, 0x4, 0xffff, 0x2, 0x7fffffff, 0xffff, 0x7ff, 0xffffffffffffff7f, 0x0, 0xff, 0x0, 0x1, 0x6, @perf_config_ext={0x4, 0x2}, 0x200, 0x9, 0x6, 0xf, 0x4, 0x8, 0x400}, 0x0, 0xc, r2, 0x1) 13:54:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x100000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x4001002, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0x6, [], &(0x7f0000000100)}) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 13:54:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x8, 0x4) accept(r0, 0x0, &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/93, 0x5d}, {&(0x7f0000000440)=""/14, 0xe}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f0000000540)}], 0x7, &(0x7f0000000840)=""/166, 0xa6}, 0x40002042) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x1, 0x4) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xfffffffffffffff8, 0x7}) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 872.805742][T16569] QAT: Invalid ioctl [ 872.819669][T16570] binder: 16565:16570 ioctl c018620b 0 returned -14 [ 872.835414][T16572] QAT: Invalid ioctl 13:54:21 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40, 0x79b0dedb290876ed) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:21 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x101000) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getgroups(0x6, &(0x7f00000004c0)=[r1, r2, r3, r4, r5, r6]) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7, 0xfffffffffffffffb, 0x4, 0x6}}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x3, 0x1, 0x8, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x475, 0x400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000001c0)={r1, &(0x7f0000000100)=""/191}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002e, 0x0) [ 873.607129][T16575] binder_alloc: binder_alloc_mmap_handler: 16565 20001000-20004000 already mapped failed -16 [ 873.653672][T16575] binder: 16565:16575 ioctl c018620b 0 returned -14 [ 873.694622][T16599] binder: BINDER_SET_CONTEXT_MGR already set [ 873.715245][T16601] binder_alloc: 16565: binder_alloc_buf, no vma [ 873.740514][ T12] binder: send failed reply for transaction 469 to 16565:16570 [ 873.770293][ T2988] binder: undelivered TRANSACTION_COMPLETE [ 873.776300][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 [ 873.783390][T16599] binder: 16565:16599 ioctl 40046207 0 returned -16 [ 873.793552][T16601] binder: 16565:16601 transaction failed 29189/-3, size 24-8 line 3147 [ 874.146080][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:24 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) exit_group(0x2e8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 13:54:24 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000001c0)={0x4, @output={0x1000, 0x1, {0x3, 0x7f}, 0x8, 0x753}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0xfdfdffff00000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:54:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) 13:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002f, 0x0) 13:54:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/103, 0x226}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/164, 0xa4}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x4, 0xfffffffffffffffc) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x5, 0x3, 0x67, 0x2, 0x0, 0x1ff, 0x100, 0x1, 0x10000, 0x6, 0x9, 0x0, 0x9, 0x4, 0x0, 0xfc6, 0x7e00000000, 0x7031, 0x1ff, 0x8, 0x8, 0x9, 0x7, 0x1, 0x101, 0x3, 0x0, 0x200, 0x510a, 0x10001, 0x7, 0x40, 0x3, 0x100000001, 0xfffffffffffffff8, 0x3f, 0x0, 0x7, 0x7, @perf_config_ext={0x1f, 0x4}, 0x28000, 0x0, 0x34424674, 0x0, 0x5, 0x6, 0x3ce45453}, r0, 0x6, r0, 0xd) [ 875.874702][T16616] binder: 16612:16616 ioctl c018620b 0 returned -14 13:54:24 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() ioctl(r0, 0x9, &(0x7f0000000180)="1e70836454d792e9b8e3823be8499d97d42b7c114bad25b629c3d92edb592334138485621f3d000530e04f049a362bde78732b9a6184174938e8a24a2cd53d07b1017ce97c1a045b838613ea495b8f669c10d8dca83a5d34113e56747860df7c23c9909573f4f0006d37db3544097b8205da2084cda55b422d9b8ce9f06cf612d006f4f23c36625de06cb938e0ddb8157130") r2 = shmget$private(0x0, 0x1000, 0x100000000000, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@ipv4}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x9, r3, r4, r5, r6, 0x100, 0x5}, 0x7fff, 0x7ff, 0x8001, 0x2, r1, r1, 0x401}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ptrace$getsig(0x4202, r1, 0x59f, &(0x7f0000000040)) 13:54:24 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x44000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x3) accept4(r1, 0x0, &(0x7f00000000c0), 0x800) 13:54:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x400c0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x6}, &(0x7f00000000c0)=0x8) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0x5000, 0xf001, 0x0, 0x4000], 0x7f, 0x0, 0x401}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x8}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:24 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:24 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000200)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) setsockopt(r2, 0x7, 0x2274, &(0x7f00000000c0)="ec3c6ba8a642822ce263fad361f42db0ab49c7c44e2cbdc227e43ee6314a9653dbee23319d146c1fb62eadf47c406328f90bd12427909acf6a12270aa1fd464ece898b95cf6b112f17a28eefddc81da34ee9b896099f45c090e41e6791552d657e6001ba87899593e3673171b0fe0a8d2622572fb5eb00c52d307c4a1d4e844b6de1c07c592a577e351ccc311590cfaae808b770836de8e44abfb4d17cf36211531eece542e1b676bfd80b4d7347404570448888120a7b3bbd932900575b11c2c505284b2e0997d0955a0bc76c30e3d5abb6c2ca174e385c56555cbf711ab75e904a42ba10cdf00e", 0xe8) 13:54:24 executing program 4: r0 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="885446032d3a3aa5f09674e891f0029c94036c2b5024568c43578d6b86f53bde3a6106d72b884cdfb3292a0e93312a053ad0997e59800d8f28879be735bc35f7067e0e1a148cc8c3dab02ef8f5df996601e8976e82c4982cc1fca8dce2f31a675b42c99b5100e92cb0466b045722ae2d773a2e597263b9326954ed03a0b82c3e87f7de", 0x83, 0xfffffffffffffff8) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80200, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000000100000000000005d00000000000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="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"], @ANYBLOB="00000000000000000000000000000000d600000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x450000) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xaf}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000030, 0x0) 13:54:24 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 876.605123][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 876.653581][T16623] binder_alloc: binder_alloc_mmap_handler: 16612 20001000-20004000 already mapped failed -16 [ 876.694403][T16623] binder: 16612:16623 ioctl c018620b 0 returned -14 [ 876.742544][T16654] binder: BINDER_SET_CONTEXT_MGR already set [ 876.794334][T16654] binder: 16612:16654 ioctl 40046207 0 returned -16 [ 876.794463][ T2988] binder: send failed reply for transaction 474 to 16612:16623 13:54:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x630b}], 0x0, 0x0, 0x0}) 13:54:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) 13:54:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/13, 0xd}], 0x1, 0x0) [ 876.864704][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:54:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000031, 0x0) [ 876.922862][T16667] binder: 16664:16667 ioctl c018620b 0 returned -14 [ 877.028202][T16670] binder: 16664:16670 ERROR: BC_REGISTER_LOOPER called without request [ 877.093331][T16670] binder: 16664:16670 unknown command 0 [ 877.143169][T16670] binder: 16664:16670 ioctl c0306201 200002c0 returned -22 [ 877.721813][T16678] binder_alloc: binder_alloc_mmap_handler: 16664 20001000-20004000 already mapped failed -16 [ 877.732313][T16670] binder: 16664:16670 ioctl c018620b 0 returned -14 [ 877.733733][T16678] binder: BINDER_SET_CONTEXT_MGR already set [ 877.745109][T16678] binder: 16664:16678 ioctl 40046207 0 returned -16 [ 877.750558][T16679] binder_alloc: 16664: binder_alloc_buf, no vma [ 877.758084][T16679] binder: 16664:16679 transaction failed 29189/-3, size 24-8 line 3147 [ 877.768364][ T12] binder: send failed reply for transaction 478 to 16664:16667 [ 877.771806][T16670] binder: 16664:16670 ERROR: BC_REGISTER_LOOPER called without request [ 877.787327][T16670] binder: 16664:16670 unknown command 0 [ 877.792865][T16670] binder: 16664:16670 ioctl c0306201 200002c0 returned -22 13:54:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x2, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000b80)="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", &(0x7f0000001b80)="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"}}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r2, r3+30000000}}, 0x0) connect$netlink(r0, &(0x7f0000000200)=@unspec, 0x36a) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000680)={{0x0, 0x1, 0x6, 0x9c000, 'syz1\x00'}, 0x0, [0xdf, 0xf8, 0x7fffffff, 0x9, 0x4, 0x0, 0x5, 0xba7e, 0x1000, 0x7, 0x3ff, 0x7, 0x5, 0x1, 0x7f9, 0x0, 0x3, 0x2, 0x8, 0x6, 0x5, 0x3, 0x3, 0x1f, 0x10000, 0x6, 0x7, 0x7, 0x0, 0x63ba, 0x3, 0xfd, 0x6, 0x0, 0x4, 0x14c1, 0x3f, 0x5, 0x3, 0xfff, 0x4, 0x6, 0x3, 0xffffffffffffffff, 0xa3, 0xff, 0x200, 0x3, 0xfffffffffffffffb, 0x980, 0x101, 0x20, 0x1, 0x6, 0x6, 0x3, 0x1, 0x2, 0x3f, 0x3, 0x3, 0x6, 0xd, 0x3, 0x7, 0x2, 0x6, 0xff, 0xfffffffffffffff7, 0x2, 0x8, 0x5, 0x5, 0x4, 0x100, 0x7, 0x100000001, 0x3fffc00000000, 0x3, 0xfffffffffffffff7, 0x7, 0x0, 0x263c, 0x8, 0xffffffffffff0000, 0x6, 0x8, 0x3, 0xb74c, 0x3, 0x2, 0x7, 0x279, 0x3ff, 0x5, 0x6, 0x7, 0x2751, 0x1, 0xfffffffffffffffe, 0x101, 0x2, 0x0, 0x0, 0x5, 0xd1, 0x5, 0x3ff, 0x4, 0x7, 0x7, 0x9, 0x2, 0x4, 0xb0a9, 0xc98, 0xcf, 0xfffffffffffffffb, 0x2, 0x3, 0x4, 0x4, 0xfff, 0x9, 0x9, 0x100, 0x9, 0xdb54]}) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f00000000c0)) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080)) tkill(r1, 0x1000000000016) 13:54:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40240, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000040)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000032, 0x0) 13:54:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4000fff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fba604ffabb662b59f47a718f42e8aeb4aa2ec953b2986444b0e37f989f8622d5ba17d85a1960916d04554e5be31bded4d61e5b8165377e742a8f124ce01863e31c3302443351c34992cedb7aaacb873f7cff216882baafbee3e71bb1d612aedea1406cd51d8d55affe1ab17839afee73de0b44a404ca3a05c477cddef2c07da86e9e0deb19295c99250183e3a044d7d37c464bc277c8149257f88e97151eb735927925d46"], 0xa6, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0xfb, "b53b8e075a383edba92113f8b29e140861852149f461af1a9f4b22aeee33868b", 0x3, 0x201, 0x80000000, 0x247, 0x2, 0x1, 0x4, 0x4}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1ff, 0x8000, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) connect$can_bcm(r1, &(0x7f00000003c0)={0x1d, r2}, 0x10) 13:54:27 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x630c}], 0x0, 0x0, 0x0}) 13:54:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x8, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x74d}, 0x8) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) [ 879.092955][T16693] binder: 16684:16693 ioctl c018620b 0 returned -14 [ 879.147760][T16695] binder: 16684:16695 unknown command 0 [ 879.175318][T16695] binder: 16684:16695 ioctl c0306201 200002c0 returned -22 13:54:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000240)={0x61b, 0x40, 0x800, 0x5, 0x8}) setpgid(r2, r1) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x10000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0xece6, 0x5, [], &(0x7f0000000180)=0x147e}) 13:54:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1) 13:54:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4000fff, 0x2042) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x440000) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x9f, 0x5, 0x1, 0x80, 0x39}) 13:54:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x400, &(0x7f0000066000)={0x0, 0x10}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x401, 0x4}) 13:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000033, 0x0) 13:54:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) pipe2(&(0x7f0000000000), 0x800) 13:54:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = open(&(0x7f0000000380)='./file0\x00', 0x10000, 0x22) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/167, 0xa7, 0x40, &(0x7f0000000340)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @rose={'rose', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000003c0)={0x1f, 0x9, &(0x7f0000000240)="8fcd27d2bfb70639c6"}) keyctl$get_persistent(0x16, r2, r3) [ 879.838414][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 879.881455][T16695] binder_alloc: binder_alloc_mmap_handler: 16684 20001000-20004000 already mapped failed -16 [ 879.911961][T16695] binder: 16684:16695 ioctl c018620b 0 returned -14 13:54:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100000001, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x7, r2}) [ 879.954626][T16824] binder: BINDER_SET_CONTEXT_MGR already set [ 879.994939][T16824] binder: 16684:16824 ioctl 40046207 0 returned -16 [ 880.037432][ T2988] binder: release 16684:16695 transaction 483 out, still active [ 880.046134][T16825] binder_alloc: 16684: binder_alloc_buf, no vma [ 880.058415][ T2988] binder: send failed reply for transaction 483, target dead [ 880.096239][T16825] binder: 16684:16825 transaction failed 29189/-3, size 24-8 line 3147 13:54:28 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x3, 0x2, 0x7f, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x7, 0x101200) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x1000000, 0x4ba) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000240)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setgid(r3) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000140)={0x0, [0x80000001, 0x2, 0x400, 0x1f, 0x6, 0x7fffffff, 0x1, 0x47b, 0x7f, 0x5, 0x1f, 0x3f, 0x3ff, 0x9, 0x6, 0x5, 0x4, 0x401, 0x80, 0x3, 0x57, 0x45, 0x40, 0x1, 0x1, 0x4, 0x100000001, 0xb, 0x4, 0x3, 0x2, 0x4, 0x6, 0x4, 0x9, 0x0, 0x0, 0x9, 0x9, 0x2, 0x800, 0x0, 0x7, 0x1, 0x2, 0x1, 0x4, 0x2], 0xb}) 13:54:28 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r1 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @remote, @remote, @remote, @netrom, @remote, @netrom, @default]}, &(0x7f0000000040)=0x48) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) ioctl(r0, 0x5c647f9b, &(0x7f0000000700)="38cd25db5362b8fca3c637ecc162bc4ccbac699dcea67de6a553e272ca79585a3f799432df540ad491276da7c500f9b6385c38ea6947de74351382e72248e3a621080678b8d71ebb841d0d0c1208916c76fc133d56952f4cee4c801d3a9cd0f982912cb390993f32bc362df19708289d28f9d5d44f7f4c53a815b0a34094282c27fe9dbd839b8f134e8c526c14cb48604be017af341964c338b3a100255467f253199ec151c4d5609abe57a53050421e6307b592a11bff515e891c42aaa537670c191586c8c19a2c17f23b63ac6f77892242a238324a4df4ad831cfe735e77987413cb84a32ff284652bfd1f20c245577122dd718e4283fb7d6b9123ad812b6f793a7dc74a11891758a4052d2b57087f05f81820ae202ca53a24098e0f7af5717aad9f660a31945978061495dcd9049ad1705c8499de70926de3de64e134692461aa3100e9e7d285cddfe6ca9cea9c93fa206ab5ee527e209de1560af2573bc3e85d42c955bac4d254fdab8d4a09da47e4b31108105aed83cfcf871bf186ea9ad4f2c50ff00d78de3542eb49b8c77d7ce98d5e241815f86c5001bb251f83ce07e03aba55e5b056b49c8a5ddeb4f7bfcaaf104b088781a7b28afbf8843ecf5af1299f1425dab5d61b3e904e64745c72e4adb7b738ee26b3fface39709929148ff2b516cdf6f83a500a578a709d8ead792209242c24795cd05b74ca1738fd4e4a2a143812fdef50ce2b0adc876dda0322881f2b00c9e4373fe952404e20f73401636715598453b3317b78a61a31eada6215004cd0a01e88315c63eb25b04aa687c23b5fa55ca417521c367e20be987275d48c2b4f6e70678e45d3c962ba3109fd4601ffbbd18a64e21e6d4ce186dafa3067052fb1170d3a16926376f7506a26319c078e6f05c1b2f7faa3d774d1ceb3d23f60ddd2f56cf82aef2b7290d929c6e9f85f00616fc36d07d8a5e0dcd2db1ef4503f37810ea14fd44001ca7987a85f0415cdcc3dca2c7b463e9b8ed8f8d676d83eafe7464a426097f30ee348ff99d899ae34a753ad47d39018bff4fabd4daf293df4300a1f8d446ddb34778cc5e40dd2bacbe5393871df567c30ff1d1c4d2f347a956d6224ade476a6bccef731b14083e41967978cd396f8bf1d088b15187fd6358d9a988e39330e19ad388d50196451b341b887139f36de941c45ed21d4a02da9e002788974d3cf38c558a8f8c14f7a097c689fe07701ed1896269c282ab90a5cd7940aade444c8846ef62dd9262201eb410b80542042d196f3bcc4b4f0b3d348a1dfd80cfcdae9c6289a15881850f9ecd280dc61629544f8dd982c6f72e3068bfefa6f4697a566d5fe06800256975d8a345bdcecbaee75241abaaf1a155ccd4f46de4d437904a833370d3de1577024176b00d65721d043ec11c38ed5676197227426f8d50cdea8a0247246f2fa3e1d3ce9999e6524e88e26710252cc31d0b8c3bf8c7db152ed08063bc9330a11fc31de7be7bb0d821fa85fbba3164d08ef8b5f6f8cf679f81381c6e88da1a439a8628b4c5b8190b8893d55a41dd61c0d92966ad76ded00607f92535e238eda702eca31d1f2f067ea42feda155cb6730bf3c799348d328417b6fb3f68e447936c3c1c716231286e5125b0312a893818a38837122811bb9eec61af3582296d1f6b78760ea8572c8c145ee710345958ae0a8e25860811ef5cd8f0eb28c240425d797039088bbacbe9bb79c3c412df8d6b0c86fe52b9e562da16d180e89b121b094056f8d4dda5e41f0660ff5c0abbdf0c9529af94f53df6434f4cbf6f6eb29cb89c5169e632d586bc3204a74e8101452211ee8e4c746aa84fb4f9388ff0fa89fb2b35f6769ffd469a3c992b938504b20970ea2ae1b5c2320d6e1a12a7330492a015928dc006c33a3e4d982c41cbe34aff5352d656cb567b1ee5266471dd20e3ca19d05d524010a65eefc6fbd3427b4fcbf9b4a95faf3427ae5c50f9bba90c9e77b39fe7e100cc1a161b10660847e3f960033261aa0c0abf51a15f4f6d69b7d9517d053b88cabf254ad5cb05bb8b7f4b41bf9922660110e0a15fe397bc68ed5229fd7497a1eea802566eb619714f5e786d1673cd00ac9658a03e73fe22ca40a8a39d1e624f5e3a49931ce87884956fc70bcd139f9ab4b5a2e0e9e03727f62033f75d9f168215c1af68d894459cf78b221f9ba2ed58d0922c2e61a8eaa54511139bb96f78c2a84157633e3a1d534a9014af57f8854d54dd30cf9ed4dc62a0c2e61989950195e28c1953ddb1f6246ac1da0a11bcc501e6ff98370cf63850b402e6352d609fcff069cb9007635ce5842ffd159ac2a40ceecdc2094be7dd279c857551b82b8315376a41b9cdf4a0a56ecf5997574eef477df7360229ace74e95f998230865cdbe058d9b77daeeb4e38b4fc3e6f4136012e6a7bf95ca681e53df0a49cb6079daf468f188cae45ebdad192f505e1dc50dcc2f213c2a1d59f5725586f1d49932f53f31c504b9d5feb528ac02694c2bd4209a6109d93604bc2e0aae027f3284432247f1d131c74fc1007b714ede3e7583152e93f52e7869c3bd07dd39e89b9fd4bb6903ac8be798257d0d74c27c1022b7c222b81b1b7e34bf12b86565a964f640cd52e348ec47309e30e71e8fcf8b433929f6c3e8df58a09d2164e7077a766b7b92f7e77dbbda4bb434b9520934f823bbbd143aa8a970993ff34dd01e2b185b914933fa3557fe92778b522c5e9ee63be31d38d76967bfc3d0abe3aa017f6f39e50ee60ab835839a55fea331e0e8eb85eecc890470ac80ae3f5082046f09edc74165b0239d069f5cb63b60cf1ec6338019d97a3890afd52bde1a66b9a79713fdf5a60e883937473a73624d565ee6f5070adcf139f116a619156c2ee08553e651675ceb499654aef10a77a979f9442ecba6b92358d28291aad78d6958c378cbb30d2503d6a65b8d3e7344fc6645a70f1f6cd5580f5c5cca6b9658374e1d66092e9507206cf1ae3866bd43b8183c61668895eb72189639d62767b6370752772d2a69bb4fc87351b7ecf62a28f00927161948d4739a039c1d73265979ca65a4fe67ac7e5565820bd7bab6834dddf4bd7300d0deae113af4f6d36eea2c251278188b3d790fc4f0cd4561ca0516a5841b812bfee6f5e5a2ff3279c2a6b2b61816065c25aebcf2c010a3e3fb24d4b20174a4b06b4e547df596528739ddd7f644708e6f032f00d47a4a7dc9cc838926034eee62dd4d1405be4b50f421c20836fe81ef6ac4c8e28ec578f184cdf8e76eb47c57f9b17a4393092c2f171f6e56b3b3c4b4a8a6ab2224e1ad66f068849688b9218680b0c9542502c078d733e59a83581a4032049c172d040622c910bef449b76991dd4f2f683a3627b2f484b7e1ba977ee5b9aadddd535a6d79a727e32785d590eca03f985f44e6ebbb7baa0df762d894b6eac4b1d82025eb3432e023ce3c4685d7a639cf367070f04096cd6ef8a38769b3b3de33c1f70d722585144608abf49dbb51b5344ce894497dd2832eec1e2ffa770ccef6ce63917d3af6ae8c08cbeb1049c20939e9659c40a9d3e748f4f2dd19c035f9af4889d5f438ca028c0a26852abc718c4c067a4c2a1e4e75b03d8a957278d371c357cc3b31d5b6e2c4f3e91fda07ce275dcd632b461730d5500d46689233996f619dd099a888e552803d7589f744ce7210d3b2c4b6c9450adf3e3e2fdd1f7c26cf519d5c59faec49714be96a5d115b1ef5c61843ba2f38254faf89ad9dcb093a3a78fe9ee528bd6c3e21eafeb63a9c62ce36bfd5ec085124913bfafe9143f9d5436ef5a0642a2eb0a6644d09d7a413c02cb1347ce056ca8b2771eba25fa46cad5a3c282eb956fdda75872504fde2499f504c5820d3a99d4b4b5d5b2311b8250cf4fcb03a4c3673fcbc2ef5453603cfd13280d1ffaef0615028566e60d977e6406e9f6b6173fb50673526f9a0402aa104a7c0737eccc797a43eb11c9eadb5e9fa8c10f747819bd8538c65b1a6269e77ba67a8fabb7dbba85da57b1c0f26263d7ce4409d73cf3a1255ba120ecb0d42aee7b3ef9366fc2fb2b32a7671e6086657fd82f55e0d328095d883f5418d1e3fecc94ac50fd8bd5e2cbe41b83a7b59b7d613f1849b81353eed310cae53f5f5877c837dcd721abe0c481bb2f1d5afb36ee13784f3185d4cec70d5bb29f51c752204b3396871b6194b5e145b29cc575a19b8afd749c54a9fa967898f612955442cf38c1594725fd1adeba5cc201e93faa79d276cb396c59a8ad17072c132fc1fc1f7bd6c39e3abf5c7d071f41f0799fc20d871b952b6cd23e1d0852e549cf4388fa1b576df106bb21ac8cf5fd8ae53540408d4d69ecdf5a451ebedbceaa5ba59ff6b2e3764a540c5642f074faa85ac1d335d6e78cb3a77f6745a246661662c48e83f675649ecee2da3215b5aacef289b434c5e203db587afb6324ecd510bac9279e29403fd41881b80f656061e9ac3f5e1a1b011170041be7430e1b22ac8147327ef23e154bfe19876144d3e5316e6398ef6ee114e671aa3936ec859287bdcf481d0f21b47c7df2691e74013f949c23bf148c404c6c4cbb0f594df6044841978a528be65ff8d7f69d7ceb729191eb7104d572df5042367788f1a29d7b72ed4de971a6b5e1c9982cdebaf62bc6dbfc43009973b2c51da57d6147886e63128ef4e0fe0f532fddf9713fe6d08070a06ec98a53d0be1aefdd9c2afe53e4674ed9c35ad9369213ebfa1af319d374b080db7727f0c501af7aef1773950db3634efcbbfdd149fff4acad96857c4727ad4d23f942f389e06c1bb50e98e0a5682545d3f533c57e41ea3bc824f376a60ffd9ffb9528c646ea4fb44c313f3d472bbb7b4c1527d9c19590bd28dfd56d1e66cce29fe3ab094d3747ed87f1bbadbce5f4d2e2438d866aaddb4b5533a5656993ecb1e74334c8f53f769450a5fcc6a7b45657657f228ba939914af8219dda3d6879abfedd14eb91a330170c2be5708db557d1f044e9cc0d4fb771ee173c0aadd1bbd56e233bfceaf5e6679e66f4ec16a8ca18a34e644ccc0a39e17e3a33438d3a0b29872f8f6bfc83ef8387f408b77fc79206f4b198c21429063fedf87be55b16e6508e843d2c5002cb7f44a2c70b200087e041d897a3c6889fea394b957bb54ea3dcedbec885ecdf2a617febb48ece2d717c90acf45d4af7d273d6d6ba24d5a3f20a7b1336c112e72dc9960d43b25174ba59449a8bdaaabc35a4c0a27330b241d4163d1f4bfdc14d48373d8f2578b3847c2ea72e66a27fb1d516cf6224d06267b4e65b977752696e8833c55196ca523ea4a67a0fe15d0835138e1608b46226099e0297c39a3d8cbbaa9565df65acf66015fbf3305b0729a7ee2e31938c294473e7c634883357ae2135281c284d288f405878a4b6414b1d9e71645a088569ee553d673b6363f18d1976869d8e93803991834cc011811a525b7cc77a2471f32a10587e77f9870ba2646c3cb775e91d83d689d49e77f5e3e232cc64ab235cbd36e6db842441710a558ca645689b931dea196131d0cebdd7d81bbc24d2bed2840f3fcedf451bffc41c65e7af1001d50e093df1ccced6ed6d5325d227e38a27162602f495d16c8b50db5a3725bc343881e3158fd1d13bf195fdb6faf6cec20b6ca060d1a028e921f082eccd8a246742ca3887ad87dc8f5cf59353aa5157b9c83dd950dd9f3ba2d6274858e960c05546fc8de285ea18be9d5bd21d78d2753b4c8312c243b4de9e3aa93e71947620ec40490f3845ca09c20f9e05896c8b5cc18db6bc7cf140bcd97e378b9433") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000240)=0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f0000000280)={'syz1', "48c361c6945a5ad65a53f38097ef3eacf7f8d973dfd8c9996acaa00f726601ff7fd2888e3e148f6e247f9bde2058f542e8606039b95bc89f4418da76524ca145c291dede13ee22a4d4a78be73024f08e80500b023d6f1fa417c9ab954716aee3366e681051d97b45707152afeecf86f27d8f99c0dd7427177ae28251da9a11dc624c1d476ce7545fa461df8c186d2b92289b12506fdcc11d405f9b6c1ab193a9223ac77d81e47efcaa033485f83e62f8c20a63bc5ea91b55b5629ab4ff088ff0eae24540ba5a148764d844bda3b1c31fa0618015790c8dbc32ddf38cdff560226c50"}, 0xe6) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x630d}], 0x0, 0x0, 0x0}) 13:54:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000034, 0x0) 13:54:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) creat(&(0x7f0000000780)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000740)='cgroup\x00', 0x0, &(0x7f0000000840)='none\x00') r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x880, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 880.499215][T16841] binder: 16838:16841 ioctl c018620b 0 returned -14 [ 880.589387][T16851] binder: 16838:16851 unknown command 0 [ 880.601471][T16851] binder: 16838:16851 ioctl c0306201 200002c0 returned -22 [ 880.811051][T16854] e cgroup1: Need name or subsystem set [ 880.950897][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 881.282587][T16860] binder_alloc: binder_alloc_mmap_handler: 16838 20001000-20004000 already mapped failed -16 [ 881.300340][T16851] binder: 16838:16851 ioctl c018620b 0 returned -14 [ 881.307626][T16860] binder: BINDER_SET_CONTEXT_MGR already set [ 881.319758][T16860] binder: 16838:16860 ioctl 40046207 0 returned -16 [ 881.330157][T16861] binder_alloc: 16838: binder_alloc_buf, no vma [ 881.342343][T16861] binder: 16838:16861 transaction failed 29189/-3, size 24-8 line 3147 [ 881.351027][T16851] binder: 16838:16851 unknown command 0 [ 881.362560][ T2988] binder: release 16838:16851 transaction 488 out, still active [ 881.371115][T16851] binder: 16838:16851 ioctl c0306201 200002c0 returned -22 [ 881.382108][ T2988] binder: send failed reply for transaction 488, target dead 13:54:30 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) 13:54:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x84, 0x101000) 13:54:30 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x401) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1000, 0x4, [0x3, 0x4, 0x3ff, 0x0]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x0, @rand_addr="59db1ca3b8de3cb5680ece33c9fefbf9", 0x7}}, [0x1f, 0x6bb, 0x4, 0x81, 0xffff, 0x3, 0x1, 0x4, 0xe2, 0x0, 0xff, 0x5, 0xe6, 0x101, 0x9]}, &(0x7f0000000440)=0x100) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000240)={0x1, {r5, r6+30000000}, 0x8473, 0x5}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) fcntl$setpipe(r4, 0x407, 0xfffffffffffffff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0xfffffffffffffffd) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r7, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000035, 0x0) 13:54:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40046302}], 0x0, 0x0, 0x0}) [ 882.578278][T16868] binder: 16866:16868 ioctl c018620b 0 returned -14 13:54:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x3, 0x1, 0xfffffffffffffffd, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) ioctl$void(r0, 0x5451) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x400) [ 882.712037][T16873] binder: BC_ACQUIRE_RESULT not supported [ 882.723406][T16873] binder: 16866:16873 ioctl c0306201 200002c0 returned -22 13:54:31 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:31 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) getpeername$packet(r0, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a80)={'vcan0\x00', r1}) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 13:54:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x10, &(0x7f0000000240)={[{@xino_off='xino=off'}, {@metacopy_off='metacopy=off'}, {@default_permissions='default_permissions'}, {@xino_off='xino=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@uid_gt={'uid>', r1}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/video#\x00'}}]}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:54:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000200)) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r1) r2 = syz_open_procfs(r1, &(0x7f0000000280)=';\xbe\x9dv!\x93\x1c\x8e\x00\x0e\x80-Sj\xea\xc6K\xb0W\xbf\xe1\xf9\xd9\xf59%\x8c\xa8\xaa\xfd\xdc\x00\x02\x17Z\xa1$\t\xf9\xa9\xd0\x7f\xb0\xc2\xbfc\x87\x88\xef\xf6\n\xc4\xb8\x9b\x99\x89\x12a\x96\xd2\x0e\xa7\x89/ \xb4\xfc\x14M\x01y') preadv(r2, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000140)={[0x1000, 0x1001, 0x4000, 0x10000], 0x1, 0x4, 0xfffffffeffffffff}) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x5, {{0x5, 0xe, 0x7, 0x6, 0x7, 0x3, 0x0, 0x4}}}, 0x60) 13:54:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000036, 0x0) 13:54:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000200)={0xffffffffffffb6a1, 0x7, 0x8, 0x3, 0x1, 0x2, 0x2, 0x2, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r1, 0x6}, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x5, 0x7fffffff, 0xb64, 0x0, 0x3}) write$9p(r2, &(0x7f00000000c0)="cb2e7c1604781e0ff1b41eb0e6be2a7d0202d9fa076a5cbfdad7f763d35e4137546cdbffe0600552f72bfda411dbfe199dfa4862733768543b092276130a5857536401d8a3d04b13fa", 0x49) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x24180) get_mempolicy(0x0, &(0x7f0000000080), 0x639dc8af, &(0x7f0000110000/0x4000)=nil, 0x3) read(r2, &(0x7f0000000200)=""/30, 0xfffffe80) 13:54:31 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x2d, "11cf7a9c4e56b603de8c34d65f5da238402e035c63021cbdba70eb3580cd6244434edef9e51767d8c4417c6475"}, &(0x7f0000000080)=0x35) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xfffffffffffffffc, 0x1, 0x100, 0x7fffffff, r2}, &(0x7f0000000180)=0x10) tkill(r1, 0x1000000000016) [ 883.369357][T16873] binder_alloc: binder_alloc_mmap_handler: 16866 20001000-20004000 already mapped failed -16 [ 883.394231][T16873] binder: 16866:16873 ioctl c018620b 0 returned -14 [ 883.407265][T17104] binder: BINDER_SET_CONTEXT_MGR already set [ 883.420615][T17106] binder_alloc: 16866: binder_alloc_buf, no vma [ 883.436319][T17104] binder: 16866:17104 ioctl 40046207 0 returned -16 [ 883.470482][ T12] binder: release 16866:16868 transaction 493 out, still active [ 883.479226][T17106] binder: 16866:17106 transaction failed 29189/-3, size 24-8 line 3147 [ 883.492486][ T12] binder: send failed reply for transaction 493, target dead 13:54:31 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe) 13:54:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40046304}], 0x0, 0x0, 0x0}) 13:54:32 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x2, 0x10, 0x6, 0x3}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x7, 0x9}, 0xc) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) tkill(r1, 0x1000000000016) [ 883.727415][T17224] binder: 17223:17224 ioctl c018620b 0 returned -14 13:54:32 executing program 4: r0 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r1, &(0x7f0000000800)='./file0\x00', 0xa400295c) fcntl$notify(r1, 0xa, 0x34) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r3) [ 883.827788][T17228] binder: 17223:17228 unknown command 0 [ 883.842426][T17228] binder: 17223:17228 ioctl c0306201 200002c0 returned -22 [ 883.919122][ T26] audit: type=1804 audit(1553608472.214:46): pid=17262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir418824223/syzkaller.qNECQy/1013/file0" dev="sda1" ino=17716 res=1 [ 884.003925][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 884.017388][ T26] audit: type=1804 audit(1553608472.224:47): pid=17262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir418824223/syzkaller.qNECQy/1013/file0" dev="sda1" ino=17716 res=1 [ 884.498440][T17228] binder_alloc: binder_alloc_mmap_handler: 17223 20001000-20004000 already mapped failed -16 [ 884.514940][T17228] binder: 17223:17228 ioctl c018620b 0 returned -14 [ 884.522088][T17342] binder: BINDER_SET_CONTEXT_MGR already set [ 884.528211][T17343] binder_alloc: 17223: binder_alloc_buf, no vma [ 884.538853][T17342] binder: 17223:17342 ioctl 40046207 0 returned -16 [ 884.545768][T17343] binder: 17223:17343 transaction failed 29189/-3, size 24-8 line 3147 [ 884.560142][T17228] binder: 17223:17228 unknown command 0 [ 884.566059][ T12] binder: release 17223:17228 transaction 498 out, still active [ 884.580205][T17228] binder: 17223:17228 ioctl c0306201 200002c0 returned -22 [ 884.587744][ T12] binder: send failed reply for transaction 498, target dead 13:54:34 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000037, 0x0) 13:54:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) io_setup(0x9, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x10100000000, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={0x401}, 0x8}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 13:54:34 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 13:54:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40046307}], 0x0, 0x0, 0x0}) [ 885.865060][T17356] binder: 17348:17356 ioctl c018620b 0 returned -14 13:54:34 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000080)=""/246) dup2(r0, r1) [ 885.958130][T17409] binder: 17348:17409 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 885.990795][T17409] binder: 17348:17409 unknown command 0 13:54:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00,\xc6M\xec\xd8`\x0f\x9b\xdaj\xac\x8a?>\x11\x98\xd0\xe4\x90\xf8\xe1\x00\xd7Z\xce\xc8\xc5\xc6\x19\x87\x1a\x01\xd2\xce\x11\x04\xfa\x95dH@c\xdd\x1do6Pj/\x9c\x13\xa7\x9e\xb58u+\x06\x81\xd2/u\xc7ysl\t\x97\xf8o}\x7f\x8e\x99=\xd4\xd6\x03\xd9\xe3\x89\xe9\x14dE-\xed\xe2Z\xd0\xe3Qp\xe4=@\xfc\xa0\xc5m\xa0)\xb8\xba\x05{\xe2}Eq\xf3\x05\xdc\xa9\xae\xc4m\x11\r}u\vH\x14\x96\xd0\xb2\xef\x02}\xc3\xacq\xdb\x89`\xc8\xea\x06\x9bj(\xbe\xa0\xb9\xfa\x98\xa1zl\x83\xa9\xcd\v0!i(\xd8\xb9\xcc\x91\xe9\x82yx\xb6wn\x9f\xa8\xf2B\xe2\xa7\xec\xc33\x99\xb7\x19z\xddW\xe2,Co\xef') clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 886.042293][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 886.062085][T17409] binder: 17348:17409 ioctl c0306201 200002c0 returned -22 13:54:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="1b188153ffe05d275a624966c8c4f4ac", 0x10) 13:54:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() fcntl$addseals(r0, 0x409, 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x8, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)) 13:54:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000038, 0x0) 13:54:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x7, 0x0, 0x1, 0x0, 0x7d, 0x686c0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0xd896, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b825df9923b9643ca12265081743b3229440d1947b4c72e4fb2b2d78975a96ddfa4213d617823f43b67bcfbfe9", 0x2d}, {&(0x7f00000000c0)="ba6b1590da06b1012dbf34db5f1626e805b791c671ff9e8c756dbb618a87347ce8fbca069822942a2cdd63bb3723162ebaa553b5a06d69517d1912a0fd3c842959a4498dba39c06c7438b03562510a25e9557ece58d94ba064ea5e8e3c08a79b02114f6a7f985ee5a0f9157233d0a880dd6f345143beefa8f4dfef38ab7d163728d6442cdd417ff6b2b0ed4ed6faa3aa00d6b305a308dc44f820081e8d24fb11e2", 0xa1}, {&(0x7f0000000180)="113637f97d16fd42e49132462b6b51f1064d91ce031492695b32738b284bb65793cdef4d6e43e40f2ed729a0bedfcc83772db87110db0ea5e11161ab00166717ed9095631d0228b800424058336f3eea327595d457329382b4a07c0df1059a6a297b8317e687c7e3ba882f3045ac1ef47f6c551cf950db1c7748f3fe13eb8a800215f80d4dc07e93efe66d6ba72f85cce0ad4f91e69fe5b6328c280b9d5074ecce1b959b0724dfaab0d19557c885baa03768642176cd966bfd7bd04b1204cbf005d2c8d47c7d08e4fdca2c699e56fd112fe1833c6dc34d997170b62c477e04138f0f4c0870d0796c", 0xe8}, {&(0x7f0000000280)="8f62c2e9b3a5a84e7b6a6bdc22e8decbf25ccfa3341dc74b091c9f4f9099d5bc23690d801c8715dd5719b6244142bb71c47a7997ebd7b698a03e8cfc501d0bd35ad84b653f3ceff68dd92647d00b4ea8e09fc86e875e42c8a5227397444651a75631f0545d5e9ad5fc2b86d65837691e63ae508187444d9620ac12bb93a9344ed83fffcd39de61e54edee6c3eaeeaa604fd24b2149d2f575c7cedf571586bf75ab24f385ad3a67529a30b2c995d6a30802ab78c4011853914bbc13187c10c96a234db1278b6e0e5e4b16d7e4c8c7c6724fc3de1694a6e86991e0aaa8f5812463d603a4cb3df0a45f3d4238df936c31471564685d95", 0xf5}], 0x4, 0x8) preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 886.633811][T17409] binder_alloc: binder_alloc_mmap_handler: 17348 20001000-20004000 already mapped failed -16 [ 886.672533][T17409] binder: 17348:17409 ioctl c018620b 0 returned -14 [ 886.679938][T17688] binder: BINDER_SET_CONTEXT_MGR already set [ 886.691953][T17689] binder_alloc: 17348: binder_alloc_buf, no vma [ 886.698407][T17688] binder: 17348:17688 ioctl 40046207 0 returned -16 [ 886.710982][T17689] binder: 17348:17689 transaction failed 29189/-3, size 24-8 line 3147 [ 886.737200][T17409] binder: 17348:17409 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 886.751654][ T12] binder: release 17348:17409 transaction 505 out, still active [ 886.760137][T17409] binder: 17348:17409 unknown command 0 [ 886.769456][ T12] binder: send failed reply for transaction 505, target dead [ 886.780874][T17409] binder: 17348:17409 ioctl c0306201 200002c0 returned -22 13:54:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:35 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) preadv(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e22, 0x40000, @local, 0x1000}}}, &(0x7f0000000240)=0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f0000000040), 0xb0, 0x0) 13:54:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40086303}], 0x0, 0x0, 0x0}) 13:54:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000039, 0x0) [ 887.125464][T17701] binder: 17696:17701 ioctl c018620b 0 returned -14 13:54:35 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x20000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 887.211481][T17806] binder: 17696:17806 BC_FREE_BUFFER u0000000000000000 no match [ 887.273447][T17806] binder: 17696:17806 unknown command 0 [ 887.279042][T17806] binder: 17696:17806 ioctl c0306201 200002c0 returned -22 13:54:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000000c0)={0x2, 0x0, [0x6, 0x7, 0x80000000, 0x974, 0x0, 0x0, 0xfb7b, 0xaa]}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000006a, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x8000000000000000, 0x6000, 0x200, 0xc, 0xc}) [ 887.583149][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 887.913133][T17919] binder_alloc: binder_alloc_mmap_handler: 17696 20001000-20004000 already mapped failed -16 [ 887.930008][T17806] binder: 17696:17806 ioctl c018620b 0 returned -14 [ 887.937244][T17919] binder: BINDER_SET_CONTEXT_MGR already set [ 887.949293][T17920] binder_alloc: 17696: binder_alloc_buf, no vma [ 887.955746][T17919] binder: 17696:17919 ioctl 40046207 0 returned -16 [ 887.962525][T17920] binder: 17696:17920 transaction failed 29189/-3, size 24-8 line 3147 [ 887.976970][T17806] binder: 17696:17806 BC_FREE_BUFFER u0000000000000000 no match [ 887.987163][ T12] binder: release 17696:17806 transaction 510 out, still active [ 888.000028][T17806] binder: 17696:17806 unknown command 0 [ 888.007817][ T12] binder: send failed reply for transaction 510, target dead [ 888.019211][T17806] binder: 17696:17806 ioctl c0306201 200002c0 returned -22 13:54:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00,\xc6M\xec\xd8`\x0f\x9b\xdaj\xac\x8a?>\x11\x98\xd0\xe4\x90\xf8\xe1\x00\xd7Z\xce\xc8\xc5\xc6\x19\x87\x1a\x01\xd2\xce\x11\x04\xfa\x95dH@c\xdd\x1do6Pj/\x9c\x13\xa7\x9e\xb58u+\x06\x81\xd2/u\xc7ysl\t\x97\xf8o}\x7f\x8e\x99=\xd4\xd6\x03\xd9\xe3\x89\xe9\x14dE-\xed\xe2Z\xd0\xe3Qp\xe4=@\xfc\xa0\xc5m\xa0)\xb8\xba\x05{\xe2}Eq\xf3\x05\xdc\xa9\xae\xc4m\x11\r}u\vH\x14\x96\xd0\xb2\xef\x02}\xc3\xacq\xdb\x89`\xc8\xea\x06\x9bj(\xbe\xa0\xb9\xfa\x98\xa1zl\x83\xa9\xcd\v0!i(\xd8\xb9\xcc\x91\xe9\x82yx\xb6wn\x9f\xa8\xf2B\xe2\xa7\xec\xc33\x99\xb7\x19z\xddW\xe2,Co\xef') clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:54:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000003a, 0x0) 13:54:37 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x176, 0x8000, 0x9, 0x6}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x40}, 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:37 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf487, 0x40) sendmmsg$alg(r0, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="52868b904a869eba443f16b9", 0xc}, {&(0x7f00000000c0)="ced73de42dfd5f2b56c5a90f1532caa7e2382268409ec89ac8c91783ce38c25ae9f6cfd05df99aa80ec2c3a5be1bd01debcf3751141aea5dfd96a155775a88ecd9db45a26014bb2bfa2565cc978829617b71edad09376a0c765b2e2ac465eb1a3f6d755b26308f9922997798c289369350fc5b887ad99301406bf8e9e89d262dda3f3089f83b21ca8acf3e9d6715e8690c13cbf6f773b0a132f779a98cf472a7440dce", 0xa3}, {&(0x7f0000000180)="e43f016b65165bf521fbb2ec41042c96c9a948b247c9031d2aa58b76c3d34239d14ce0b41f466b473b5e35a583e15ec757a27182dc486708eb", 0x39}, {&(0x7f00000001c0)="cf1206677b987a7c09e1eee9d1f6101e61ab3fd1c9f4e7bb8d8337ea83f26f75e46736394008c21e1b42bb844fbc472e15801c0c90cb5d9dda0e7772c7ff6aefe83c39be228622683ae91f01dc43544abff152ce7043119e11f7510ebebe820193eb6cb5595e51014be83015569754418b391d8ea0536b6be49a840f88de4876ee3edc328f7df7b3aa62d98e3f96e19ff9f588ebd75dcd6595a9b53accb75037a5994feff85eb03913b03db7afb6696100f5b48b608a0ced5945aa407b7cffa067df1fc02f990ae24248aacf7c477d60a70314", 0xd3}, {&(0x7f00000002c0)="5cc0e3890db25627c96140d2c722888cc192d17668d2b5a130f2fb67afc772f8344b2ae1d175b97a2dff15203ac99030b86cbf4e33caff62fbb8bc4d629c34982551d731c90b3bd8e83664348afa6f1aebdd7489640a8084ee74d9c623fc597f7de495ddd0df53a2a6f9da1342e7da0aa5fa8c1ef9abaf0a83bfe1373bc170346cb5a4fc2fa6039c59e8b3adf27fefb881d1f8e5e69d96ca11098c2336f35414a3911804fbfcb9256e9225", 0xab}, {&(0x7f0000000380)="baf618157af9cc4fb66a176bdf2edca4cd58460f37789a9be9298db16f57ee2394e61f900b53c48657b7878888bab43a4df5f5518f8b0ac5a38892ae03610a6fb65ab072b9f0ced4a2f6edec4d71168acda5f4390d06ae96e9bcb4f2bbce33a3107245d459a5134346a62425eabbac5b24c9f7ba7cba138f0090e160", 0x7c}, {&(0x7f0000000400)="d092fdc772e991f7badfc68ef9f60d94ea6bc32832164c43a572436fca8db88747dc36048a683327ea06eec5293a90cb53a3b8cc32a678a68faf0cfab1471cfff44939339d2a00240c3d884829db39da99894c8d8243f327e5f93fdd53d1e89fb659eab0759793e6019c14bbbb94f37fbc74d6740f542fd0698f0640f570c25c76fb1632bed3d3894bb80153841241c5c7481794f324f26b944e215affa719edff2b", 0xa2}], 0x7, 0x0, 0x0, 0x4080}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)="a2c2255e66a58431885d628345dab81a73f46f0e989ff6403abfa1615cf7ca1de820f0aac322c6940c3eff56b2ea6ddb2b29a3a607c4599f9be695ed2cca5caee844b90b01ded7da7d0edfdf", 0x4c}, {&(0x7f0000000700)="c9bf3aaba4b9d4030b6ab971c24669f1e255307f025b9fea20b893d27236de66f5d815cdc38476a66a7bc01bbfecefa417cda130d7f238f6e71475e57d12d04f06fc01b353df644a9ea80f4a5c31dffef619f7e372ec7e845e7efc76de866a885e4a15026bc942b94cd176be2747f4f89aa03485d44e7e3c88a6609e22da854a1ff01eedeed760b4e898b93a50ed7d7a19bb94bfb5f578fbc89ba4b2ddee5efa2e9754299fd2ee1120121d9e1b9ed1e03b36e2da5e3397a4657d29fc7e13392727fa95421417e8777c166efaf94e56e3453ea9e7c4223b300f4535bb5a", 0xdd}, {&(0x7f0000000800)="f0d51f9daaa1db37418ed98db6c1c9554d0a07ce70ff4dd4901835827e17b97bcb05d6684df1206fe32e41953796821e65837374f89aaf269297757f144bd818f54360a0365d0b11a3118667746923cbb466ef9f9a6979afb3702957047ca1e260e501454149370c4f8c27b92b2436f539c1a95cd71dd61fc759bc9e4bed133f7aeabbc7766fb4f06eef", 0x8a}, {&(0x7f00000008c0)="a414647f6bde006e2ff275cf98141c306bb7bf8553287b610a5209a4bbcd4ba5109fae85b0bb7290a7a4935b603f49e95de82fc235ba8809ef291626c8bfb1f0663688d66772eeb3ec5f7055143902975b7c24b224", 0x55}, {&(0x7f0000000680)="48e40c3cf9632a9992cef4bb1b7951b6eb8bf8ccace7d78aff8e4b54079a20e3da55fa04e2cf80745bda4f9c329ae6e6c135ce", 0x326}, {&(0x7f0000000940)="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", 0xfa}, {&(0x7f0000000a40)="95a895ac6fd35608e7f15b3ab9d4d356e07ad1160badb857ffe040563b", 0x1d}, {&(0x7f0000000a80)="4bf7e310bf9ae4b300b3d0404bb76af368653a8b1230f594da3b41b8a448c8a035960c935d", 0x25}], 0x8, 0x0, 0x0, 0x4008010}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)="6fc79fe4b4240afeab7b95f43452317f1c842e3d4aa456a00decff678e0440cbf4a49e36e0688428e865e8c5d3b279ff00dfc9bccdd439f54ba11b2e26fce62f6937521000bf702c34d40bfe9489cc1ae8b850ab0270b38e6bc448a5a751c645d3cd6f946a9a6754e33b2c2814b99cf808f6888f08d6c904818f9c2978e2770ad895424cbf6e01b2ecd80daa6b754456e703cc014bd86aee630bb43abb292881e83d96a4cd619fa04c980fcdaafad5d0cfd095ad363ddec171d0403f71fce6545a8512a65b2c6f59df0e271945286a1a7d697188d26b7cd679749f1f9d401eae227ca38e8f9fce7a05862bd7b036a0503dc48aa17c4a", 0xf6}], 0x1, &(0x7f0000000c80)=[@iv={0x110, 0x117, 0x2, 0xf9, "42cc82041781ee37f6333765069a9fe20dec9829644b9ebaadb28a0306a4db55c20239c42b7d41ba43693281d5dcdf76b98544d290ceb5edd272c278aaf5fd79b53404b1d6dcebdfb2cdea6d00aef93fce44def70d84962910f79d7bc2db34cd17de23d2316b8729fbcc15529bb1e36ab731af334c878f71951f0ed4a2fae84c0a9f3a6676edab67859e8234c2a4a4f5fe21e439f3c5c94d57fb023a5471bde2065c06f82af123dbcfd7feededd1a5b574d843c9cc46b2f64978e803af9d8e0110e665806b4b99f08c7ff6f7eee658b4c6061e25f292e0013b2f18da379704ccc587f43d7bc7f5c49f985226806126248c50ddb634269a7f7d"}], 0x110, 0x8841}, {0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)="0549823364c672806916d87518b087544540de2493a0bf6e7338ee676a3f70f85712ad92cb594135e07a0df91cd5eb18256e441d02c12194496922eb7f5da3ffab82adae04304e3ec519eacb1144338382e47ded9e4baded8aa4fd3a4dbeac684b4d1bf548f757cf681f485e3f5660a9d2cd526d233e9b18726ef8fda3d7eabd70d91947f63a8bc0bbff849e3a4540aa783bbe93cdd5ded2cbf2e4504e7045d6ca0dc828370f5f70526cd376eeb07b9c254c836669b136774d073b1e16963cda1d91b1cdcc3edbc6a3baacde", 0xcc}, {&(0x7f0000000ec0)="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", 0x1000}], 0x2, &(0x7f0000001f00)=ANY=[@ANYBLOB="9800000000000000170100000200000082000000422b719e03f2e3495dbd865603632817035a21a5bb46361c46e71eae2696b43600007bdc747be89b2f74aaead840f61f9fcd46687895c786be12ff37e4d9fd09f8ae806022416c6eb4c77688abef64f90efc41cd1982e877d9e0d42bbad9fee00046eb9487ab7801dbffffe0d89a95a0794c9287b9b758f9a71a4c6a54fbfb5a820018000000000000001701000003000000000000000000"], 0xac, 0x4000000}, {0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001fc0)="3ab0f36c179929b9c42007f97e109c416d9d7fab86ffbe2728dac7b51bc3c97765acaf82ba9bd4e9c1c0d7197e1424eb7bcb67d4da8ebc5d0e88029c35afe606da666675b7d912c1de70f33544475aac92368718ccc89607f60a2033e84d21bc8baf465cd9d797e5c2dff9be9819b5ac35490e24d012c7bf0edd105ad8979996a42d4dc54839e74112e99f26508ce2eb944988625675d265b4e5c36dfc3b21ffcc5b9fcab27a2441fd99910c", 0xac}], 0x1, &(0x7f00000020c0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x110, 0x117, 0x2, 0xfa, "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"}, @iv={0xc8, 0x117, 0x2, 0xaf, "3cd13586930906fe7b3760e05f19b3a6c685d8863c4301d77be8ca282726478ce4d4af023e8967677b4d5aa85a1bf23024291d57e5602404fa01503511ab4ddb96fb3f5adcf4f1dcba1c87cc5c8e3ef3198c9ebc546988f330c3624404fe8329d6cfc2314b859416c407888cfaa3e55073346735f89ab962bc015956c44d0bbea306fbcd289c52c5086c40e834668cfa3eee4703857a487b6bf06b7961c5768d57a6accd940b5dc896b2ee3b008a22"}, @iv={0x20, 0x117, 0x2, 0xa, "fd286b60bcc817f9d9b4"}], 0x210}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002300)="d0039a486f7fc2ba3f2942fe7e15cab961651478f57ef6415b9d0a9d304c076fd14afdda973ce69c98102e41723f0bbb4ac6ac417aaba6ab0d6411ca9000fa52958c3047946f977efd802c4286d4b7f8658cc79f1831e496296e3d83b98e45e7634d9ed96f147f6f5575ec90c5cb16c1ebdeafb8f35e38eef2e37d49a5f78ed13da8cd203f1b011c90b076ff56bb3d3df46d01b693229383eb8274cd7814cb60922718bc04d86847601f4354", 0xac}], 0x1, &(0x7f0000002400)=[@op={0x18}], 0x18, 0x800}, {0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002440)="d80e1c9e1d5c39be1eab04821bcb60ede75e30", 0x13}], 0x1, 0x0, 0x0, 0x4040}], 0x7, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') fcntl$setlease(r0, 0x400, 0x1) preadv(r1, &(0x7f0000000480), 0x30f, 0x0) 13:54:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4008630a}], 0x0, 0x0, 0x0}) [ 889.160444][T17928] binder: 17925:17928 ioctl c018620b 0 returned -14 [ 889.260009][T17965] binder: BC_ATTEMPT_ACQUIRE not supported [ 889.289411][T17965] binder: 17925:17965 ioctl c0306201 200002c0 returned -22 13:54:38 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x80, 0xfffffffffffffffe, 0x7, [{0x3, 0x166, 0x9, 0xfffffffffffffff9, 'net/snmp\x00'}, {0x0, 0x1, 0x4, 0x10000, 'ppp0'}, {0x1, 0xc3d, 0x9, 0x9, 'net/snmp\x00'}]}, 0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x2, 0x4) preadv(r1, &(0x7f0000000100), 0x0, 0x200) 13:54:38 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x29, 0x2, @thr={&(0x7f0000000080)="831b50bdaaa5b0690f0bc1fce59729ac2b59e7174634e05d72d17e6e4c2b0592296494b6ee81db3d043742a063af348dabeb492102605ad5ae9eea60af782fd544b6631bdf3c6ed2a8e75214d576fac49020d08dc2ad10e8e202539419cf56549ba6627187c3", &(0x7f0000000180)="1f6a4c348e4927028a2cc83f57cc43c9bbc695e703bfdc454c74779f87ce3fb9a6c2c48dcca87627f597f6c7fc055fd30296dbf7b97953e356a432fda77736761936f97cd72d267c9135371929b99d79061859e20ce2d6ea70d7dbdee6001e3df84b9f71342f0b935e0f3e77aef361b2329cc8f045546000ad74b751687080d2f93e82c9cc83dcb77bfda50e59858114f57085b764d24e49d23bb309015a3efb00c1da841566c1cd0a4af6076db8b75f2b99113a57d4ce7e05f6b3021a364846b68d60edd66385537619a7ba7d7adbadff7a096c084d2dd79a0a3be5862b6a6b011ee66040"}}, &(0x7f00000002c0)) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000003b, 0x0) 13:54:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x163) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 889.956012][T17965] binder_alloc: binder_alloc_mmap_handler: 17925 20001000-20004000 already mapped failed -16 [ 889.987103][T17965] binder: 17925:17965 ioctl c018620b 0 returned -14 13:54:38 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/84, 0x38b}], 0xffffffffffffd35) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 890.029102][T18153] binder: BINDER_SET_CONTEXT_MGR already set [ 890.083367][T18154] binder_alloc: 17925: binder_alloc_buf, no vma [ 890.089812][ T12] binder: send failed reply for transaction 515 to 17925:17928 [ 890.105248][T18153] binder: 17925:18153 ioctl 40046207 0 returned -16 [ 890.113699][ T12] binder: undelivered TRANSACTION_COMPLETE [ 890.130524][T18154] binder: 17925:18154 transaction failed 29189/-3, size 24-8 line 3147 [ 890.140308][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:54:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40086310}], 0x0, 0x0, 0x0}) [ 890.320566][T18260] binder: 18259:18260 ioctl c018620b 0 returned -14 [ 890.444196][T18265] binder: 18259:18265 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 890.452443][T18265] binder: 18259:18265 unknown command 0 [ 890.458833][T18265] binder: 18259:18265 ioctl c0306201 200002c0 returned -22 [ 890.488562][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 891.119136][T18265] binder_alloc: binder_alloc_mmap_handler: 18259 20001000-20004000 already mapped failed -16 [ 891.130114][T18265] binder: 18259:18265 ioctl c018620b 0 returned -14 [ 891.138517][T18267] binder: BINDER_SET_CONTEXT_MGR already set [ 891.144793][T18267] binder: 18259:18267 ioctl 40046207 0 returned -16 [ 891.159745][T18268] binder_alloc: 18259: binder_alloc_buf, no vma [ 891.166244][T18268] binder: 18259:18268 transaction failed 29189/-3, size 24-8 line 3147 [ 891.180716][T18265] binder: 18259:18265 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 891.189450][ T2988] binder: release 18259:18265 transaction 520 out, still active [ 891.204426][T18265] binder: 18259:18265 unknown command 0 [ 891.210210][ T2988] binder: send failed reply for transaction 520, target dead [ 891.222626][T18265] binder: 18259:18265 ioctl c0306201 200002c0 returned -22 13:54:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00,\xc6M\xec\xd8`\x0f\x9b\xdaj\xac\x8a?>\x11\x98\xd0\xe4\x90\xf8\xe1\x00\xd7Z\xce\xc8\xc5\xc6\x19\x87\x1a\x01\xd2\xce\x11\x04\xfa\x95dH@c\xdd\x1do6Pj/\x9c\x13\xa7\x9e\xb58u+\x06\x81\xd2/u\xc7ysl\t\x97\xf8o}\x7f\x8e\x99=\xd4\xd6\x03\xd9\xe3\x89\xe9\x14dE-\xed\xe2Z\xd0\xe3Qp\xe4=@\xfc\xa0\xc5m\xa0)\xb8\xba\x05{\xe2}Eq\xf3\x05\xdc\xa9\xae\xc4m\x11\r}u\vH\x14\x96\xd0\xb2\xef\x02}\xc3\xacq\xdb\x89`\xc8\xea\x06\x9bj(\xbe\xa0\xb9\xfa\x98\xa1zl\x83\xa9\xcd\v0!i(\xd8\xb9\xcc\x91\xe9\x82yx\xb6wn\x9f\xa8\xf2B\xe2\xa7\xec\xc33\x99\xb7\x19z\xddW\xe2,Co\xef') clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:54:40 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) tkill(r1, 0x1000000000016) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r2}) 13:54:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000003c, 0x0) 13:54:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 892.261779][T18276] binder: 18275:18276 ioctl c018620b 0 returned -14 [ 892.381217][T18342] binder: 18275:18342 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 892.412647][T18342] binder: 18275:18342 unknown command 0 [ 892.455102][T18342] binder: 18275:18342 ioctl c0306201 200002c0 returned -22 13:54:41 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00,\xc6M\xec\xd8`\x0f\x9b\xdaj\xac\x8a?>\x11\x98\xd0\xe4\x90\xf8\xe1\x00\xd7Z\xce\xc8\xc5\xc6\x19\x87\x1a\x01\xd2\xce\x11\x04\xfa\x95dH@c\xdd\x1do6Pj/\x9c\x13\xa7\x9e\xb58u+\x06\x81\xd2/u\xc7ysl\t\x97\xf8o}\x7f\x8e\x99=\xd4\xd6\x03\xd9\xe3\x89\xe9\x14dE-\xed\xe2Z\xd0\xe3Qp\xe4=@\xfc\xa0\xc5m\xa0)\xb8\xba\x05{\xe2}Eq\xf3\x05\xdc\xa9\xae\xc4m\x11\r}u\vH\x14\x96\xd0\xb2\xef\x02}\xc3\xacq\xdb\x89`\xc8\xea\x06\x9bj(\xbe\xa0\xb9\xfa\x98\xa1zl\x83\xa9\xcd\v0!i(\xd8\xb9\xcc\x91\xe9\x82yx\xb6wn\x9f\xa8\xf2B\xe2\xa7\xec\xc33\x99\xb7\x19z\xddW\xe2,Co\xef') clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:54:41 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x10001, [0xda23, 0x8001, 0x1f, 0x1, 0x10000, 0x5, 0xfffffffffffffff8, 0x779b, 0x9, 0x5d9f, 0x5, 0x20, 0x2, 0x3ff, 0x2, 0x35d, 0x0, 0xfffffffffffffbff, 0x5, 0xfff, 0x3, 0x7fff, 0xffff, 0x2, 0x1, 0xffff, 0x8, 0x3, 0x186a, 0x5, 0xba8, 0x6, 0x40, 0xc755, 0x7, 0xcc, 0x7, 0x8, 0x0, 0x2bfd, 0x4, 0x3, 0x9, 0x7, 0xffffffffffffffe1, 0x81, 0x7ff, 0x19e], 0xb}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000003d, 0x0) 13:54:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f0000000680)=0xc) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000007c0)=0x0) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000880)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000009c0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, r0, 0x0, 0x9, &(0x7f0000000a80)='net/snmp\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@ipv4={[], [], @initdev}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000c00)=0xe8) r13 = getegid() sendmmsg$unix(r1, &(0x7f0000000d00)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)="3fe182ed38d6aa09d963a0a01f1db8d68a3f193589a8d745e3cc319fccde3956228058e55eefafe4298aad5ab84379f9ba3ae835531786ffe3838c94b066bb1a3be6888983a75d0e9a84aed28a2d62da22e3ca9838fe55426e6da8243f57055a3871f33f56e2e026fd87846456de808e956a2e8ffdb12c4ca17dd42018ca443d", 0x80}, {&(0x7f0000000040)="20dc7fe77cedde6c99997aa99a4ebb95b1ee60cdd20a4c96397e5d6a2b7477266c90e1a3ea4b22e94bd4fa3f0711ab0a428fa4495b322e663fbc594280da", 0x3e}, {&(0x7f0000000200)="4a9533bc81307f42ba68ec8cd828bb165c24329020a584b6c530e6b59fde5a4f4abf2c1dbb8d32af5b26d983e4c2d1308759176af5a31a1ff75de889fbd9e6fa2e08a5eedeede4cd129581a757023cdc75022b0a87487dbd356e8ee7546e58b267e6145f92ff65be1d1e7bd565a757e349dc837bed014cf8f23f10dd51da4fdf6c8ad9bee5766c8ea6eea71f885e66fdcd", 0x91}, {&(0x7f00000002c0)="30446270ed561a71a750fda12680078a37279eef4d67371473121498288fcaf027b094b9793ece2a76d16bb08acc4d1b689eb03e5b06c4a4f0eb1d80f1237a54f9dcd26f8d3619d2d6a10c30b993f5cc66af1c98caec0616539c0b1d6e0725360f778ad5e8e546043f12d67ec50e258614522aa0d282727e03be1ddf0bc5cd7f0686460f68e1ea2e0ebfb689bc17727a4ff2dc8101ad5077e648815fc68a2d41c2c36dd25a5060767187341a40256e9acbb244a7018b5108acf09c35be5ba048ab570f096a3614ba511c0e", 0xcb}, {&(0x7f00000003c0)="15fcd7f723113b90348c6d78fe3ee0a4a24a7d910a384b269332937f2b55d90e16df5ff0b3c27ffc4d2242b07710a6a75be4664bca0fd0e16fe6000a4c9ed47880e02ed1e5818ea62ca5b1c1868749fdc6ea5769c76bce87be5995ccf77387d873f37bd50a4cfdf23788655e07bec810cb309ef43260a41721", 0x79}, {&(0x7f0000000440)="74a1284e3114d8a7ae5c9def103cb6a03a452e0fd5633a0fd45befcf473e8847dc62004f2e23bd94dbe1b36973db6e6ea2d42ff15ac704e972426b17bf8b1042def95ef342bb5e721fdf8a127b39eaa371a5ea8ae97dc6e52b5bdf6bd9c4ee0cb412416a747964ab0e42cc9a5771217cc9c3bf8981a0c932", 0x78}, {&(0x7f00000004c0)='C', 0x1}], 0x7, &(0x7f0000000c40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xc0, 0x1}], 0x1, 0x800) r14 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2, 0x0) preadv(r14, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:41 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x7fff, 0x3f, 0x3ff, 0x6, 0x4, 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)={0x7fff, 0xffffffff, 0x4}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) fcntl$notify(r0, 0x402, 0x80000000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 893.050032][T18342] binder_alloc: binder_alloc_mmap_handler: 18275 20001000-20004000 already mapped failed -16 [ 893.074072][T18342] binder: 18275:18342 ioctl c018620b 0 returned -14 13:54:41 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = gettid() timer_create(0x4, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280)="1035562551396d2a453b9b6be84bcf1a98e17fac2f884580ef4fb811cc74bd690c0a7e50da81e6d65f38b285f1d1fc558f2024320e69d5551368470689a2f9854ed95fef3c270e87f1ca1448b861f969fe4d35289cb7f9a422aceac04ac61296a19398b35bd96d4ab71b5c066dee909b687e0c8879e9d05f5e92c2b82e0e7637b095c52f7fbf1e971ecaa7a11c3b59074860bf4effc97abe0ab3fc0d7e78342b492e53541cbce5b02047babb50feacc26ed2339104d102f31d491ad720e953f1614673b05353ea245e7d9a1000c3e0426a64709c2799769132cfb69d75804e4f79840da6fc7b85", &(0x7f0000000380)="07b23bdcc59b1ed054c46604e5e27fd164019aa0ec6469f83464f45ebed71a1a8fcc0f1de2c0a727d749676994464709a62f4060cd52d865803469604a3d8d6c45d5f0a23e86a84e925690affa0230f2aa98ffd57ed9ab3dc6e5a0a45e574e2a57e5a544537b6a0c5141bb8b48413dbcc889815e4e3f964821"}}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000180)={0x8, 0x3, 0x0, [{0x3, 0x3, 0x1, 0xff, 0x52, 0x6, 0x3b67617e}, {0xfffffffffffffff9, 0x400, 0x401, 0x40, 0x7, 0x7, 0x6}, {0x8001, 0x8, 0x2e040044, 0x0, 0x10001, 0x1, 0x8}]}) tkill(r2, 0x1000000000016) [ 893.109544][T18606] binder: BINDER_SET_CONTEXT_MGR already set [ 893.133312][T18607] binder_alloc: 18275: binder_alloc_buf, no vma [ 893.156534][ T2988] binder: send failed reply for transaction 525 to 18275:18342 [ 893.172877][T18606] binder: 18275:18606 ioctl 40046207 0 returned -16 [ 893.177699][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 [ 893.213279][T18607] binder: 18275:18607 transaction failed 29189/-3, size 24-8 line 3147 13:54:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000003e, 0x0) 13:54:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630f}], 0x0, 0x0, 0x0}) 13:54:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/148, 0x110}], 0x0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 893.437010][T18616] binder: 18614:18616 ioctl c018620b 0 returned -14 [ 893.514163][T18621] binder: 18614:18621 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 893.515053][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 893.540664][T18621] binder: 18614:18621 unknown command 0 [ 893.564803][T18621] binder: 18614:18621 ioctl c0306201 200002c0 returned -22 13:54:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000300)) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x30, "123adac5e31ba48635fb711b54babe3337b3ab8f4aba991048333fbca542df5c1279133b8c5e8c20f1775344cca98180"}, &(0x7f00000000c0)=0x38) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0x50}, &(0x7f0000000140)=0x8) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x3, 0x400, 0x1, 0x0, [0x0]}}, 0x29) 13:54:42 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 894.225669][T18621] binder_alloc: binder_alloc_mmap_handler: 18614 20001000-20004000 already mapped failed -16 [ 894.238420][T18621] binder: 18614:18621 ioctl c018620b 0 returned -14 [ 894.245671][T18638] binder: BINDER_SET_CONTEXT_MGR already set [ 894.251796][T18638] binder: 18614:18638 ioctl 40046207 0 returned -16 [ 894.258590][T18639] binder_alloc: 18614: binder_alloc_buf, no vma [ 894.265015][T18639] binder: 18614:18639 transaction failed 29189/-3, size 24-8 line 3147 [ 894.272380][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 894.273634][ T12] binder: release 18614:18621 transaction 530 out, still active [ 894.302509][ T12] binder: send failed reply for transaction 530, target dead 13:54:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630f}], 0x0, 0x0, 0x0}) 13:54:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/152, 0x98}], 0x100001bf, 0xffffffffffffffff) 13:54:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000041, 0x0) 13:54:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106309}], 0x0, 0x0, 0x0}) 13:54:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 895.755764][T18644] binder: 18642:18644 ioctl c018620b 0 returned -14 13:54:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) io_setup(0x7, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000001700)="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", 0x1000, 0x7, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000280)) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x1f, 0x4) ioctl(r1, 0x1, &(0x7f0000000180)="ed9db6ae3500ebf1f914c1c25b4761536e818a2b5b5497b595715553dff179c8726d2d6254aab57e242c3ce57fde2fb1df5880144ec0a543841d759a6e314a3ca23af5c15b") prctl$PR_SET_DUMPABLE(0x4, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, [], [{0x3, 0x6, 0x8, 0x8000, 0x5, 0x2}, {0x7fffffff, 0xf1, 0x9, 0x7f8, 0x7, 0x2}], [[], [], [], []]}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/19) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x7, {{0xa, 0x4e24, 0xe000000000, @dev={0xfe, 0x80, [], 0x15}, 0x100000001}}, 0x0, 0x6, [{{0xa, 0x4e21, 0x6e6, @remote}}, {{0xa, 0x4e22, 0xffffffffffffffff, @empty, 0x9}}, {{0xa, 0x4e22, 0xce, @ipv4={[], [], @multicast2}, 0x1000}}, {{0xa, 0x4e21, 0x78c2, @local, 0xfffffffffffffffe}}, {{0xa, 0x4e22, 0xffffffff, @loopback, 0x4}}, {{0xa, 0x4e22, 0x0, @mcast2, 0x2}}]}, 0x390) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630f}], 0x0, 0x0, 0x0}) 13:54:44 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000042, 0x0) 13:54:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x1b, 0x3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x1, 0x7fff, &(0x7f0000000080)=0x3}) [ 896.545883][T18768] binder_alloc: binder_alloc_mmap_handler: 18642 20001000-20004000 already mapped failed -16 [ 896.617011][T18651] binder: 18642:18651 ioctl c018620b 0 returned -14 [ 896.617330][T18770] binder_alloc: 18642: binder_alloc_buf, no vma [ 896.654217][T18768] binder: BINDER_SET_CONTEXT_MGR already set [ 896.697805][T18651] binder: 18642:18651 BC_ACQUIRE_DONE u0000000000000000 no match [ 896.700560][T18770] binder: 18642:18770 transaction failed 29189/-3, size 24-8 line 3147 [ 896.782448][T18768] binder: 18642:18768 ioctl 40046207 0 returned -16 [ 896.782459][ T2988] binder: release 18642:18651 transaction 535 out, still active [ 896.782522][ T2988] binder: send failed reply for transaction 535, target dead 13:54:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106312}], 0x0, 0x0, 0x0}) 13:54:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000043, 0x0) 13:54:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4080, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 897.092126][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 897.112777][T18786] binder: 18781:18786 ioctl c018620b 0 returned -14 13:54:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) pipe(&(0x7f0000000780)={0xffffffffffffffff}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000400)={0x0, 0x6, 0xff, 0x80000000, 0x8, 0x898d}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/166, 0xa6}], 0x3, 0x0) ioctl$sock_bt_hci(r2, 0x400448ef, &(0x7f0000000340)="70b2949124d439935a93ed19079316b48621915d71e31483354a2397fd426e7c74000bef585df647c812f02a246a283adb01fbc8407d40970354969897ab7a0fcbfff46055cde7fb7603a91b72682913a3cf") ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x7, 0x6]) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000440)={0x1ff, 0x1b, 0x401, 0x10001, "47359944930259fb5537acef0b83154a642c6c929167b95522598976290fe663"}) [ 897.218916][T18789] binder: 18781:18789 unknown command 1074815762 [ 897.231170][T18789] binder: 18781:18789 ioctl c0306201 200002c0 returned -22 13:54:45 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x280001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000140)={{0x1, 0x5, 0xc7, 0x9, 'syz1\x00', 0x8}, 0x5, 0x221, 0x5, r1, 0x5, 0x0, 'syz1\x00', &(0x7f0000000100)=['net/snmp\x00', 'md5sum*ppp1\x00', 'net/snmp\x00', 'net/snmp\x00', '\x00'], 0x28, [], [0x8001, 0xff, 0x0, 0x7e2]}) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030107081dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000044, 0x0) [ 897.519741][T18797] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 13:54:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) io_setup(0x7, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000001700)="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", 0x1000, 0x7, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000280)) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x1f, 0x4) ioctl(r1, 0x1, &(0x7f0000000180)="ed9db6ae3500ebf1f914c1c25b4761536e818a2b5b5497b595715553dff179c8726d2d6254aab57e242c3ce57fde2fb1df5880144ec0a543841d759a6e314a3ca23af5c15b") prctl$PR_SET_DUMPABLE(0x4, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, [], [{0x3, 0x6, 0x8, 0x8000, 0x5, 0x2}, {0x7fffffff, 0xf1, 0x9, 0x7f8, 0x7, 0x2}], [[], [], [], []]}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 897.706693][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x80, 0xfffffffffffffffe, 0x7, [{0x3, 0x166, 0x9, 0xfffffffffffffff9, 'net/snmp\x00'}, {0x0, 0x1, 0x4, 0x10000, 'ppp0'}, {0x1, 0xc3d, 0x9, 0x9, 'net/snmp\x00'}]}, 0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x2, 0x4) preadv(r1, &(0x7f0000000100), 0x0, 0x200) [ 897.885256][T18789] binder_alloc: binder_alloc_mmap_handler: 18781 20001000-20004000 already mapped failed -16 [ 897.913763][T18789] binder: 18781:18789 ioctl c018620b 0 returned -14 [ 897.921693][T18805] binder: BINDER_SET_CONTEXT_MGR already set [ 897.931550][T18807] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 13:54:46 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 897.989490][T18805] binder: 18781:18805 ioctl 40046207 0 returned -16 [ 898.047550][ T2988] binder: send failed reply for transaction 540 to 18781:18786 [ 898.055327][T18806] binder_alloc: 18781: binder_alloc_buf, no vma [ 898.068737][ T2988] binder: undelivered TRANSACTION_COMPLETE 13:54:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xaf, "b4b07ac1613950743a3a8246a8978bd318ea8d8780dc201a78153b322a2d1a672df73136631911ad821c135fa1bbd14b8e2ca2e0523924ef1cb427b55309c362949378150f93f35461f18644a573dce363d4e4d5960158c5c6188a5bd5589b1c29e934e53da440563df289133be4e89d6714868544ab5ccaf136ac505e413956ebd61f085def8acd3238734b4652ec794b4ed4b2abbf799ca422b48dadf9450335705b94b7e11ddd2650a7cf7fb0b2"}, &(0x7f0000000000)=0xb7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r1, 0xfff}, &(0x7f0000000180)=0x8) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 898.096457][T18806] binder: 18781:18806 transaction failed 29189/-3, size 24-8 line 3147 [ 898.105290][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 [ 898.666095][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:47 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x27e5, 0xffff, 0x1, 0x6, 0x5, 0x8, 0x0, 0x7c2b, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x1000, 0x1}, &(0x7f0000000180)=0xc) tkill(r1, 0x1000000000016) 13:54:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406300}], 0x0, 0x0, 0x0}) 13:54:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000045, 0x0) 13:54:47 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000d00)={0x4, &(0x7f0000000a80)=[{}, {}, {}, {}]}) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000d40)='/dev/usbmon#\x00', 0x2, 0x2002) r4 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@un=@abs, &(0x7f0000000200)=0x80, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c020000280002062bbd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="0d00ffff0f00ffff0c000e000800010061746d007800020008000300b176cd000800040010000f0008000100", @ANYRES32=r2, @ANYBLOB="20000300281512d3d7fb455ea3df4a8bb7e871f9f30d13ca3fe6d94790a0000008000100", @ANYRES32=r3, @ANYBLOB="1c004c2cf858588cc4755ae574904c2cfd42ab8e86d108000100", @ANYRES32=r4, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_procfs(r5, &(0x7f0000000080)='net/snmp\x00') preadv(r6, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000680)=""/61, 0x3d}, {&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/31, 0x1f}, {&(0x7f0000000940)=""/161, 0xa1}], 0x7, 0xfffffffffffffffe) 13:54:47 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x280001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000140)={{0x1, 0x5, 0xc7, 0x9, 'syz1\x00', 0x8}, 0x5, 0x221, 0x5, r1, 0x5, 0x0, 'syz1\x00', &(0x7f0000000100)=['net/snmp\x00', 'md5sum*ppp1\x00', 'net/snmp\x00', 'net/snmp\x00', '\x00'], 0x28, [], [0x8001, 0xff, 0x0, 0x7e2]}) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030107081dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 899.576305][T18830] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 899.605462][T18834] binder: 18833:18834 ioctl c018620b 0 returned -14 13:54:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x20, 0x18}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:48 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x280001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000140)={{0x1, 0x5, 0xc7, 0x9, 'syz1\x00', 0x8}, 0x5, 0x221, 0x5, r1, 0x5, 0x0, 'syz1\x00', &(0x7f0000000100)=['net/snmp\x00', 'md5sum*ppp1\x00', 'net/snmp\x00', 'net/snmp\x00', '\x00'], 0x28, [], [0x8001, 0xff, 0x0, 0x7e2]}) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030107081dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 899.680521][T18890] binder: 18833:18890 got new transaction with bad transaction stack, transaction 545 has target 18833:0 [ 899.710287][T18890] binder: 18833:18890 transaction failed 29201/-71, size 0-0 line 3044 [ 899.736262][T18944] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 13:54:48 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) gettid() 13:54:48 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x280001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000140)={{0x1, 0x5, 0xc7, 0x9, 'syz1\x00', 0x8}, 0x5, 0x221, 0x5, r1, 0x5, 0x0, 'syz1\x00', &(0x7f0000000100)=['net/snmp\x00', 'md5sum*ppp1\x00', 'net/snmp\x00', 'net/snmp\x00', '\x00'], 0x28, [], [0x8001, 0xff, 0x0, 0x7e2]}) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030107081dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:48 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) tkill(0x0, 0x1000000000016) [ 899.962803][T19050] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 13:54:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) quotactl(0x1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)="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") 13:54:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000046, 0x0) [ 900.323286][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 900.390170][T18890] binder_alloc: binder_alloc_mmap_handler: 18833 20001000-20004000 already mapped failed -16 [ 900.413858][T18890] binder: 18833:18890 ioctl c018620b 0 returned -14 [ 900.414375][T19164] binder: BINDER_SET_CONTEXT_MGR already set [ 900.463495][T19164] binder: 18833:19164 ioctl 40046207 0 returned -16 [ 900.470724][T19165] binder_alloc: 18833: binder_alloc_buf, no vma [ 900.499972][ T12] binder: release 18833:18890 transaction 545 out, still active [ 900.508394][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 900.517990][T19165] binder: 18833:19165 transaction failed 29189/-3, size 24-8 line 3147 [ 900.520470][T18890] binder_alloc: 18833: binder_alloc_buf, no vma [ 900.558169][T18890] binder: 18833:18890 transaction failed 29189/-3, size 0-0 line 3147 [ 900.563186][ T12] binder: send failed reply for transaction 545, target dead 13:54:48 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) fremovexattr(r1, &(0x7f0000000080)=@random={'user.', '/dev/cec#\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) 13:54:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) quotactl(0x1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)="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") 13:54:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406301}], 0x0, 0x0, 0x0}) [ 900.599942][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 900.685510][T19173] binder: 19172:19173 ioctl c018620b 0 returned -14 [ 900.771982][T19275] binder: 19172:19275 got reply transaction with bad transaction stack, transaction 552 has target 19172:0 [ 900.791980][T19275] binder: 19172:19275 transaction failed 29201/-71, size 0-0 line 2914 13:54:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) quotactl(0x1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)="6949a8f18fe2b810c42ac32c2c09b64a493e4635096506ffa3a364b03b16187d097211575c8d24f005a2e941642c43313d8bd45eb5415d278ff9ba18e6c4b47cccb8db9ac3dca57c79fda2e9df7195ff06439d9e6e7b2346e7c7128d6c57068470a30720b3fd814cb506ee0903cea0cfaef3db20d6feb33fceee3109884d661d5d9a99ab272d72f8203e387b22eabdd9a809342e7592e3bf87a95eb914cce4b285c513f608267864d888c3c14970e8170ee01a11e5f74a1a290e46719278cec2a93afdbba56a57db72c5c0cff765ecbb6768b32014591794f4a08f4736e8a42f4df29d22303924159180587fb10473f69ea09baaeaa2a775ff69986c36") 13:54:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1e, 0x400000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000047, 0x0) 13:54:49 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x100000000000f) 13:54:49 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406300}], 0x0, 0x0, 0x0}) 13:54:49 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x3b6) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/91) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="e8c931f364d38a880b990b0f6ffd9723086912a2a2514ca14a5eb27e9709e6984585e78cafeb080f4f00f4c54e300cedd842b5611c3d29b2b50f912a0accb82307c982464b206a8918", 0x49}, {&(0x7f00000000c0)="7a7fe1b263421ace1986ff81fe8d79aff7b4c567810a709490b7d38f7c337f9843bd", 0x22}], 0x2, 0x0, 0x0, 0x20000000}, 0x40804) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat(r0, &(0x7f0000000300)='./file0\x00', 0x200, 0x8) tkill(r1, 0x1000000000016) r2 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000300)) 13:54:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406300}], 0x0, 0x0, 0x0}) 13:54:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406300}], 0x0, 0x0, 0x0}) 13:54:49 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x877fb3abc40758ff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x25c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff0000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @rand_addr="81c6d20378b611caeb8535d535834fe0", 0x5c37}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @rand_addr="9b7969f72c0f1145bcb46c1663efb783", 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffffffff0000, @ipv4={[], [], @remote}, 0x10000}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x326}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x895}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6a}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000180)=0x4) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000800)={{r3, r4/1000+10000}, 0x15, 0x800, 0x101}, 0x18) tkill(r2, 0x1000000000016) syz_mount_image$btrfs(&(0x7f0000000540)='btrfs\x00', &(0x7f0000000580)='./file0\x00', 0xffffffffffff9e68, 0x2, &(0x7f0000000780)=[{&(0x7f00000005c0)="111acdb53a14e97ce8f4c936b55f8754753285c2b069c40f0840967b90c0ca93c21f752a6b3b4c68a96d5eebc11258bb5f734bafc994154772e56f74103c5cc3eca685", 0x43, 0x7}, {&(0x7f0000000680)="4f638ebb6e254f7a3febe8196d10d465b704af5372a0e3841859791e3965b70766234542343c698740f63486ef16d1e32a51fddfb6f4ed7240bf1bb2187f17800acee196bcb491d17d2ff92320d7d7df8c7fee5e679411153624c53f32f59f0e7565d0c506a843d8a91575f02f60f6c3d534c5ba0c5a7ae6fd8de11032a60acb52efab64e54441b1df9d5a61ac40e735971bc5c18c8f237a412dd34c5ad12c133cd38c27c760e67cb14c0f4daf8e88becf6ed9549cb52cfd6d9951413c96cda563c7a818d4c63f912b7546c69ca19b03ac1d51a65eb836e6c1fb471d91db301a575d0d619eb75ec1d7a8f07829db12429ad8b579de33f141", 0xf8, 0x4}], 0x1820, &(0x7f00000008c0)=ANY=[@ANYBLOB="6465677261719ef2456e6f6461746173756d2c636f6d6d69743d3078303030303030303030303030303030382c646973636172642c73706163655f63616368653d76312c747287656c6f672c636f6d70726573042c66736e616d653d2c004daf44f5624ae9dfcd55442ead8efa1dcf42c9cf07b8de4a63e80064142f31e2589fa2ba9906f6a20c5ccbc2b891387fda2b76a99a9f7517f67af5c9ea814403b8264289a9d2d3cfb814c418fdd288bc1aefbd2be7b94c06690b0bfe5d8630ce4f3893960f883da9313b918b69aadc4abce408edcc13b1cc52bfb01ae40a207baf4f216ec921"]) timer_create(0x4003, &(0x7f0000000040)={0x0, 0x20000000000001c, 0x0, @tid=r2}, &(0x7f0000000080)) 13:54:49 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 901.474420][T19275] binder_alloc: binder_alloc_mmap_handler: 19172 20001000-20004000 already mapped failed -16 [ 901.513802][T19275] binder: 19172:19275 ioctl c018620b 0 returned -14 [ 901.543814][T19482] binder: BINDER_SET_CONTEXT_MGR already set [ 901.579179][T19509] binder_alloc: 19172: binder_alloc_buf, no vma [ 901.589628][ T2988] binder: send failed reply for transaction 552 to 19172:19275 [ 901.598757][T19482] binder: 19172:19482 ioctl 40046207 0 returned -16 [ 901.604412][ T2988] binder: undelivered TRANSACTION_ERROR: 29201 [ 901.618711][T19509] binder: 19172:19509 transaction failed 29189/-3, size 24-8 line 3147 [ 901.624149][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:54:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40486311}], 0x0, 0x0, 0x0}) 13:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000048, 0x0) 13:54:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/r\x906_stats\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0xb93, 0x3, 0xff, 0x1, 0xfff, 0x3800}, 0x20) tkill(r1, 0x1000000000016) 13:54:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) fsync(r0) dup3(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sync_file_range(r0, 0xffffffffffff0001, 0x4, 0x1) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 901.797004][T19558] binder: 19551:19558 ioctl c018620b 0 returned -14 [ 901.864211][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 901.943482][T19626] binder: 19551:19626 got new transaction with bad transaction stack, transaction 558 has target 19551:0 [ 901.998136][T19626] binder: 19551:19626 transaction failed 29201/-71, size 0-0 line 3044 [ 902.058179][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:50 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) tkill(r1, 0x1d) 13:54:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0x10000133, 0x10000000000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000049, 0x0) 13:54:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) fsync(r0) dup3(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sync_file_range(r0, 0xffffffffffff0001, 0x4, 0x1) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 902.586135][T19626] binder_alloc: binder_alloc_mmap_handler: 19551 20001000-20004000 already mapped failed -16 13:54:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) fsync(r0) dup3(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sync_file_range(r0, 0xffffffffffff0001, 0x4, 0x1) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 902.643912][T19626] binder: 19551:19626 ioctl c018620b 0 returned -14 [ 902.644528][T19646] binder: BINDER_SET_CONTEXT_MGR already set 13:54:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x6, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000022000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}, 0x1, 0x400300}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) [ 902.708123][ T2988] binder: release 19551:19626 transaction 558 out, still active [ 902.737478][T19646] binder: 19551:19646 ioctl 40046207 0 returned -16 [ 902.750050][ T2988] binder: undelivered TRANSACTION_ERROR: 29201 [ 902.776110][ T2988] binder: send failed reply for transaction 558, target dead 13:54:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40486312}], 0x0, 0x0, 0x0}) 13:54:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) fsync(r0) dup3(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sync_file_range(r0, 0xffffffffffff0001, 0x4, 0x1) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 903.023818][T19724] binder: 19721:19724 ioctl c018620b 0 returned -14 13:54:51 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x29) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000700)=""/4096) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004a, 0x0) [ 903.137124][T19765] binder: 19721:19765 got reply transaction with no transaction stack [ 903.157815][T19765] binder: 19721:19765 transaction failed 29201/-71, size 0-0 line 2899 [ 903.627706][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 903.796537][T19765] binder_alloc: binder_alloc_mmap_handler: 19721 20001000-20004000 already mapped failed -16 [ 903.817181][T19765] binder: 19721:19765 ioctl c018620b 0 returned -14 [ 903.837726][T19778] binder: BINDER_SET_CONTEXT_MGR already set [ 903.860238][T19779] binder_alloc: 19721: binder_alloc_buf, no vma [ 903.876134][T19778] binder: 19721:19778 ioctl 40046207 0 returned -16 [ 903.888705][ T12] binder: release 19721:19724 transaction 563 out, still active [ 903.900166][T19779] binder: 19721:19779 transaction failed 29189/-3, size 24-8 line 3147 [ 903.910794][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 903.921647][ T12] binder: send failed reply for transaction 563, target dead [ 904.071203][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:52 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)={r1, 0x1}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@default, @null}) 13:54:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') bind$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/148, 0x386}], 0x1130, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x240040, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r3, &(0x7f0000000480), 0x100000000000013f, 0x2b) 13:54:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004b, 0x0) 13:54:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x1000000}], 0x0, 0x0, 0x0}) [ 904.301253][T19791] binder: 19789:19791 ioctl c018620b 0 returned -14 13:54:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, [], {0x0, @bt={0x8, 0x5, 0x1, 0x3, 0x1000, 0x2, 0x100000001, 0x8, 0x8, 0xe, 0x0, 0x2, 0xd46, 0x4, 0x4, 0x8}}}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 904.440325][T19894] binder: 19789:19894 BC_INCREFS_DONE u0000000000000000 node 570 cookie mismatch 0000000001000000 != 0000000000000000 13:54:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x19) syz_init_net_socket$ax25(0x3, 0x5, 0xce) socket$inet_smc(0x2b, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x1, 0x1, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)=0x1, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 13:54:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:53 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x2, 0x5, 0x54b, 0x5, 'syz0\x00', 0x1f}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1d) 13:54:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:53 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x2000000014, 0x4000000000, @thr={&(0x7f0000000040)="5dcfee80c1fa78b6faf611", &(0x7f0000000180)="d197b9f82ab591bc4a9c4d87d8ef1cc6fb936142870093b0d36c725480731022511919d69da36da316ffcbd1910e0224ee6b8b96e20e6832c839424b0e1ad54ec4f5b127f18b03bb6d6e13549d2ed19c442e01f12f99e89b9a730656a852776b43e1c331c0da30be92ba25ca20246ec468f57b95d7b586506e6fa1e27fde65d96b7dc36857c4e3bbf919b168b426c41e1cb2c5189266266a46b51715390a7dd9a6b9303559954062ae87bb49c0a3522cb04c3162cf761811e600e3546be1c75ed4a6e043c961bb6b3e3f92e412be91425dc5ddef0976530c1de3f2217d86a56cb8fd2d83c35c8ab8789fc1118038544eea65"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x1c, 0x4) [ 904.962336][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 905.095920][T19894] binder_alloc: binder_alloc_mmap_handler: 19789 20001000-20004000 already mapped failed -16 [ 905.106965][T19894] binder: 19789:19894 ioctl c018620b 0 returned -14 [ 905.114605][T19918] binder: BINDER_SET_CONTEXT_MGR already set [ 905.120916][T19918] binder: 19789:19918 ioctl 40046207 0 returned -16 [ 905.138219][T19919] binder_alloc: 19789: binder_alloc_buf, no vma [ 905.145918][T19919] binder: 19789:19919 transaction failed 29189/-3, size 24-8 line 3147 [ 905.157627][T19894] binder: 19789:19894 BC_INCREFS_DONE u0000000000000000 no match [ 905.168983][ T2988] binder: send failed reply for transaction 569 to 19789:19894 [ 905.180586][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:54:53 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004c, 0x0) 13:54:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 13:54:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0xfdfdffff}], 0x0, 0x0, 0x0}) 13:54:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 905.364841][T19929] binder: 19928:19929 ioctl c018620b 0 returned -14 13:54:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x484000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20009}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x0, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/mcfilter6\x00') recvfrom$x25(r2, &(0x7f0000000700)=""/4096, 0x1000, 0x40000000, &(0x7f0000000500)={0x9, @null=' \x00'}, 0x12) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040)=0x8, 0x4) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000280)=0xfff, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r4, 0x3}) recvfrom$llc(r3, &(0x7f00000000c0)=""/203, 0xcb, 0x40000000, &(0x7f0000000000)={0x1a, 0x312, 0x7f, 0x9d2, 0x75, 0x500000000, @random="c7da222f2902"}, 0x10) [ 905.462999][T19934] binder: 19928:19934 BC_INCREFS_DONE u0000000000000000 node 575 cookie mismatch 00000000fdfdffff != 0000000000000000 13:54:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:53 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xffffffff00000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004d, 0x0) 13:54:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0x4ad, 0x8, 0xfff, @dev={[], 0x12}, 'ip6gre0\x00'}) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 906.008059][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 906.142637][T19934] binder_alloc: binder_alloc_mmap_handler: 19928 20001000-20004000 already mapped failed -16 [ 906.176529][T19934] binder: 19928:19934 ioctl c018620b 0 returned -14 [ 906.210137][T19957] binder_alloc: 19928: binder_alloc_buf, no vma [ 906.228101][T19934] binder: BINDER_SET_CONTEXT_MGR already set [ 906.237406][T19957] binder: 19928:19957 transaction failed 29189/-3, size 24-8 line 3147 [ 906.256787][T19960] binder: 19928:19960 BC_INCREFS_DONE u0000000000000000 no match [ 906.257541][T19934] binder: 19928:19934 ioctl 40046207 0 returned -16 [ 906.264688][ T12] binder: send failed reply for transaction 574 to 19928:19929 [ 906.264740][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 906.433106][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:54:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000180)={0x10, 0x8, &(0x7f0000000040)="16f7727048582aeccd5b07a97bdb30d3cf969e423e550c9ec6667773cf365b6a0c9d2ec0d27964a80cf2a751d87a1ca80c06cf9cc4f3506000cf8b3c1ff4e2ed4132480d5ee4fa687ee9ca47b02331c1d59323b559a4d5cc00eed9390f6d82494bff0e2129bc4ee02b36ae077ff665bee544e6419cd54368b3c62be8c342b883b3209ca3e77a4b4f77ef5767360cd300e2c803a2b9d08c3e52", {0x35, 0x380000000000, 0x7f7f7f5f, 0xf, 0x6, 0x4, 0x7, 0x1}}) 13:54:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') readahead(r1, 0x800, 0x10001) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000300)=""/86, 0x56}], 0x4, 0x0) 13:54:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004e, 0x0) 13:54:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0xfffffdfd}], 0x0, 0x0, 0x0}) 13:54:56 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:56 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x8000000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0xffffffffffff8001) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 907.965805][T19976] binder: 19971:19976 ioctl c018620b 0 returned -14 [ 908.053568][T20044] binder: 19971:20044 BC_INCREFS_DONE u0000000000000000 node 580 cookie mismatch 00000000fffffdfd != 0000000000000000 13:54:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7f, 0x1, 0x10001, 0x401, 0x0, 0x895d, 0x0, 0x4, 0x600000000, 0x6, 0x6, 0xfffffffffffffff9, 0x800, 0x1, 0x1, 0x0, 0x0, 0xc3, 0x2, 0x1, 0x7, 0x1, 0x800, 0x2, 0x1, 0x400, 0x1f, 0x80000000, 0x585, 0x80000001, 0x9, 0x1, 0x6000000000000, 0x2, 0x6, 0x10000, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0xfff}, 0x4000, 0x79, 0x40, 0x7, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x6, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:54:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004f, 0x0) 13:54:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}, {&(0x7f0000000280)=""/237, 0x10}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000040)=""/50, 0x32}], 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000004c0)=0xe8) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x88000, &(0x7f0000000500)={'trans=unix,', {[{@cache_mmap='cache=mmap'}, {@cachetag={'cachetag', 0x3d, '/dev/dsp#\x00'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@afid={'afid', 0x3d, 0x3be}}], [{@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}}) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 13:54:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/148, 0xffd7}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 13:54:57 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x9e0000, 0x6, 0x0, [], &(0x7f00000000c0)={0x9b0b5f, 0x10000, [], @p_u16=&(0x7f0000000040)=0x7}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 908.731623][T20044] binder_alloc: binder_alloc_mmap_handler: 19971 20001000-20004000 already mapped failed -16 [ 908.747487][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 908.754327][T20044] binder: 19971:20044 ioctl c018620b 0 returned -14 13:54:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 908.816075][T20302] binder: BINDER_SET_CONTEXT_MGR already set [ 908.869493][T20302] binder: 19971:20302 ioctl 40046207 0 returned -16 [ 908.884225][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 908.912611][T20298] binder: 19971:20298 BC_INCREFS_DONE u0000000000000000 no match [ 908.914643][T20303] binder_alloc: 19971: binder_alloc_buf, no vma 13:54:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000050, 0x0) [ 908.987441][T20303] binder: 19971:20303 transaction failed 29189/-3, size 24-8 line 3147 [ 908.996422][ T12] binder: release 19971:20044 transaction 579 out, still active [ 909.013204][ T12] binder: send failed reply for transaction 579, target dead 13:54:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x100000000000000}], 0x0, 0x0, 0x0}) [ 909.224931][T20314] binder: 20313:20314 ioctl c018620b 0 returned -14 [ 909.339981][T20315] binder: 20313:20315 BC_INCREFS_DONE u0000000000000000 node 585 cookie mismatch 0100000000000000 != 0000000000000000 13:54:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7f, 0x1) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') r2 = gettid() write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x27, 0x37, 0x2, {0x0, 0x7, 0x13, r2, 0x9, 'net/snmp\x00'}}, 0x27) preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:58 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x3f00000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:54:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000051, 0x0) 13:54:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') recvfrom$inet6(r0, &(0x7f0000000000)=""/91, 0x5b, 0x2, 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 910.006422][T20315] binder_alloc: binder_alloc_mmap_handler: 20313 20001000-20004000 already mapped failed -16 [ 910.024104][T20315] binder: 20313:20315 ioctl c018620b 0 returned -14 [ 910.031316][T20332] binder: BINDER_SET_CONTEXT_MGR already set [ 910.051126][T20333] binder_alloc: 20313: binder_alloc_buf, no vma [ 910.071719][T20332] binder: 20313:20332 ioctl 40046207 0 returned -16 [ 910.081457][T20315] binder: 20313:20315 BC_INCREFS_DONE u0000000000000000 no match [ 910.089482][ T12] binder: release 20313:20315 transaction 584 out, still active [ 910.097792][T20333] binder: 20313:20333 transaction failed 29189/-3, size 24-8 line 3147 [ 910.114592][ T12] binder: send failed reply for transaction 584, target dead 13:54:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) [ 910.296454][T20339] binder: 20338:20339 ioctl c018620b 0 returned -14 [ 910.394076][T20340] binder: 20338:20340 BC_INCREFS_DONE u0000000000000000 node 590 cookie mismatch fdfdffff00000000 != 0000000000000000 13:54:58 executing program 3: r0 = socket(0xb, 0x0, 0x8) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x210400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0xa8, 0x1, {"496cf36f97e116e4ee80891f6b3a8b8c2a6453e205460b3ba0a237142bb256560954b9b636f53d7801f44a8dc852b5ab6dc4d52972847b12198e751e327c582bc8d079085ed9d684647bd5b0203270cc5ec37d11f49695ae02cd8b72fdba469ad810e6a0d5ce2ca66baf2620b9335581597c8d6c7405ab527692055decdb0ece8a21ccc48ff3e9ebe71fd3175f"}}, {0x0, "9bd638d4f42422284ec8b49dd0261416ba269904523e94eaa09fd633f1223224507605efcb87a14609d008dcc82a5e295968803ecc637ff947a9a3ffb06267f81f9b4a45b99733850681b4089380732552c03a4a907b99e038ad229ee45ca5c360cf27a1fb938922c0f72ddd8fe89db2d8ceb405f30df6ca71f60c8ffbe4fea7a8ddb572ae372930e00c0677920ac6681b4fb2610c"}}, &(0x7f0000000700)=""/4096, 0x13f, 0x1000}, 0x20) r4 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x6040) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_pts(0xffffffffffffff9c, 0x101000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0xeb, 0x9, 0x6, 0x0, 0x0, [{r1, 0x0, 0x4}, {r2, 0x0, 0x61}, {r3, 0x0, 0x401}, {r4, 0x0, 0x1}, {r5, 0x0, 0x200}, {r6, 0x0, 0xa4f}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x200000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000040)={0xfff}, 0x4) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r8, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:54:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 13:54:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x20000, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x6}, 0x18) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) getpgid(0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/snmp\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x1, 0x255}, 0x8) preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 910.856598][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 911.069316][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 911.084457][T20340] binder_alloc: binder_alloc_mmap_handler: 20338 20001000-20004000 already mapped failed -16 [ 911.105270][T20340] binder: 20338:20340 ioctl c018620b 0 returned -14 [ 911.118876][T20358] binder: BINDER_SET_CONTEXT_MGR already set [ 911.156960][T20359] binder_alloc: 20338: binder_alloc_buf, no vma [ 911.184883][ T2988] binder: send failed reply for transaction 589 to 20338:20339 [ 911.192946][T20358] binder: 20338:20358 ioctl 40046207 0 returned -16 [ 911.200234][ T2988] binder: undelivered TRANSACTION_COMPLETE [ 911.206921][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 [ 911.213928][T20359] binder: 20338:20359 transaction failed 29189/-3, size 24-8 line 3147 13:55:00 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1) write$binfmt_elf32(r0, &(0x7f0000001e80)=ANY=[@ANYBLOB="7f454c460600020404000000000000000300030009000000b201000038000000560200008100000000002000010004000800810000000000030000600900000055340000080000000500000005000000030000000000000024509e282df6132b2d554714177c5dbde008726aeac6ed312222719b26d40b570224626e6ea971ac64ba0686edda19d1ad8d043d522497afef79ec75e473653f9eaa424292072cf519c1d16826df3b4bbcbf79881b18a40877096025992abbb2b122c5d452bc16392f6e5f0f38fc2d12bab2024ecfbc1568f890be5998e6f566d4fc5be83daaad3b415b5b29064251333e327ea9f88c20766aeb6559b9831e2bdbd0c918da27c143872d10b6ed14638c25aa72498ad68b02c48e8f56cd0e0af4a234813f33daed4fb9fdff525c5e8ebe331fc4ebdf0066cdb970cbe2f40f9af98f2bd02aca07060da2792df8977bc8ae030dcc3518c207712ca83ff9ebdeafb024a87fcc49993201196068b17e6ee388c17e83e6acaaf86044af7b3477050e0adbfc316af9be7f7a04705c0271934200fca1fc97683ee769e00ffedd27db49bb2081564f7932ad85152b7461ae53b5edda251e68c97ee11be385108638e812df2d8e511bc02e72de57ab65a9bb2cf2e24ca38499a68e594a622d1f323be19a10e76eeab78a7e97fe27ea1d0570467c052a49d1bd7fdb968108607a5181127faabadc6c9fe427e8e073fad61b58b3093df183c62cc64c14e80ea94f5213e9ab2037fca7447fab2e9b95e96b02b9f7149da6f102c2dbfe87e22c29b915cc4054d6070647b8b5bb12a7a6a0512c088954e5aa1539c7a1bb656630395f6feaf6e51628ab6424d49f700475ac9ce18724a487381e3a9a9216e91d66cd08a4c78b6c1b97388f10d206f3fa9b366cb08f5c3cebb70839831ed572643d86c71589acbe9539868270a2a476d82740a305f7814d6c7d0cf906150062ad63d4cfa5e2bac2da3e794e4c5eddaa0f712b9a280296a5f2e79ff93ce1ae609500c9468c7ec784f407ae12f342173abe0569b30d0c55b3489debac3cdc222e877714600179d6851aaf6d8b63c4abd1af42d9c9a030bd5d3b69336587b7892f5fead42070461365bb5fb75818e8dc8544566db8884f40fb65d2394b76019513262b544303e9af5de99902da406c883ac83e8753c0571e74930985b04045d6317c930cf90ab027b42fb5732e14ef62ffec9440f04c844d820ac09af4eefa60a2349304036aef921846bbb95e6d758065a31b651f6402564aa03a5c236e1138d3ac6b671861c02955cc178833048b25e315dd6b7f5f90515bc1a306bc9a32a916a38067398ee4a6317114fdd9439f48027b0dcb854e13c5428459c15ffaf6563eeebfed5f122e10a081ee1809f2fa602864065cccb71fc1c7809603467a312a801ace0347dae95611d4c9f33b266f89a843b2eb750e552ec46040ced555e2a6c7b43553600189439c8ac9ba4f26b62a67870a507ddc9c39f6b15ee450fea64226e872769ff469e950e2d4bcf1d6f598933a114959b44a65b588326ac0591b030a4228b8d8d4d2d7c82e6f752594682db7a5776a2752bdb964a6b37ba0f461044b0d96e3930436306eba0668de749929fc381eff06bc61032fbf38be7b396bfc6292cdd47aeca4572c51a78215d92a23e07a4dbc9421ea140fffe1504fd4bff08b144e3cdb69557568836d072b913aa3ae8b4f1d48c1b3882d69904f976c598966684815704cd980e1dabce8d23101ea51d9242b9def6e6bfc588a289c27c86dc566ebcd725564de5601071974e81fa802a75a72083e5c36c38fe0c2fa5126d1360b17829158c9170802d98e1a33338cb539dfd07c62972f36842ac2f730d416bf675150dcfca3202efd6071d79315e1012b512684ac4a1d31eece81f9cdf9231f0b4e724bd38ad08065f5bdce8405ecb34c1cf25909922f133162d5fcdc1d978ca17998db6e662374c35d0b9489d0e649a17b4e6ce245319541f352dfdf0aad50288c6202f06cbeedc8c113fee8c2a5c4a1192095d20a18ea36d757c35ab05ca0748646c744489f44c4730f653f37bedd1f553f895fb7d87f291d62f626f2dcd7418f52873753cccfe923eebc0cecbf2d81ce687973a323211c36e056e36ad497bc403c8c5e18c43713e0bd2c274dab82a3d16a2c02a7bfa0fa08c4b3a692354b830f9401ede58da7d88cba059a99294c44d69dd0a41e0c9c61c43989118a717b74263fe2aa7238b1259c34b5f291fc7bc5c41d08fcbd6aa1c401a7eb09bd96fcd02f99016d025bf1fbe209a76857a167d2f6c481a0014f31d7de9bceb12bcda1e8a07cf3e34d2fbadcecb2fbb307851f96f1f77578a75cd5d3a8ae093acbf7cebb181b42d6cc96146afde529d5789de86171e5164d5622461f33816c1aebcce7ed59f2f567aad24759abfcec2b88670118deae9985fdac45f7401403c64382cc7303e943bf8f25928691fbd6904fee14f640960fe83b838b08a79f2728094f51fa5649541ecacf75c99e4cba81074a4fe479d45e767327c419643092ec18d8bfd1dfadd3827810420d013356ed4940c19ba05755b57612f6372723265f23ff91945947eaa92500e6594a966a8afcdb4a9fa0c42f50156e903b4e385c7d5f5762669337736cda146ca8dd758f0bb1c03e564338d75da4c5ead2bddc5ace398dac7f55871d4ab80a510a4f4ffe463ee10680b81cde8b1284b3e59fe3e3d0c9c6ed70e7cef31899d55a364580421f1bcd2320e19cc78cf3fe84e2ebf7b222f898a937d3bcb9a01ed6873cdd020672069e1903dfb3fc8797bd04aa2fa8d90ac214097bb0ba1cffa97270a302d49dd4ad8c2448c270cc89f1256686d971dbe03d9f16a05843877ca7294b4d1ba687eacecef06b1aeb1b5f37b4064d2161a66bdda8bed52b4118a615b7ec3828c96fcaabf6f81410690c8b5af839606ff75948ca218251ee278fa98145fc1a25e430131e508160fdd3ba8dcd471c1d3aa17ad45f93988bdc2c2247154c8270f97a60a928e1fa34d1bf391b2c7a0e746c911c2140fd434deb4425bcea4b9e778cc376f4f786d1831c252c3b56556c1543d96088b7b9562cc09bc751c4c3a9501954d575cd458cb28eefcab0833a9a5bdd308900b6179e53b9e20acae8e4f966ec935f09c3606aa0fb545dbbef4f97bb06f1b3323fa887ba7fd3964ab7529af05c2b5be08fe2abfb722632c35b7e4518520c0f69cc7b473d640446981f0590646b0246537e250187866e91dd9eee487ecf88c073b6b5bb495e1053c5327e0eb14a0d8c2fd2dfc09d83c4c616525baf2d4c2c90b34d786afcfd54299cb1ec7ecb5c4687a937de18c3e8fd10cb2c0d4da4b94d0c3a62704bd7a952f1845d4310ba69f522811fae7711603aa3956fd965e6a08c677881e7b2dae1a541b22b6f8710a7c27e66610198e4a540f99bcfe182c59bb3239af3891b2bca06cf523b3daeb6acae645c640259f6f1efecdcbf54fff78975d235cc2fac1fe9015ca4c5efe277d06c3c3bc0f46ee18b913fae90d2b6b7424662999770dfbf27189f15c5415ae70a0437f213462840d65e5fa9ce6a3739d43ffb25a77d5393c9663ecb99b6b48a98942b2b36f09b29da2b913997a3e87c5b1d253eeb285cd5443f0fb0b4262a2681d6fac711d0b99bfd5a97ea8336293d5a23184f43dc5a7158a0c36f88c2ffb202e9013d3f72c02c6cc9dd1ac21872583c3727c5494d7f70076f7ab7f4775b694a4137da08520066c3c5b128386390311c1060ff29de83a25378e0b94d5b118eaf1056126e7afcc344ee309caa65cff707010b4887e452860c34ea7be1cbfba8a9cbc642ea74e918fe84939c99575ae8572683c3effd8e36231337012942c5f972e91efa16c6647ddf231d881fd3634f08ed8e7d3804425a25b14d29f92e4a437bb93b591f69f3fce55454f56a32569dc16b8defac6973e9db9daf236d77bb518eaab4c86b332fe1839417c205331191bb2294e243d543550be4f5791e9009d40fbb27e89f56c8582aa2fbff004ce1301734083a6f998a396e94a44f3d1d278669b604a832efd7cd978a641feecedb51be1252ceb987af2431b362fc20527cde5a828ba6eb4bd506df984d18a53df62af10bb4ee90c39c3a76168be4a74714db3fa93f32dee97c0766198f3314fc895ebb40c3a48ad877fa176d8be18829302b3d8fab42279fa73a841d0016882f6fb4f5b50528b2364c936af008f0e0a912c3de7aa7a272670fee70c6a9a6da8f286685d961a0e2c9a1462221d548f8a6e30b118753ef7fd1e9e79a1f4c1d0a7cf3e5f69e532ee33a94bd03b4a7903319e9034c25c7f1f2056064d9c77a6f776c6f44c660df81f8175318e3df39dcb2e8abe2fef85e55d6b2b6cfe64b92864cd5484c1b7255bf597f16ef71c9b7c0405a33ec354f271c8098d96197cd3d72ba7557fbc564dcac258582a133d656fdd5a35974e6ea3d89be55b08950c2edf9a008cfd8fc7fc177ce47201a46ef49013ecf637701ecd2c6be495f99950e010e1ad1856fff57f9830f395bd4a82a8917f614ae8b47bc7d02164b04e3c4f5884ef9fb816d636554f58fa710aeaafed4f48ee498baf52c900e7b8e9c0f581c19415471db2fd43e7ad181f60a62665180f702ec1dd876dcecd01bdf8ce53552bd7fadc79eeb0c1cd0dad3d157f51c859b2ee906259db0bde03ea3cd539342975140e88d024029cfe9b7ef803b837811c8a3b13d66e22ee55bf6485d94323b006858b01537b3cf8c759659190cdc8034758cb49618c40656cc74284c7bfb44c5bf22f397f8f557c23ed386f382b4fe47f1abea75c6e6a67a2d47e0546605354b985b31e73515977acc805e02aabc6d463c0b8aaadddf94236861cd96a04abc41ee494d20007bac0a27425f4883cd2e3a5d3e2b4257ee2503ff2b73e606f25f0c4978e6d1656d9e9a8b368ac670369626f1a8a176d9dbf0ee0b3f4065adf047f7177a31840f8ac5aa1a20d117c91226e300c188684c1ad9137159bbfdfe707bf68494f38c4ad918398077a892d9a452c13446a8def3dc7bb85ff87a7b0cdc121c9b235d59ba1a53b6e59374ef60bd834a8731eafa51e0bad1715c1ffe6eac4a22b8a332d9a3ebbc90863dbfe9a3b754104960ff9421493b227cf4684201a7fccd517f09a87b0e625985afafbd0a7eb0eb55f23cdc9a441a1fb430d9e6585c7b79b669185aba8d4785fc255e336c4ae56e284a44dcc9330df5d0a33215d2910800cc88e0d3f6f851e9e2c1e0e486111474022fa4810c35cad326a7da38aa1b9b6bad17b3823e1d5201af24b0f6883ac8b50a1f1b3f464b57db244a8c3b4fc0f9842091b1704fd65bb266d9876180f3df90f8564995fc10769870d96930b15e2027f11b920ed84b71d297809216d1a69a050d7ba8a2189295953c97c2ad769e99db0f2e422a4c5741d0adef9f8b29b7dae7112908f513b047e3c4612210ffb9da9d8cdba3c62a251e34a2f2522960d5feca19bb8f50b11ac8a860a21d4cced90a1190f7289d7f2d660bfd50c6c0381d2c97fb3b852e452ccb4397287d02504c16022c3d803e1dc41304d7a3b1156ad06d441c67a67e3de873a27b4483f366a74a4ec7d8607b9099c0828b29bc3ff152c57d8d801ff897fc4e1d5e0b0e5be0cad6d396f5c69d7664f709a7ac9b5deca9628c16978d7a68e49880498f7817fcbd8661113b065154ddc6245c834d36f8bd07358fab3b8e4fe4f9c313336f27ac3c34ceda466d4911a81a9ddacf22edfedf997e661d5deafcfe4e71fe0a67990831b3e47df44d0e0fb62d21ccc75d32e40dc48b84b0a51c053c464c10ed544c7c70aef26143ae1780d95a61049678ec23259cda5e1544efe003398f8e5df0509adccb825f0d47da29c954491f0934f6f0219b3e5839d51c79fa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094404999e3b1d70c18ddc0d4979e341738d11fd8958560f6a11fc1b5f225e74f414a69f978fae03b2d26aabab894afc66c81c4cbbc3d76f46cbde6ee1f17fc97299a07fa56d4cc0ec818da90b62cc5d3d161e19183ac3a8093f4b9682218f52ef24794a5a8c3e561e12caeab5518d08561d296c78f981fc7f317f539c0b036fd7fc7837edc7c4145b507cc089a4b46951aa09c074e00fe95af00efd3d1e6bd039933935a6791526b5902adf3dd91e51c3521f5f261eeac25974fd5405b01a748aad9aa27f671cb3a6ec72a4b444d8ef5f1231d3a52d6d1102074c2f634e1d9fe08af5f6d00000000000000000000002174bacb93b4a304f58a77324bf1c34ea8f1907da812fa1d17969a72237ad7dd62f73e0d3778b21f01f4bf7f0be0779ff26432a2d99cfd87fb00b5cc488bd863ecaf2bd7b98d3cb4a4db12851b5282c66fc6d33eeefc49101864f092e26a4611ef25f5955a4feb95fec426ac3f809cac2f307a52e5d8289c298dac2ff3870cd1a86945e45ec084ce8a718d7d4c55dd69162fd6bd2ce7934ff8c00f93472cc31c3de776e524eee112f4756a2661de22940880a0ce498e0ec6fcad5a32f7f909ea8871208beed5b88ffb6afb12209058c470d9ec2501e094bffb117429f4ea5342944c9a5d5bc609e4c2b4ac53dc1f1b89c3d4db77b97cf3aa195fcd4b16bf159be02c583e159ab85a15805b12b6695eba07db8109f080663969938f9fdace814cf1813e8be6413d3374d039bfc6bd6631cd9b956903b9ddbf42df192752c8bcb87bc1e2d1f4781c9bf3248261f5dde795f0db32590f50ef15da4073e7c30f08aa8515fb1427d0edfc8fc6faa31731c7ba7bf650f10a57b3b74c948ec1e61629a9753320064f47e34540dfbaf48d967325825a522c41b57891a47ae37e77711186aa8a3aafac2988763c591afe25fd"], 0x1558) tkill(r1, 0x1000000000016) 13:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0x36b, 0xfffffffffffffffb) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/233, 0xe9, 0x1f, 0x7, 0xff, 0xffffffffffffff76, 0x3}, 0x120) 13:55:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x1000000, 0x0, 0x0}) 13:55:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000053, 0x0) 13:55:00 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:00 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 911.904388][T20376] binder: 20370:20376 ioctl c018620b 0 returned -14 [ 911.968949][T20426] binder: 20370:20426 ioctl c0306201 200002c0 returned -14 13:55:00 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x4) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x100, 0x5880}]}, 0xc, 0x3) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:55:00 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x20, 0x800, @l2={'ib', 0x3a, 'bcsh0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 13:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='n\x05\xfe\xd8\xc8C\xa1\xbd\xd7') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000054, 0x0) 13:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) 13:55:01 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x100000000, 0x200000, 0x2, 0x6, 0x0, 0x80000001, 0x8, 0x1, 0xfff, 0x7, 0x0, 0x4, 0x8, 0x0, 0x81, 0x100, 0x4, 0x1f, 0x2, 0x6, 0x4e0fa916, 0x34ed, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2c, 0x9, 0x8001, 0x0, 0x8, 0x9, 0x4, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, @perf_config_ext={0x5d82039, 0x6}, 0x4, 0x7, 0x0, 0x6, 0x3, 0xd804, 0x8001}, r1, 0x0, r0, 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 912.689449][T20426] binder_alloc: binder_alloc_mmap_handler: 20370 20001000-20004000 already mapped failed -16 [ 912.721128][T20426] binder: 20370:20426 ioctl c018620b 0 returned -14 [ 912.765930][T20695] binder: BINDER_SET_CONTEXT_MGR already set [ 912.766251][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 912.793295][T20695] binder: 20370:20695 ioctl 40046207 0 returned -16 [ 912.800021][T20698] binder_alloc: 20370: binder_alloc_buf, no vma [ 912.819729][T20426] binder: 20370:20426 BC_INCREFS_DONE u0000000000000000 no match [ 912.821210][ T12] binder: release 20370:20426 transaction 594 out, still active [ 912.868533][T20698] binder: 20370:20698 transaction failed 29189/-3, size 24-8 line 3147 [ 912.880687][ T12] binder: send failed reply for transaction 594, target dead [ 912.922976][T20426] binder: 20370:20426 ioctl c0306201 200002c0 returned -14 13:55:01 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000180)={0x20000000003, 0x0, 0x6, 0x5, '\x00', 0x4000000000000003}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000080)={0x0, 0xc, 0x2, @tid=r1}, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x10001, 0x8, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) [ 913.045634][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0xfdfdffff, 0x0, 0x0}) [ 913.230561][T20831] binder: 20822:20831 ioctl c018620b 0 returned -14 13:55:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000055, 0x0) 13:55:01 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x1, r0, 0xfffffffffffeffff) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)='/dev/dsp#\x00', 0xa, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x20) connect$bt_sco(r2, &(0x7f00000001c0)={0x1f, {0x401, 0x800, 0x4, 0x0, 0x6, 0x2}}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 913.338918][T20910] binder: 20822:20910 ioctl c0306201 200002c0 returned -14 13:55:02 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 914.017628][T20910] binder_alloc: binder_alloc_mmap_handler: 20822 20001000-20004000 already mapped failed -16 [ 914.039998][T20910] binder: 20822:20910 ioctl c018620b 0 returned -14 [ 914.071602][T21021] binder: BINDER_SET_CONTEXT_MGR already set [ 914.089235][T21021] binder: 20822:21021 ioctl 40046207 0 returned -16 [ 914.089360][T21022] binder_alloc: 20822: binder_alloc_buf, no vma [ 914.108965][T21022] binder: 20822:21022 transaction failed 29189/-3, size 24-8 line 3147 [ 914.128818][T20910] binder: 20822:20910 BC_INCREFS_DONE u0000000000000000 no match [ 914.136760][ T2988] binder: release 20822:20910 transaction 599 out, still active [ 914.151196][T20910] binder: 20822:20910 ioctl c0306201 200002c0 returned -14 [ 914.169051][ T2988] binder: send failed reply for transaction 599, target dead [ 914.477324][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:03 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:03 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000040)={{r3, r4+10000000}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7f, 0x4) 13:55:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000056, 0x0) 13:55:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0xfffffdfd, 0x0, 0x0}) 13:55:03 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x200000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 915.256394][T21033] binder: 21025:21033 ioctl c018620b 0 returned -14 [ 915.333293][T21038] binder: 21025:21038 ioctl c0306201 200002c0 returned -14 13:55:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000057, 0x0) 13:55:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x800) [ 915.964119][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 915.982759][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 916.027055][T21049] binder_alloc: binder_alloc_mmap_handler: 21025 20001000-20004000 already mapped failed -16 [ 916.066934][T21038] binder: 21025:21038 ioctl c018620b 0 returned -14 [ 916.067358][T21049] binder: BINDER_SET_CONTEXT_MGR already set [ 916.123210][T21049] binder: 21025:21049 ioctl 40046207 0 returned -16 [ 916.125258][ T2988] binder: release 21025:21038 transaction 604 out, still active [ 916.153708][T21051] binder_alloc: 21025: binder_alloc_buf, no vma [ 916.158820][ T2988] binder: send failed reply for transaction 604, target dead [ 916.209384][T21051] binder: 21025:21051 transaction failed 29189/-3, size 24-8 line 3147 13:55:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000058, 0x0) 13:55:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x100000000000000, 0x0, 0x0}) [ 916.429091][T21060] binder: 21059:21060 ioctl c018620b 0 returned -14 13:55:04 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x200000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 916.570158][T21061] binder: 21059:21061 BC_INCREFS_DONE node 610 has no pending increfs request [ 916.587701][T21061] binder: 21059:21061 ioctl c0306201 200002c0 returned -14 13:55:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x1ff, 0xd9eb, 0x5, 0x8f00, 0x0, 0x401, 0x30200, 0x8, 0x7, 0xec9, 0x3, 0x3, 0x6, 0x81, 0x5, 0x9, 0x7c7, 0x3, 0x5, 0xde3, 0x938, 0x5, 0x548, 0xf6c, 0x8, 0x1, 0x8823, 0x4, 0x0, 0x100, 0x1, 0x3, 0x6, 0x9, 0x390, 0x401, 0x0, 0x3, 0x2, @perf_config_ext={0x400, 0x5}, 0x4010, 0x98, 0x7, 0x8, 0x1, 0x5, 0xfffffffffffffffc}, r1, 0xf, r0, 0x2) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = dup(r0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xc3, 0x4, @buffer={0x0, 0xd9, &(0x7f00000000c0)=""/217}, &(0x7f00000001c0)="3f8a43feb208a1d40d3c35478c37215440b5d90e950217b3de09be90d0c188d1fe5772126013df8b044a605fb5955d1345da427b38f193032eb284440b8a4cc6a96b5a35e024847ba28c40cad836e2305d3e91fdd8ec0bf49ad2c4afaa1be79fbf9ba76afd53f9197f72796fd1424f45169a2155c10e4602051290f9fc6788f6e1f6a75066ee54a6f9714e00226f04a19a75a59f4cd7e9c933de4bbf7e37f8d48c61e0fab8991a522161478ffd86f7b1018d6aff8ff63d17db2eff6be4c0885be3f699", &(0x7f00000002c0)=""/230, 0x4, 0x20, 0x0, &(0x7f0000000040)}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 917.047376][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:05 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 917.223796][T21061] binder_alloc: binder_alloc_mmap_handler: 21059 20001000-20004000 already mapped failed -16 [ 917.255208][T21061] binder: 21059:21061 ioctl c018620b 0 returned -14 [ 917.267256][T21080] binder: BINDER_SET_CONTEXT_MGR already set [ 917.285213][T21080] binder: 21059:21080 ioctl 40046207 0 returned -16 [ 917.288115][T21081] binder_alloc: 21059: binder_alloc_buf, no vma [ 917.314147][ T12] binder: send failed reply for transaction 609 to 21059:21060 [ 917.325453][ T12] binder: undelivered TRANSACTION_COMPLETE [ 917.338578][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 917.340615][T21081] binder: 21059:21081 transaction failed 29189/-3, size 24-8 line 3147 [ 917.494794][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:06 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x800) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3) 13:55:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000059, 0x0) 13:55:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0xfdfdffff00000000, 0x0, 0x0}) 13:55:06 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 918.304729][T21094] binder: 21087:21094 ioctl c018620b 0 returned -14 [ 918.391090][T21181] binder: 21087:21181 ioctl c0306201 200002c0 returned -14 13:55:06 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/222, 0xde}], 0x1, 0x0, 0x0, 0x40}, 0x240000c0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x6, &(0x7f0000000540)=[{&(0x7f00000002c0)="171874df91c6603cf155ea517db5cc471b710f1e0628782b96de94cfeb55ca6e4bf9efbb005fd90d", 0x28, 0x2}, {&(0x7f0000000300)="f3d5ca0b5cb2097dd18c33467d449861835328ac5125b042ca484165993c2735210891329cf379ba2270a118a74b20aebe27f82c797ae7d6eebbea3193933bd2d4c4074591393409a50613ff6d15509984d721737e76ea84cc866be253ab6645867be5c0bc070af97fbfafb127d50379f0c2088aebec61812a8094ba3529c1e3660f51a22c87279e59b2675337686bafa95fb0bd874d7bec252e2a75df0932766d36ffaf775fd87d72e3ee65a97d149b721bfbd902c4a3571bda3dba42a55eb34304c0f15bac3e692a66f4619f02dcbd4f9b2e623d11b4276a6ec3f6a754787fe1fe268e35759e", 0xe7, 0x800}, {&(0x7f0000000400)="132000711c79bfdbcf93f2514bbcdbb3e9e14c4b614f4a64ed409551a45c9a91e3d4eb9109e510a3c210d75ece3094c4010608cfc5beefe5841efbf092ae7cc843dbb7141eaf07a74fdd2ca4eda05845c5259267dabdc49ba4", 0x59, 0x9}, {&(0x7f0000000680)="22f240255fc0c300092094b2918bca328edd8c02c9828fa87b646093c2495fb0383c1f4d65664b2624114757cab72e9e73959e2709783982b328df44de6e5b12755cc06737a7837f43a16ba9721bfcd8f28ccd26160488dd62ad17e4fbf436e5f79886c67d01563a81f939040f109281450696e476f78a41c6b5f07a8b51fa4158e9687567d4f4872926dd292a108b5ead522c9213c5c72655c497bf803b6e64c732c181f758d11e6acda7af0bda9525b599fa808835a4862bb577d19911775cfc260f9052a2840c404c6cbba46e52939ad9dabc79d6411e7b4a3e6b92a5ecbddb1a7be7618c1f2cd6d9094d6d477ac4e3b5ead61b4728333d2d71fb8f426bc691bf154e683a97d154893d1f7413f8aa5cedfe9dd8683e948c3d6711f62aec4e86b789dd2879c55af1bdc9fad0e97e80b9ca6fbb40df206e97c52aefa2eb66ecc56bc118a1f14f273d9d5972d71a4030d77da251a06bb1298557a0d9bfc3b580b014ff4c9d00885564ce906a90623abc60dd5943ce88fad6f930aa60d9128983434e9181d1d879b5c25b6f26a44d346050a98c95fd8f734d399179159195c035bd5e10b4e08eb1ec55803976c8b2b1dc9bc7e239e0cfd643015932512d1f760841b072fd452b8dbf60686fba76f8c4ba60bc186b3d910baf7234ad0cbe802ba12fc93b18ce2dfeac8c3f41e6c00a24cdbb02a8b05d001e185e5a10e6d53da08ee5e426074fda22f8c7307fbdb86bf655a8dd0a779db29e8412e9dae17b0ea5db7e477e0782e80b00a5649c35428beeee548e874f9b175f4979ecad5ca94db2c25b70de8e6b47866f4bc36a1790fb312c1258d39cd6668cf3127f4b36838ea0622217a20212646bba49190932648af5445e3c16c9ce2da903bac46252b3ef1373f9802abfa91aae1fe74187751807b0fd18e2759bfa0a5a2cdda29f4e94005faabd1011c33d810eb6efa43bec308d6db2c18b8426b8686b14996c65356bff98a974218e603a370a573d3b5d4161c0a1bc0ed795e9f4cf6d537451e3fb0b70391ca4c9327f3f321834d5505ed81c49ded9f35c5c4fdd9554537124fec1212f6fec007d83a0092e1e89e5050a1cc16b625627df65ae3df3614dad3e0119ce2fc7f27bb86e5d1921beded17fa57e4fcda23fb45904f7dec406874be3d02eda2f49ca09cf75e8dbba433523823a1ba4241195774647f9d5937ac39dbdbffa5afbc2c2eb27a63bd66d38e17c4f9ebf497b39fd5020b47b6a51f9f8f8b02b005c51d87cfbe7193e4294879ac184bf323c3270cc3d693c6a9eca8845e512312a607ef47669dafa178c493298ca36157768d43036276062b12eeeaa930d8f7dfaafe60e1dc6c1d8222640bed0e22ad6f598a6bcf986cd645ce8340d0488e79c3754eb43e40aa05966c26d8530afe477874840d189c6305f300eb27f52c54f65f06ddc7e9c3704103cdd8f81a9d3aa9ac774d30b0ab4e3b6646fdf7220e31857383c3873a3079adcaadacab3c1b61cf8771192ea28af9323acee24d131137f8b64ff7b6fd209f071d224dc7093c68dca9039fffc05cdb180d3e8fad3a2903468105845b3f67a9d4d96d4f78c41f31d7a776551516aa0f69f43ed74f24aca57311aceef56b844ce28376376519e5c94e66d8c4b3f2d0a8337b555a1dd00876fe0687feef5cc3d1cf7a7b22439d3094f29c12691ab07ce3c76d07d183d4418156d98060937524eca62751699a9f4ac17c2e285a52a6c5add8aa74fd0447894447c8ae5ab19b57ab08c0e779653f545105db53f05e85cc7803b54711c9a62d24f330b87a7ea8e9ad7f39cb11c696ef7003c967edb8f4028bc2ac9a549a31b1638e006c60d7c7f2c4243f09b7a37af5c405ab8f8ddf4827b9c84d17a471e2813991804e74aae8ef1e11362de0759a7827157a7adde54632e653f4f687930e1b7c54eecbfa8ecfd82515189020784b9a79a502a7cbb9bdbd6df4c8a8a35453980f43648a72d43cc220e53b865ac53c4c970d681e8702e0b1149c507fb6afe9d822cc2c19cd51648fc806b127099d70083c28a858d91846c128415cd3b2de8d791c84984bde853962f75774d3eb6f9ba94b6d4b7143f0687730345cdc60f91a2a4d8171e335e212654741bcd3bd66a05fc5477b8bd5577571fb61b2bd8ffdc3807773bbd34347c5237c297c79ea3b46499e8c69be0b8de12eefd89218b5baf77fe75fbec7c8cf9560100de510963198645ed2e78ac8207034d919f2c25a97ec097f978aea43bc2fe23d503463eff77cd0d8a216044b8d474be501122155e591ff6e761c5842c7a8c673fa21ddee922048c528dc3bfcab3a0e138b5c169742867d1fed28c62ef5fa375b28926553ef7fc56796c47da9155f26045ba42dd36de674354d4d5fc574238fb821ceae36cfec52a4cbcfbc099dae3fa7d53540d433b6734ecd2e3ca4087fe0a5f1beac5c76edcf50b40afd50e52f48cceb865c23100c412c6d1a2a66af84b569c3aa94417aeee368b45a46a738b2ca98b29716f18d7f274ddbdf7a7b221b573175dcd5012d3e5883138614fdf3b4b8eae9315e0dce8cd790781cda5180b2cdd51729fbb354f5c8ec0578191a7f953338ca82d214edcaecbc2781323c53881b3da9f16c2799fc3d0f5aeb7b48d98897e5e2a7462d9614a1c4096a9082f476f4cb2edc23e7ecd5120327edfa0136ca348910847668205393c6d5854d13c4adfe32529513ba02485a82cb7ca6a5672db40fa83036d73670a956e7d5392892047d374a8994937dd60d89bfc82b351ba719e3bd28463144eb58b78387ca4ad975c344b06565c91fce30285164e9f661c5ddd56eaa6200a01efd02b53e8dc19db7502e0871e1215f5ca35e847ba13d57609951ca3361442b5301af94ce27980bb88ad159e990a46195ab4ff634a882b1f333a89e498fa38ea64aed1b6f649a3756bc005fbd1ccda967c834ebe950daca07e2f231e38af4dd7f434a6df8adfb3cd4dc74e59e3048c54d802427b35699b1d5837ce0678169fb2a73a0bb2e2eb30dfcf4b1626c818173dfb33e3dc7661e642366cd5d4791eeef6cbc61c1efa6c99696ea427e311ab80084b266be505d7d83f987183514ffbb960bc7e20db5c062c5595b04440c202e5417494b6cec20c67fddf98e596bdf7a356d4483a6081ae2edd22b04058b06e8618db08183cf847574d7895ea0d6fca85f9cee2d412793efe0a9110667c40e4170657683d732e7a320c3cbabd226454f07d391f0abe4312560d728cb10686a21207df7dd7f40d7c5463b6050069abdc46ae4e4687e32e8b0f292a935573a9606915df70ee808b049b970239796bbd03cc9fa84255f0640005f8f61a6acd62505e3b0d807a4b49fd6adf77d8f1bfc8fcdb7ec9b6bf3922e88b51906f959b568ae9843bd8736d02c1277b6d7ddf2c06a400e4b702b4b1818e6c122087df758fae6e4b858c1e9db0a165ec9dfa4c540460872ed40e9e7f09ca1059f373109a14c99a7d31b22cd78fe99eb6d4f4dab8a39b64305eb42a5fd6f254d64a9185a7d53cc4f57707c61a00941bd226b3b888bf3374bf5448616c0d359237319dbf3b4810ef0aa1fa9a9f7cd0b1d94a8c936aeab34b229cc5e69005b79a79e0b063566c9c325156d41b8c7294ccc7acad5e366a9af1c89258b65399ba13b098020b57c63dd92ab0d35dd68294a76d06817efc93b46158e50bc4d75da5e0119ae2c0977dd3f896d4918a10043a760e8d12bda0e1a5058e5506cc5dc4c9b9f28c8c778aca0f153633c8190ac14d08bf8b1a532d968f754e320c8f69b6a537923b7378b0f8e13b7d6805c04abe2e2fea4244a61824dd8562802c6ba87c636fb2b4eb542f5891b460311789d4e8a5e86891c27989b0b37b41b83d640fc3bfc86e02ea1aa3d1bbd95f634191a1c0bd358a431f65ffc6c3328fbb9325c0869afe89764d96ca343f3bbfe6c02e6643e5752ba9b4ee0e360271ac88c1d5f6a6a825468a8ecc566dd0f4c0b75394a89d6db57911c546204e10f3069990359c3ba172ef77ed060fa5f0b2ccd0ab94ae9bf1088c46820f7b214b37a70c85e5d615819e397d6dfebee0abbbb8c1227ef2518fb11ccc580525ec6d5031b5df4fcd225a48e89b3f194443f3ace50c2cfbdad9182d70f78df6236711bd637cbaac4796d1763252e18dfd8effa454be218d1a6e523d39ccb4de35b3c580e4c0bef6254ac3262505ac110869831893e2fa77b4a6e743e78ba5ab1d2b34107d17f150abbc74f678d8265dcf149a37b61a2caa67d1eb3a36ebe1172148d1a0906118f212302dd055122294f5ad340fb81cda31d662ec879b84c3a19b2abc6e10cd853f3731543f689eba4f02d7d180a35eb59965df455ff93a654770f2d1015374e1b26b9bf243ff0b976d1c5d12056a0d60ab3631567398a23076c64219b007153118a1e42d29392a05be588c1155d8a2a62561a7c65ae9c511d8e8722ccd577ea7b384aaeb0891cd2faf72c11ebfa605d16bc262ef22f496f97683df34bb3f3dc2809595edc9c57203e4bc60403b6e37da912edc3d3e7db3d1dd21b1ef588a5f82f8eac04e63d71c8d4c5b09ac5c55754acefa5fc1d2b438c34df2ae6f116e9aaf573b7e60d9d0730230752c416a434630fb12f9c53382932c54f45f89e86ac3a995600c087e76a963921002834f09962262b1415f18129ab83ab9d233978fe48782ad39d29e3b87d8f3fa2ddf1c9f27575928dc19bcd02a1743ffb6531238e0c3c55d25a8b361e45509182bcb31659405837328d07c861f709633df90a2c1fd332132d02fdfeae539faaa067ed997c843975c875959d2ee1814f55bfdbede9a789dcb0acc0de577926745b967ec84aa135051f160651a571450fd82b42558373a6ea663d5de99e19d091b7492018cebd1711c869d791047827e060898e847f41cb1a6af7b77bceab28fbecd6ca819adde754a7a716b2f2f22b338c959dd1134c518f055a7a96ef3510790e65b541e9b968a3154abd0d15e6a259786eaa5e7fef27891e470f885632129e2f303dea68c51c404b349424b2b879946d582670fc78d47ac7567851dbfabc1a33cebc77a8a5b3c29957db92ae132f51f2e3d5d33907802169cd39295f788e75799ed0a2d648a2b964960de9e42fc7651eacb5c937d8718b3a0f8268fa8b4654468ee48be9b2f09831e57cb63ad87d52566748ea71c077ac9b0c7c1f78c3e1becc6dba01d9433de7d106ac6484bbf025917bbba61665d7feb44346070b2c430ad0f881f33b8e270a0fdd66d81ca57634b34259a16be0373554aafd7a31506da0a185e708bee197e586c0a643dcdc29a02ea9ac327c061621f368303385edf94755788ffe3e39f877ae0779b406869d5e7c4a19a91e01c2b1f1e1e7043d4422786d8c258dcc18f2155cf23edac574142dad24b8e3e29853c845316215fd877e2a2f231d7dd599688a76d481bbde00c9e6f124e59622ae297ba8a6e4d2d2d11a822609981a4648c8bfcdccf5525c14b7c47e18258ced6faeb379fc7d68702d50d78d43ad4f3b5e0395913b90bc047e36e3878ff7e2c461edc4356bd93533ca18203048313b5fe763057e26c97ec0fcf3dd23fd81381e15a910325c4cbab9d54d82e2548204f67e9d1a7bcc1bb7fe149f80f3eb24a1d67d91541d0dcc153bac40269c90ebc6259565ffbaea381c6bc2afb3608d73c0a048be589257af0dccf34085469d71e6e3b10b2547f9b9e5a4cafdc172a7ce1371e5246ea4fbe117ddd71854979c52e86635238b2bc982fb8c553492f1ec1094df97335d1d047dfd85e", 0x1000, 0x6}, {&(0x7f0000001680)="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", 0x1000, 0x100000001}, {&(0x7f0000000480)="663980356599b4dd5c59ac68a91f20b3311ec9c2be9a4d58552c79707bd3150f6dc21506a259825959254da605ea16bb9ffa383e9d679f792edb68ec35a3da457f928b2793e3834167b7311cdfe296106b8efa0c1a561faf3d82bfe493fe55e293a31f16dcea40579c94be8b4ca5e664bdf762d44a4edd4b0fb5d0bf07075c92d1718a6bef99f745633a99399ee7a39b2dbf383cbf21171321834961bbadfae0d2d6c710a994bb8adc15", 0xaa, 0x3}], 0x8, &(0x7f0000000600)={[{@type={'type', 0x3d, "c081f682"}}]}) fanotify_mark(r0, 0x8, 0x1000, r0, &(0x7f0000002680)='./file0\x00') [ 918.652866][T21197] hfsplus: unable to find HFS+ superblock 13:55:07 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x40}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:55:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="859efaac2a7b7fd53c0e1a5f7ee9c1717daf5091679937d0e6a41a19e3686f642a2a79a7bbdf006fc9d8f9d6823bfe6d212ff5ad3e49df46ff36bba6a09a8b94edd45abd87fb983369ff9176ba75e4f46f1267fc0f728900549f97ed1edffc313d29649d76920f7a78628724b7ab4f2c80b35c342a82246c6ba7d53426e175fa215c7dc6ce8d0b410945f643fe4dbe531dc649b5d4384e14b69f44a51b", 0x9d, r0}, 0x68) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0xfffffffffffffffe, 0x0) write$P9_RREAD(r1, &(0x7f0000000280)={0xc4, 0x75, 0x2, {0xb9, "cfb199fa9c7d16b62578a47b6ec1534a745d9c244d78af6b1b3d2dd0fece9c955974576f671b98f0231423f00dd2da5dca5b6f3a81fca18f34401a86d892bd27a00aa8fa217786f82ac80027f01a16a6293a8351e4fe42e9c5212a21c85e59e5b002050ff7c69605593f5384fd31def2d07d47e25146309bee7761ec3d4e9dc581c755609969305a68d5d2c12c329d9dcf0ee961bef8ce0fe1226c10dd4390bc1e6406a59737478860375448f9f9388e3c651b6c472fb77029"}}, 0xc4) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) 13:55:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x2) [ 919.076576][T21181] binder_alloc: binder_alloc_mmap_handler: 21087 20001000-20004000 already mapped failed -16 [ 919.117468][T21181] binder: 21087:21181 ioctl c018620b 0 returned -14 [ 919.169462][T21370] binder: BINDER_SET_CONTEXT_MGR already set 13:55:07 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10042, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0xfff, &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 919.248447][T21370] binder: 21087:21370 ioctl 40046207 0 returned -16 [ 919.248958][T21412] binder_alloc: 21087: binder_alloc_buf, no vma [ 919.262090][ T12] binder: send failed reply for transaction 614 to 21087:21181 [ 919.274578][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 919.321857][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 919.333617][T21412] binder: 21087:21412 transaction failed 29189/-3, size 24-8 line 3147 13:55:08 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x3) 13:55:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x3, 0x1000000000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x7f, @remote, 0x4e24, 0x4, 'lc\x00', 0x10, 0x8, 0x76}, {@broadcast, 0x4e20, 0x0, 0x3c, 0x7, 0x61400}}, 0x44) preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x0, 0x2fe}) 13:55:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x1000000, 0x0}) 13:55:08 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) tkill(r1, 0x1000000000016) 13:55:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="859efaac2a7b7fd53c0e1a5f7ee9c1717daf5091679937d0e6a41a19e3686f642a2a79a7bbdf006fc9d8f9d6823bfe6d212ff5ad3e49df46ff36bba6a09a8b94edd45abd87fb983369ff9176ba75e4f46f1267fc0f728900549f97ed1edffc313d29649d76920f7a78628724b7ab4f2c80b35c342a82246c6ba7d53426e175fa215c7dc6ce8d0b410945f643fe4dbe531dc649b5d4384e14b69f44a51b", 0x9d, r0}, 0x68) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0xfffffffffffffffe, 0x0) write$P9_RREAD(r1, &(0x7f0000000280)={0xc4, 0x75, 0x2, {0xb9, "cfb199fa9c7d16b62578a47b6ec1534a745d9c244d78af6b1b3d2dd0fece9c955974576f671b98f0231423f00dd2da5dca5b6f3a81fca18f34401a86d892bd27a00aa8fa217786f82ac80027f01a16a6293a8351e4fe42e9c5212a21c85e59e5b002050ff7c69605593f5384fd31def2d07d47e25146309bee7761ec3d4e9dc581c755609969305a68d5d2c12c329d9dcf0ee961bef8ce0fe1226c10dd4390bc1e6406a59737478860375448f9f9388e3c651b6c472fb77029"}}, 0xc4) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) [ 920.558846][T21531] binder: 21523:21531 ioctl c018620b 0 returned -14 13:55:08 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9, 0x2, 0x5}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) dup(r0) tkill(r1, 0x1000000000016) 13:55:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x27, 0x8, 0x1, 0x3, 0x4, 0x9, "28aa3c4303d7d561ab25d7ca63c3725bc0b2f3116a98c8e214a454cc30fe92c89dc8b6a5f72f95f02a967f2c513bdefe23fb4b7a0e99977bb3ad28dfd4dae5", 0x24}, 0x60, &(0x7f0000000440)=[{&(0x7f00000000c0)="61fcaf225a18d8e22a9702d00cdb76e772958723814ec3ee542a75668bfc5bdf4ad716527bbff2fc4c6888c71f2fb466a3e4659ecd49aee0c782786e24261fea11e0eac5b539", 0x46}, {&(0x7f0000000140)="fcc466734c780f83416f0c6ac274fbfb221fe6aa96783dbf98cda6e4dfeeaf4fc835b1af5e3af949d0b2404f779d8ea2cc72bc72cecad0a8feb9308e455ce95703", 0x41}, {&(0x7f00000001c0)="121424d1052c26ce25d53338", 0xc}, {&(0x7f0000000200)="f201a96762b398d4f1642664141d83577b7e68541717c1840c3d5b6997da69cd9717d05736125e546917932aaf4c3bc96ddabbea785cc795a1652c3df9d663b1c963", 0x42}, {&(0x7f0000000280)="41097e9c58", 0x5}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000002c0)="b5dddbbb093d13411628cdf9b1b67b670f4f9488e6c27d0d24e6bce8617881b1b16290b52bf02ec89bad36783134d20c78c52b9786e8d2dbdb69a1e1f2726cb82955891d2a74ffd65912e0e1e4f6da8d69f7f61426c7d6e47cd9d553faba0a02bdffb0b4cb4ff2615611bd50ce2c08fe2121b03a7e1c5fa026a515d0fd450c1e7f5ebfe2bddb87c621fd526bc04b9b378fa2e2faa701871a6f1e3747f9b957ef80393ba6a7c2fa148c1e29e8875c2502c83e81edd59ce091b4595057ccb8018025953006a0b8be0a63e4b66743d3a174fec33950b9c603e45127f060e1f332fe9d1810b75ea815e6f149cae7ee0b981ed7", 0xf1}, {&(0x7f00000003c0)="a09612e9d11bad00b95818f0d22112d5eccfea44aae3634aceccf92f467a5da8ee0a846e0ad8579f1495dc", 0x2b}, {&(0x7f0000000400)="85762be16a89ff9f79fb51f2d1ea68a8430bd18ffc", 0x15}], 0x9, &(0x7f0000000500)={0x58, 0x100, 0x9, "84566de72fcbf56aa7127db04e2e9f0cd70c88f70b6c07ee52a8efeeca91f0ee5b127dd4b5b386be7a619f66d865e70f5598b0e1e3f8e7b2d67ba0ecf47418cdcf670c4044b89b41"}, 0x58, 0x20000040}], 0x1, 0x4000004) 13:55:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4) 13:55:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="859efaac2a7b7fd53c0e1a5f7ee9c1717daf5091679937d0e6a41a19e3686f642a2a79a7bbdf006fc9d8f9d6823bfe6d212ff5ad3e49df46ff36bba6a09a8b94edd45abd87fb983369ff9176ba75e4f46f1267fc0f728900549f97ed1edffc313d29649d76920f7a78628724b7ab4f2c80b35c342a82246c6ba7d53426e175fa215c7dc6ce8d0b410945f643fe4dbe531dc649b5d4384e14b69f44a51b", 0x9d, r0}, 0x68) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0xfffffffffffffffe, 0x0) write$P9_RREAD(r1, &(0x7f0000000280)={0xc4, 0x75, 0x2, {0xb9, "cfb199fa9c7d16b62578a47b6ec1534a745d9c244d78af6b1b3d2dd0fece9c955974576f671b98f0231423f00dd2da5dca5b6f3a81fca18f34401a86d892bd27a00aa8fa217786f82ac80027f01a16a6293a8351e4fe42e9c5212a21c85e59e5b002050ff7c69605593f5384fd31def2d07d47e25146309bee7761ec3d4e9dc581c755609969305a68d5d2c12c329d9dcf0ee961bef8ce0fe1226c10dd4390bc1e6406a59737478860375448f9f9388e3c651b6c472fb77029"}}, 0xc4) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) 13:55:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x5) 13:55:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="859efaac2a7b7fd53c0e1a5f7ee9c1717daf5091679937d0e6a41a19e3686f642a2a79a7bbdf006fc9d8f9d6823bfe6d212ff5ad3e49df46ff36bba6a09a8b94edd45abd87fb983369ff9176ba75e4f46f1267fc0f728900549f97ed1edffc313d29649d76920f7a78628724b7ab4f2c80b35c342a82246c6ba7d53426e175fa215c7dc6ce8d0b410945f643fe4dbe531dc649b5d4384e14b69f44a51b", 0x9d, r0}, 0x68) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0xfffffffffffffffe, 0x0) write$P9_RREAD(r1, &(0x7f0000000280)={0xc4, 0x75, 0x2, {0xb9, "cfb199fa9c7d16b62578a47b6ec1534a745d9c244d78af6b1b3d2dd0fece9c955974576f671b98f0231423f00dd2da5dca5b6f3a81fca18f34401a86d892bd27a00aa8fa217786f82ac80027f01a16a6293a8351e4fe42e9c5212a21c85e59e5b002050ff7c69605593f5384fd31def2d07d47e25146309bee7761ec3d4e9dc581c755609969305a68d5d2c12c329d9dcf0ee961bef8ce0fe1226c10dd4390bc1e6406a59737478860375448f9f9388e3c651b6c472fb77029"}}, 0xc4) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) [ 921.164106][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 921.338460][T21637] binder_alloc: binder_alloc_mmap_handler: 21523 20001000-20004000 already mapped failed -16 [ 921.355358][T21637] binder: 21523:21637 ioctl c018620b 0 returned -14 [ 921.362627][T21760] binder: BINDER_SET_CONTEXT_MGR already set [ 921.375290][T21760] binder: 21523:21760 ioctl 40046207 0 returned -16 [ 921.382119][T21761] binder_alloc: 21523: binder_alloc_buf, no vma [ 921.395635][T21761] binder: 21523:21761 transaction failed 29189/-3, size 24-8 line 3147 [ 921.408354][T21637] binder: 21523:21637 BC_INCREFS_DONE u0000000000000000 no match [ 921.418604][ T2988] binder: release 21523:21637 transaction 619 out, still active [ 921.436924][ T2988] binder: send failed reply for transaction 619, target dead 13:55:11 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:11 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x101000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:55:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6) 13:55:11 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/222, 0xde}], 0x1, 0x0, 0x0, 0x40}, 0x240000c0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x6, &(0x7f0000000540)=[{&(0x7f00000002c0)="171874df91c6603cf155ea517db5cc471b710f1e0628782b96de94cfeb55ca6e4bf9efbb005fd90d", 0x28, 0x2}, {&(0x7f0000000300)="f3d5ca0b5cb2097dd18c33467d449861835328ac5125b042ca484165993c2735210891329cf379ba2270a118a74b20aebe27f82c797ae7d6eebbea3193933bd2d4c4074591393409a50613ff6d15509984d721737e76ea84cc866be253ab6645867be5c0bc070af97fbfafb127d50379f0c2088aebec61812a8094ba3529c1e3660f51a22c87279e59b2675337686bafa95fb0bd874d7bec252e2a75df0932766d36ffaf775fd87d72e3ee65a97d149b721bfbd902c4a3571bda3dba42a55eb34304c0f15bac3e692a66f4619f02dcbd4f9b2e623d11b4276a6ec3f6a754787fe1fe268e35759e", 0xe7, 0x800}, {&(0x7f0000000400)="132000711c79bfdbcf93f2514bbcdbb3e9e14c4b614f4a64ed409551a45c9a91e3d4eb9109e510a3c210d75ece3094c4010608cfc5beefe5841efbf092ae7cc843dbb7141eaf07a74fdd2ca4eda05845c5259267dabdc49ba4", 0x59, 0x9}, {&(0x7f0000000680)="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", 0x1000, 0x6}, {&(0x7f0000001680)="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", 0x1000, 0x100000001}, {&(0x7f0000000480)="663980356599b4dd5c59ac68a91f20b3311ec9c2be9a4d58552c79707bd3150f6dc21506a259825959254da605ea16bb9ffa383e9d679f792edb68ec35a3da457f928b2793e3834167b7311cdfe296106b8efa0c1a561faf3d82bfe493fe55e293a31f16dcea40579c94be8b4ca5e664bdf762d44a4edd4b0fb5d0bf07075c92d1718a6bef99f745633a99399ee7a39b2dbf383cbf21171321834961bbadfae0d2d6c710a994bb8adc15", 0xaa, 0x3}], 0x8, &(0x7f0000000600)={[{@type={'type', 0x3d, "c081f682"}}]}) fanotify_mark(r0, 0x8, 0x1000, r0, &(0x7f0000002680)='./file0\x00') 13:55:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x91a, 0x0, 0x6}, {0xb97, 0x0, 0x1}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffff, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x1, 0x2, [0x5, 0xcb9]}, &(0x7f0000000180)=0xc) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xffffffffffff8001, 0x80, 0x54b0}, 0xc) 13:55:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0xfdfdffff, 0x0}) [ 922.921800][T21771] binder: 21769:21771 ioctl c018620b 0 returned -14 13:55:11 executing program 4: 13:55:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7) [ 923.024365][T21809] binder: 21769:21809 BC_INCREFS_DONE node 625 has no pending increfs request 13:55:11 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x10) open$dir(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x3a1) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20, 0x0, @loopback, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000340)="3e593330f58701b60d73ea27c7414351a7d41eb38f948e6d1d8c86fae79313413af8e558afbdda2faa2e3c74d01aea5605a7d2d1578949fa8a9c91608630f22216fb8929f813bafbbd44e8d21e915060c2faa6a88b77bf1691db27b9e18d2470266b795d714303a0f581f2dff3f39d00fe9f7246fb8a6b72b637fdb1c3b04bbe97665bc4d60dbdbb79149620a7228b91cca842691bdb088e170cc27c80bd2e1c1619ab184852751dac8fd49d8dee92248b3c94fa8bd1b75a4769c4", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = accept$packet(r2, &(0x7f00000001c0), &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8) ioctl$VT_RELDISP(r3, 0x5605) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000240)='\xb25\x17\x00', 0xbfffffffffffffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffd) 13:55:11 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'teql0\x00', {0x2, 0x4e21, @multicast1}}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:55:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xa) 13:55:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x10000, 0x7ff, 0x8]}, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 923.592482][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 923.708960][T21809] binder_alloc: binder_alloc_mmap_handler: 21769 20001000-20004000 already mapped failed -16 [ 923.720087][T21809] binder: 21769:21809 ioctl c018620b 0 returned -14 [ 923.727690][T22102] binder: BINDER_SET_CONTEXT_MGR already set [ 923.733877][T22102] binder: 21769:22102 ioctl 40046207 0 returned -16 [ 923.733958][T22103] binder_alloc: 21769: binder_alloc_buf, no vma [ 923.753260][T22103] binder: 21769:22103 transaction failed 29189/-3, size 24-8 line 3147 [ 923.761796][ T2988] binder: release 21769:21771 transaction 624 out, still active [ 923.764535][T21809] binder: 21769:21809 BC_INCREFS_DONE u0000000000000000 no match [ 923.770304][ T2988] binder: send failed reply for transaction 624, target dead 13:55:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x10) 13:55:13 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 13:55:13 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0x7f, 0x4, 0x3ff, 0x19, 0x40, 0x6, 0x7, 0x7fffffff, 0x0, 0x8d, 0x20}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) 13:55:13 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0xfffffdfd, 0x0}) 13:55:13 executing program 4: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syncfs(r0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 925.452022][T22114] binder: 22113:22114 ioctl c018620b 0 returned -14 13:55:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x48) 13:55:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x423, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10006500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x29, &(0x7f0000000000)={0x4}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x7d, 0x327) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000001c0), &(0x7f0000000180)=0xffffffffffffff6f) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) socketpair(0x18, 0x10000000000000b, 0x7, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_pts(r3, 0x5) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, {0x7, 0x7, 0x3, 0xfffffffffffeffff, 0x2, 0x8004}}, 0xfffffffffffffcef) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000200)) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x46b, 0x200) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x4018920a, 0x40000002000007e) ioctl$EVIOCGBITSW(r8, 0x80404525, &(0x7f00000000c0)=""/64) 13:55:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4c) 13:55:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x4, 0x34, 0x41, &(0x7f00000000c0)="981f7e9478c931a6036cb0cca685547bfc120e150c1b381bafb3d02cae76457a09d16530d11ba1030b7bc7e0499b382194d4e7035f6a55d9e0857642d5fbe1d99a"}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x68) 13:55:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6c) 13:55:14 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') write$cgroup_int(r2, &(0x7f0000000080)=0x1, 0x12) preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 926.173125][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:14 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x70, 0x0) readlinkat(r0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)=""/4096, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) [ 926.229849][T22124] binder_alloc: binder_alloc_mmap_handler: 22113 20001000-20004000 already mapped failed -16 [ 926.260245][T22124] binder: 22113:22124 ioctl c018620b 0 returned -14 [ 926.285563][T22156] binder: BINDER_SET_CONTEXT_MGR already set [ 926.297620][T22158] binder_alloc: 22113: binder_alloc_buf, no vma [ 926.311661][T22156] binder: 22113:22156 ioctl 40046207 0 returned -16 [ 926.341584][ T12] binder: release 22113:22124 transaction 629 out, still active [ 926.343574][T22124] binder: 22113:22124 BC_INCREFS_DONE u0000000000000000 no match [ 926.353440][ T12] binder: send failed reply for transaction 629, target dead [ 926.374940][T22158] binder: 22113:22158 transaction failed 29189/-3, size 24-8 line 3147 13:55:16 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x2) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:55:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x74) 13:55:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x100000000000000, 0x0}) 13:55:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={r1}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:16 executing program 4: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/247, 0xffffff50}], 0x1000000000000070, &(0x7f0000000180)=[{&(0x7f0000000200)=""/231, 0x7887e28e}], 0x23a, 0x0) 13:55:16 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000002, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 928.492378][T22179] binder: 22171:22179 ioctl c018620b 0 returned -14 13:55:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7a) 13:55:16 executing program 5: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x1f, 0x6}) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x6) gettid() readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)={0x7, 0x5}) 13:55:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x300) 13:55:17 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) umount2(0x0, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x1, 0x0) mknod$loop(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 13:55:17 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000200)) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x380000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x409, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 13:55:17 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffcb6, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fstat(r1, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x9) 13:55:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x500) [ 929.125619][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 929.276710][T22516] binder_alloc: binder_alloc_mmap_handler: 22171 20001000-20004000 already mapped failed -16 [ 929.287096][T22255] binder: 22171:22255 ioctl c018620b 0 returned -14 [ 929.295208][T22516] binder: BINDER_SET_CONTEXT_MGR already set [ 929.301221][T22516] binder: 22171:22516 ioctl 40046207 0 returned -16 [ 929.308048][T22517] binder_alloc: 22171: binder_alloc_buf, no vma [ 929.314508][T22517] binder: 22171:22517 transaction failed 29189/-3, size 24-8 line 3147 13:55:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0xfdfdffff00000000, 0x0}) 13:55:17 executing program 4: clone(0x100000203, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) close(r0) execve(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000040)=0x400100000001, 0x3a4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000002c0)) 13:55:17 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'team_slave_0\x00', 0xffff}) r1 = gettid() ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 929.323190][T22255] binder: 22171:22255 BC_INCREFS_DONE u0000000000000000 no match [ 929.326902][ T12] binder: release 22171:22255 transaction 634 out, still active [ 929.357182][ T12] binder: send failed reply for transaction 634, target dead [ 929.414032][T22524] binder: 22523:22524 ioctl c018620b 0 returned -14 13:55:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000003, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/195, 0x11e}, {0xfffffffffffffffd}, {&(0x7f00000001c0)=""/172, 0xfffffffffffffd97}, {&(0x7f0000000440)=""/80}, {&(0x7f0000000280), 0xce}, {&(0x7f00000002c0)=""/110}, {&(0x7f0000000340)=""/75}], 0x100000000000041c, 0x0) 13:55:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x600) 13:55:18 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5f, 0x10000) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x101000) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 13:55:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3, 0x1, 0x80000000, 0xfffffffffffffff9, 0x9a, 0x7}) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00000000c0)={0x0, {{0xa, 0x4e22, 0xff, @local, 0x20}}, {{0xa, 0x4e21, 0x2, @local, 0xfffffffffffff359}}}, 0x108) fcntl$getflags(r0, 0x1) 13:55:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x700) 13:55:18 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 13:55:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xa00) 13:55:18 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc07f, 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 930.207438][T22626] binder_alloc: binder_alloc_mmap_handler: 22523 20001000-20004000 already mapped failed -16 [ 930.242638][T22626] binder: 22523:22626 ioctl c018620b 0 returned -14 [ 930.243521][T22858] binder: BINDER_SET_CONTEXT_MGR already set [ 930.316487][T22626] binder: 22523:22626 BC_INCREFS_DONE u0000000000000000 no match [ 930.317747][T22858] binder: 22523:22858 ioctl 40046207 0 returned -16 [ 930.324389][ T12] binder: send failed reply for transaction 639 to 22523:22626 [ 930.367724][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:55:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x100) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x804, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x459f}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000040)) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) 13:55:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4000) 13:55:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) [ 930.512529][T22956] binder: 22955:22956 ioctl c018620b 0 returned -14 [ 930.569564][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000004, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:19 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback}}, 0x101, 0x7, 0x10000, 0x800}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e20, 0x8, @local, 0x4}}, 0x1c, 0x3, 0x6876, 0xad6, 0x40000000000000}, &(0x7f0000000440)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @rand_addr="6fc5c20b27ccd67e12554abf800599ab", 0x7}, {0xa, 0x4e22, 0x80000001, @ipv4={[], [], @broadcast}, 0x7}, r2, 0x3a}}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80102, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) preadv(r3, &(0x7f00000003c0), 0x0, 0x2) 13:55:19 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\x02@\x94\xb8\x03P\xcaC\x8a\xf9\x16.H\x80\'\xc5\x8d\xab\xf9\x1b@\xd6\xea\xd24\x95\x94\x165\x8f\x18H\xdc\xc9\x98M\xf9\x8d\xcdmp\xf8h\x8fZV\x16\x83\xf1\xa6-c\xcbQ#\'O\xb9\xbb\xe5\xf3P\xf1\x81\xf7\na\v:\xca\xdc\xe9yb\xb9\xc7p\x92\x8b\xe9\xfdEWW\xad\xd50\xd27\x13\xc1\x7fXo\xf3\x92', 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000100000000000000000020000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000eaffffff00000000000000000000000000000000000000000000"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80040009) 13:55:19 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x840, 0x200) 13:55:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4800) 13:55:19 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = inotify_init1(0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1) close(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) 13:55:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x200, 0x101, 0x992, 0x1f, 0x15, 0x1, 0x400, 0x2, 0x9, 0xff, 0x8, 0x10000}) 13:55:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4c00) [ 931.288681][T22978] binder_alloc: binder_alloc_mmap_handler: 22955 20001000-20004000 already mapped failed -16 [ 931.316110][T22978] binder: 22955:22978 ioctl c018620b 0 returned -14 13:55:19 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) splice(r0, &(0x7f0000000180), r0, &(0x7f00000001c0), 0xfad, 0xf) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000007411736732d75954459258b0665879fa24eecaf92165227588743d1e9390b87b0d255a31e5ffc98443baa9f1f112c9d981b63a3f945c6f6750c96eff0715f09301cbb766cee1325ad9808e45efc6dd7b2405cc93750522de67c75e08b07a4e86d14c4f4a9b02f6ba3cdd3b8ad28c348bd0b6a29583ecf2950921c6f9db4191c39dd0bb7928c45ac7d65419bcfcc3263957f045a7c3", @ANYRES16=r2, @ANYBLOB="10002abd7000fedbdf250b0000009c0005002400020008000200ff01000008000400090000000800040008000000080001001c00000008000100756470000c00020008000100100000000800010069620000080001007564700008000100657468003c00020008000200060000000800030009000000080002004cf23f390800030003000000080003004000000008000200000000000800030000000000080001007564700004000200"], 0xb0}, 0x1, 0x0, 0x0, 0x4008004}, 0x881) [ 931.342719][T23103] binder: BINDER_SET_CONTEXT_MGR already set [ 931.360528][T23107] binder: 22955:23107 BC_INCREFS_DONE u0000000000000000 no match [ 931.402459][T23105] binder_alloc: 22955: binder_alloc_buf, no vma [ 931.410182][T23103] binder: 22955:23103 ioctl 40046207 0 returned -16 [ 931.433902][ T12] binder: release 22955:22978 transaction 643 out, still active [ 931.437479][T23105] binder: 22955:23105 transaction failed 29189/-3, size 24-8 line 3147 [ 931.446910][ T12] binder: send failed reply for transaction 643, target dead 13:55:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000002) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:19 executing program 4: 13:55:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6800) [ 931.600013][T23195] binder: 23188:23195 ioctl 40086602 20000000 returned -22 [ 931.659643][T23195] binder: 23188:23195 ioctl c018620b 0 returned -14 [ 931.772576][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:20 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000005, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:20 executing program 4: 13:55:20 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x101081, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x31, 0x2, @tid=r1}, &(0x7f0000000080)) tkill(r1, 0x38) 13:55:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6c00) 13:55:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = gettid() r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/ipx\x00') tkill(r0, 0x27) preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:20 executing program 4: 13:55:20 executing program 5: 13:55:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0x8000, 0x2, 0x8, 0x8, 0x6}, 0x98) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) getpeername$netlink(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 13:55:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7400) [ 932.390046][T23226] binder_alloc: binder_alloc_mmap_handler: 23188 20001000-20004000 already mapped failed -16 [ 932.438568][T23226] binder: 23188:23226 ioctl 40086602 20000000 returned -22 [ 932.438579][T23249] binder: 23188:23249 ioctl c018620b 0 returned -14 [ 932.482611][T23251] binder: BINDER_SET_CONTEXT_MGR already set [ 932.513403][T23251] binder: 23188:23251 ioctl 40046207 0 returned -16 [ 932.539491][T23249] binder: 23188:23249 BC_INCREFS_DONE u0000000000000000 no match [ 932.539515][T23226] binder_alloc: 23188: binder_alloc_buf, no vma [ 932.594347][ T12] binder: release 23188:23226 transaction 648 out, still active [ 932.602741][T23226] binder: 23188:23226 transaction failed 29189/-3, size 24-8 line 3147 [ 932.613186][ T12] binder: send failed reply for transaction 648, target dead 13:55:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:21 executing program 4: 13:55:21 executing program 5: [ 932.815440][T23259] binder: 23256:23259 ioctl c018620b 0 returned -14 [ 932.823331][T23259] binder: 23256:23259 ioctl c0306201 20000140 returned -11 [ 932.836978][T23259] binder: 23256:23259 ioctl c0306201 20000440 returned -11 [ 932.852676][T23259] binder: 23256:23259 BC_INCREFS_DONE node 654 has no pending increfs request [ 932.855235][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 932.882099][T23263] binder_alloc: binder_alloc_mmap_handler: 23256 20001000-20004000 already mapped failed -16 [ 932.892657][T23259] binder: 23256:23259 ioctl c018620b 0 returned -14 [ 932.906930][T23263] binder: BINDER_SET_CONTEXT_MGR already set [ 932.916569][T23263] binder: 23256:23263 ioctl 40046207 0 returned -16 [ 932.929708][T23264] binder_alloc: 23256: binder_alloc_buf, no vma [ 932.936224][T23264] binder: 23256:23264 transaction failed 29189/-3, size 24-8 line 3147 [ 932.950815][T23259] binder: 23256:23259 BC_INCREFS_DONE u0000000000000000 no match [ 932.959987][ T2988] binder: release 23256:23259 transaction 653 out, still active [ 932.975727][ T2988] binder: unexpected work type, 4, not freed [ 932.981876][ T2988] binder: undelivered TRANSACTION_COMPLETE [ 932.992245][ T2988] binder: send failed reply for transaction 653, target dead 13:55:21 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000006, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7a00) 13:55:21 executing program 4: 13:55:21 executing program 5: 13:55:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x20000) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:21 executing program 5: 13:55:21 executing program 4: [ 933.443676][T23277] binder: 23273:23277 ioctl c018620b 0 returned -14 13:55:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xf0ff7f) 13:55:21 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, @link_local}, 0x10) 13:55:21 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000005, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:22 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 934.075768][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 934.163433][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 934.202870][T23282] binder_alloc: binder_alloc_mmap_handler: 23273 20001000-20004000 already mapped failed -16 [ 934.244352][T23282] binder: 23273:23282 ioctl c018620b 0 returned -14 [ 934.287203][T23350] binder: BINDER_SET_CONTEXT_MGR already set [ 934.310688][ T12] binder: release 23273:23282 transaction 658 out, still active [ 934.329059][T23396] binder_alloc: 23273: binder_alloc_buf, no vma [ 934.337805][ T12] binder: send failed reply for transaction 658, target dead [ 934.362562][T23350] binder: 23273:23350 ioctl 40046207 0 returned -16 [ 934.373217][T23396] binder: 23273:23396 transaction failed 29189/-3, size 24-8 line 3147 13:55:23 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000007, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x1000000) 13:55:23 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000005, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r4 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001e40)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000001f40)=0xe8) stat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000002040)=0x0) fstat(r1, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0) r10 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000021c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000022c0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0, 0x0}, &(0x7f0000002340)=0xc) sendmmsg$unix(r3, &(0x7f0000002480)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000480)="19d4e261507c9bfad3667569717b72e9295c1cf0ff569a04872d742e69e81d0641683ac04f6f8e5565067bc187f65c1a9b01c161002aef8a5f4ed135038bc46034ea498d72c9ba4192cc834525291d90e060e9f46dc45853c4726842caba3ec03b84253aa9b6a9917a76ab5e43e7cda144e7023fc8ec1eb4a5ec7615f36c8300e0953cc98d22c83f57b745559a485ad262c86c2d55b3", 0x96}, {&(0x7f00000000c0)="f490b9b91a2a1f5a0100a3cbc44d116832c469e1d654d12179c53257f628", 0x1e}, {&(0x7f0000000540)="7dc42746c61616fc662f37214247fde7467686ada40e0036fc16e8b97e3ded7ba0d5bd41110899f768c1241f34273e9c5800fc8ad81f46a6e7b264719b269fd888757a4ba7eef1fa80d7d77e998dc32ef5888ee653d71fbba0753c7e88b8d3130618f690586e82448055fdc5047ae2e32424f16cf56c60cb0f76bf258c0739be8182821992bcaccb9de201d4b422c2811e2dd954c3f68d9c474b02cf5f14a44d8936e63c19d7448ca9d7097a8da973f55c5c33c816d75512e1e6e69d389e5b0291e9bff480bd9868419e1468f2", 0xcd}, {&(0x7f0000000640)="e492607ac29b600b145acb7c42cfa8fa2bbb5297df342d145ba58891679a7ae10ba9d7d242a9bc8b72498ce6ff9830eabef22f352a5ce72c608b084792341901ebd3272203d906878b7ecd06c43b0a5df52c6cbd995f32a700ce2f3b151e8958088539fc9ff61ca9c46951e617b719dd32c68ff7e30ecbff65d591bd5688483a60f2de97d7174afac24e29f312986bb05431538dba66fa87e02f6c42f8318cc2936edf3ba624c712b8a4d6de11f0537c88ca106f5b10", 0xb6}, {&(0x7f0000000740)="c90d776050dbd29c64540ba94f6ff4b22a01e658fa5d96b880f976ebddcb6ffe98c79ec9327b19b7fbb158254233607da82da47f14d7e723c54450ce584090d3305674f39da5d7c318e01c0f1cbf5ac941c803f2522619ece71e24dbf785aa99872386bed59c2b4050e46f28c0941708c969e0e42c0de224d56416937d2ee1c61cff36787a0edc4801dafdd76e44e96b287727fc37209017df40ab22e46f425018a195451bf350b39074c7", 0xab}, {&(0x7f0000000100)="9fd45582cf4e34121911c29f641bf9f71d4c8f2e9ef87fe9de46139de4c905889032bccbba7954", 0x27}, {&(0x7f0000000800)="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", 0xfe}], 0x7, 0x0, 0x0, 0x4000}, {&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000900)="3c7eb3759e2ff70034a8466d76de93987856ce629dc5cd04fe09093eb5b2d14d4fe760e9e09925c3dbc11e2dbf730d7c38f759a21bdd58cd9130e53a885625ae871343950c3ff57dba34dfcc7d8471d521b34791789a517e0f82e35fd9f112e8312e8eba40588c58802272df81c61c848e4add43cf191409b63258fef88bae51dbc248b09a863eb16e78834b8cc63f3c27bfe6d89265bd3b20b5167cdb21137fb2407acecae61db6c40c613f453083a86dd32e79633f1e21add579ab40b8a62404767acaa1c7518383bb265ddbec409b35f9cc2d8a0bc1a254b90119576ef074501490d5184dae3dcb1577ab3af32800285f3cb94b86670fefa94605b2a9aa732036859a9c11926101960f246d20d9d1cc20edf6c6b7d18d45509b962007535b28737e6e36f2479c53331b234f7751356848de7d3670c7c4bc5aabfd74d210f1453d7fead4d8a91347e686ab38108fca5c7526f4bf06af62b9cab492f358636971dc503e2f41833cfef52f10f729a1022c714abd8e1d1c975ed0af1f5c061a06133101e50adf54bca6b65bbc460f3baa4a750c387c242fd9258aa0d769d32d8c89325751becd7d0e92bdfb99af89ad1c465bc82e8444544fd526055d4c5a63bd659cf77e80f596019eda31a00486ea19fdc05ed6066cdecea9388f6ca4a12922b69e8d99222661443db6dd277b7dfbeebabd61cec42b91a5c82337e2e99191a4ee11f04b81f8409fe4c326e7ccbb9f052f910d0b231ca2fc6145851446e57adb184f117093e34db5f23366b9a2262fa757e68301b393d931061c4939e7390c334440ce49e510e7f6fce5c453ceea1cd732f66f68050fdd0801da3dc8445fbacb4810ebc524b707e40a00382b7186f1dbbf403eed03fc4682450733e4c2c876f0e98c5b2b57b4e1f7597cfe6e926a8353fd6dd31cc262ade6ed8cf0e4136cbdc2bd8e0b197872a2e90d05571e5bdba94f3fd1c4d0ec104b8c91761dd48ac172de4ad4160886119dd5724805862368def10842e0c79895ff4d34f6d9292bb3d8c5dc4570f95c441e4d462c831b32e4de51e19d761fffe06281f95433b8488efdae2f358b2bb5e2e256b129637c126d39fe771d8b538ba01aee745e6f679f72dfa47ca95baed2749f26b887a361008780afd5e57c9b7c5585a16ff44dbd27929a80bce8bb9c4f61d1a4477ec7832c0f39349380fa1acf4c20d69f43eb77fc785e3c0eb8910c7a9770de9e11feaae91d3186eb3506b17cf6454d34a5965932c5e2194f3dae75e04b9899b5612b835c14fedf39c80a919b1f789d52047a7241a35bc9917d57a8f56c75f4cd743729f5a2371938e483ca2028d45cb4c1984b77be441a2c8f10f312704c4981c08614fe2bc49e509592a525a3a8fba52267628d3e6ef1230927eaa6ec51a5038fb21f38665d223be87eed1d8c1e44d8e703edee6070688339ef35ec7ceef43ef4ede241f5ab440af86310700a32b77cb687afd7762b9e9b6f9b0c4921a1b8c8a5ff74ee8a8cdc64da80621bb143485e47f347032aaa374d627f9fc2dd99c3584d1bc83b2381553e1db780c8e10799c87e61b114beb3284683cc7c1210eb049ac62ab7329b7e8ecd1bc3b5281d94d2242425458f63f94ad6fda69a94c9ab37809b5e397f626d39ffd23f6209ba7c9fb5fe9a12bd694742200711efa2821574831657485d5d7b8ec000e55cb7d27477cf0a3c7c89af6d802923a9a882270cde5cecec0ad26899045a6a7d14ef58f29251b4a549dd751cad2aabc0e959069a0278a491facd10926c5ef626ea4d54d33f32f474c58cf6291bb14602f65fc0752b4a2f065fc997afb039480adc453809806a5cc977a4b3d4f6182100ea210edfa400823daa18b56833e17b3633a1486ed5afa2cf2a27c64f6822d5d4dda63afe8a75e262262be17b8cd5c4817f7f245f92188b05645739d1b18bca496c62aa37b9c32bfb741e4ebc2b45d2d7571c2dff6063092eca2a123ffa3729ca9629c8434c5ac78526cd1013ce2f529822ef1a6b1b2ccd5986cb1ae22922bb6f8ec3da5fc31d7d82c622f69edbc31b22e13bc258b5b86e8e54c1bc9a8946510d60f428b11288ceb5259aba3659b630d4269ec7744184f3461fcfb482e94209e05e5f88f2a8f37c37015ddc555576343d5b09d2a4ec06f316d39d29d923eab69f1b56c349a0b36a1e6968c30f61ff3511221e331c2aede37b7d1d0db2db404a3b1c4c92818a40f170c7a36852248cabc6268dca0a85c667e5cae987a78b3d0866dd20f3ee726561c1079185e98b51a0c2f269c47fd77279d051869c49fec6c4fa6efc6e189d86056d4759037ddba9eedaba769461b3704adbd2ea4aed589be1df2078bee6c805627d1c54b6eea4d5b88be5476c11a2934e0f885078486130aef25a0088dec368479695a94d702147d93b376fcb7427427f2e9784d51fe45e8f9735f127c7f27be226c0f03f4a68a40a07357d88fad537ae14458993040c565ccb69f04afff5dce32cc5813cee81bb816be918dc27a8a68d8ff56ba51e755d8723dfde1e4627035e3b743018b79924d01256eeca3b18aaefe6a718d5433985a9dd944a2b127817daed4de6b7120d46be5e2b743f24d23fe53b4e3cbf157cd04c95202d28cc82295862b2da7bf3068263f3b432f4322066d9274efdbaa09ad2539722b2dff0c90778d899e8364d8346d0a13fa605ee83fa4f7d11fb2ef996fda9d8fcc856386236adf5f387527eced4d1158168e794956ad48da4e3a41f107aaa95322046f68785f5743b69cb041e26b22e727e5f1bf64e6dabedce7bfefbeb90459de1a78437533df34de5410164b736e6b362f1872bfca9ac50d2303a81926ea030fec0d4549dbcd5e2559d62335fee7fbb845b652bc33669f8e06466103c2b102fc377a045252854b1eb0980e2907f695fa237d3fe9592b3fc30cba2feeb3130077f9fddc4e75f1480614f2ff96a59d07c5bbe6c976b5df9bc0168a05416261cbeb466e7184f77e7982a91158cb10ea89ef2d215d375402bffdbb39edebc217f49777b95e58a84438f110d1ca0cfe475b656cf0addac82f5f6a79b118dcd82ecedd228902f756a1721794d538542c3d066c7d3dbffc91b78de7a2fddbbd73aaf36745659f9f72cdc1e29cc3070b13c9cfff79f1d68005546fbd8b3cacbe220212ae097fda2fbbcb505f04c57a7eac64bbc31435af4812f0fdd97d39a9c4596565f7248b98c8d79c60107c1d4103a1d54e89d106368a2ad45265a9efe92e251498044621ecd7359cb13455085ade9786380fa389fe2c553bfd9870beedf7127b45b86692a4fe1bc52a33c7a344708f267ad8f79751472fba59d14655b865636c3c0c65ab4497a98237bf9efe95cd68210349adc0f8da6de6c523e49077314d4ed86bd38f91831b1b45c18934dc2aecf786d14b3933fd4702b5b655447a14aad78c0e1694721b89acfdbaebaa8584b2bae602cf7fbcf14b0b954e18fca23d2d7e3fe8e935505572cce52596e355f1fcbefe12aa777c0d31f7adad9ca6702c3485f4fdee76824e1d9ef2f312536119b8360c82fcf1af7f279cdb133eae35451c3c314126aa591a27622973015a16e6e5a17be4706de24611a1eaaa526d24ebacf4f742e9497e85e17e8aff15fbc254510c4c7df5f586c3b1e479a8e434c713e2f1544277f6ff21fb8a0a51a886fa51558db174c0d9426f98e0d25d377fcc6b5a922656e64ce12d148ddfa3a7699bb75d6f1471b2b867780e49003df5fff2688e6b2d4ab3a2234b6fa8f585bbf2b97f37d3490bd90378faae4aee428ba9238f4ded6f70cf1777b9fe9f18dab954eb2fb1a29d37e4e00b37fb157d0434f0ebf7f68e962c7130f4a46fc49e3e5f61c7b317a76d5d0a367cb45832ba906f84cf2819e14675cbf8c014416af8be7f56b37e639ffb51ee8c515a6d7cf97ca43b30394877133f1bfff9062099a47fe8670251822298ae7ee6a6fac1a549dc60dd179a91e908c15a0ffd5503e394876d597838b56ce47134cfd983ea512c162bc2a9f45673ba55edc025428f02438e7e6eb363889ec47888274f0212e963878b425b53c6cb84d60069a229fbf8f14e7a78736e40a91c076d1cd71bf166e389939097c0dbe5636a939f8f9d14bf7d554650ce99eeb66ad0c4a1ce78776d31663499e9cbfa8d8baf9e7df194bfd88eb5f5c019a2a5b8c66718106ea76448705f2061ba4e8bfdaef2e32987b4ca22d50c02dace4428f9c843ed6a1b529b34e872ced6a30501f00330ec9bc997dfadf443d54bbfac1f90b291af0ff6172707215e02f97b5e55ff9e01e660a7db075b27e51729bff2f42e89e2aec8f13401b5d7cd7c9aa42fcfb20b81e3df3c29b7b6dae0cfc6df0449800bb338d60d3f5ca181213ded85acceaa5ad2e7c71de712dd443e799cec523a62f6a7479d3f4cdf6a15723ca3a3cfafc9dfeb22e13166744c6c64e1a239310532bff533e2afc3cbe69343bbaf64106347ec0540dba2b89a8c56098565e4e8dd185359502a6331819e68619a0d74b19b42f8d2d7b3d3c9f281bee9fd3efb4f49bbf25c88e0dd8a758235b625b23b7444dc1faca4094d732543fc27b8cc2907bda06f61ab5aa185fdca60cb0bf5434cbf46448be600b58b0b80baa4657845dae84afbec44659677d2bde07ffcf8cafd997f0181a916b9f4a64fd1daa2ee293cf0e32782f1e1a892f0746f6cd5f321b6718a5b0b23a37d51089fe4373f344dcbc73d1f15c85093845c72574a658eeee8e59ff5d7abf8fa5e9a45500087e16bf94cba0c395f49217b541c59f869a9d624d95d9202a740935fe683ea0de93f0525e238784ed1c9dc031bce28cd31f93ccb2a0e0419f53147a3a7507e00ad23e8298d57b920c51a5f8d09b6a281cc2f6a4b6c876e4129856cf243c51ce6c05d710d405fcb810a16c5f6b356193a3c4882b21ace81f2c62b1ad98366d0b03ea9108c2d50e37cc98b154eea08dd9fb8509cf4fd110b03013af7c6457b2fa72bda9f31f31a17093db4793ce84cf6ff4e5f44405873fa9a5a35fa46506173e63016ab70a65fd629a217be2e3d26af024c6d3ca52aafe61abc799662c5c580624794474aa049ce38754f060895f112a30dd2494fbbda6e0bb191e8633240c62c86253afe79a82194d7a2102155cb936309f33fb1e8dacbe299f72438d68bf1612229acca43533030db9884a505ce4156989d6ed4e7fdca6c1e0df393b9e6bee88400fd865b25c13ce0026094452881abfe22d0a6d3e82aa0f7d301726a5df51c1ea88194be533eb5ee68c23c5c5947598a741d10c7204aee623b8d4a431fbafaec658987f4cac3c5d565eee6c026ba8c5f92c973c4195624487c33afdb400252f5ad397a1d507a6b2d646c7954bddcc9b4908c2a84fbfceecd117e7bcea726e42e49ae9dfc4ac0738b37c07fd89617a9987b9ae05cc60c8a22ef9ae372394e67de6574fa558a0191755e0f942d26909c679ae0f680e4c5b4492aca01894095782b53ad219ab7b6a2614819cb2112c0c3254112c47d8b39dabb9196c66137964651232030a5105dbdd4429a14bd45f8d75443d02e549e5e53e448f98d44f9f5709ad6593602070382bcb19240060121147772f9e31640fd7d35da610ad9a539098d5a1c1d60d01189ea295e658eb4466ec5e4dd5af24065e5f681c8b8b0466730988faa0f593f7f1cb84e3e99086becfcf41930a395f8d4b8f72d0986473e3757b037cc46cb8d3a2b4ea8094d667dc1de826ff8a5f18b9193e08a66b04e7194ad17359ddc7a408cf705830831d1d7e1633ca0fbb", 0x1000}], 0x1, &(0x7f0000001940)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r1, r1]}, @rights={0x30, 0x1, 0x1, [r1, r2, r2, r0, r0, r2, r1]}, @rights={0x38, 0x1, 0x1, [r1, r2, r1, r2, r0, r0, r0, r0, r0, r2]}], 0x98, 0x20000000}, {&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001a80)="50900d9c0c1c91453a4dbe279cfd3ed0039e2a39dc84ad08b2b0a377aa55fea3da8406bab8e806822d6c392ea418f7e57ad0342d42605106002b524a514c490dc3db749a271739b37e5d51f45fbb6c67d18330cbd1bf4f83cb2bb811e5234e17015789872bf10ae2281317e7b26de77019cffcdf754820d139b9d2aabd1e88fb744610df19f8bc95735b4cb67b15ebec8da257a80ee902ef63e320e501a639b6b89e0870404a6f93031800cb2c6c30985cb2f21345664fcc53eef3282dd5b418cd2cdd8b628f074205", 0xc9}, {&(0x7f0000001b80)="d7ce17a813595e90c2ccbd1a7547b3248e809b4fea2deb3f1d587b285cbba7738d678f2ec16925cf32151d01d96bb14e74e165975646e2d65fda0406608dd58b8db66f0443e917c74b11e8f20edc7cb7d5d321d3b78185818882dd4d22c9068370ed2767ada1fdb4c921f753dd72fee6cebcad013cfc866fff5c0ccd71263fd3e7045e7519f53085c76ef0ec512a166a60c6cfe6cb369563cfdb10545ea86fe1b230f7aea4779bc689103bf0c86657a77f86bc87c7227d6173d669900a6584eccfbe7f9b0dbbbe3f", 0xc8}, {&(0x7f0000001c80)="cc6c46b9f2c628b03e7c2678f96ae4f604070185b5cb59927e1ca5fd5546ef6f76f163801c56b870960c653becb33af946bd1f72d612bd5b72e89c6e70969bef948e95b400613b42fb1d8e5ddb552f8491bd2a3233b965e7786dd253ea", 0x5d}, {&(0x7f0000001d00)="35429ac44dde914ea87992dc7eacfab925d149c4e2d291ffe4ae8a10f292f5a3e9dfca7637a1cb210469a814a743cf24eb1e6f30ff9f24981e6422073c27a937e61e4f90d8c8c1e2f54374116a820b2b763314fe2461f3a5b1ff797380af59b561ee80adf9b98aceae0627913ca259b4", 0x70}, {&(0x7f0000001d80)="51b3679f97d384f56f72e77ce4c305", 0xf}], 0x5, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r1]}], 0xd8, 0x4000000}], 0x3, 0x4000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x20000) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x100000000, 0x100000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000003, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 934.864227][T23409] binder: 23408:23409 ioctl c018620b 0 returned -14 13:55:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x20000) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x2000000) 13:55:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x20000) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x3000000) 13:55:23 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x0}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x32f}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000004d, 0x0) [ 935.430126][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 935.633644][T23417] binder_alloc: binder_alloc_mmap_handler: 23408 20001000-20004000 already mapped failed -16 [ 935.674053][T23417] binder: 23408:23417 ioctl c018620b 0 returned -14 [ 935.687213][T23542] binder: BINDER_SET_CONTEXT_MGR already set [ 935.701702][T23542] binder: 23408:23542 ioctl 40046207 0 returned -16 [ 935.739186][T23541] binder_alloc: 23408: binder_alloc_buf, no vma [ 935.747128][T23541] binder: 23408:23541 transaction failed 29189/-3, size 24-8 line 3147 [ 935.771182][T23417] binder: 23408:23417 BC_INCREFS_DONE u0000000000000000 no match [ 935.771267][ T12] binder: release 23408:23417 transaction 663 out, still active [ 935.799786][ T12] binder: send failed reply for transaction 663, target dead [ 935.890232][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:24 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000008, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4000000) 13:55:24 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000005, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000180)='\xb0\x14\xac\xb0\xcc\v#\xb3s\x80\x00\t\x00\x00\x00\x00\x00') semget$private(0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x60, 0x28, &(0x7f0000000080)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x31}, @fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x4}, @fda={0x66646185, 0x4, 0x3, 0x2a}], &(0x7f0000000100)=[0x68, 0x0, 0x38, 0x38, 0x30]}}], 0x97, 0x0, &(0x7f0000000380)="8fe437a7071d5447a3500540289bde7d195bb85710c125c90dc66aa0a1c59ad0c8160b716cb63982419afee1b0cab946c5f0ace36ab9879e641799847b99ee7437c78b7738fad3c51f9da8a9cd1258c68ca4f6166ea14fbb5c26e9f993db8d6c71384515ca8982a4af02d7cd5fbca829a637119558595bde43842c869a85af13f9926a7efbac0f712ec53ddf0ef58948b491c3baa38e06"}) [ 936.213917][T23552] binder: 23548:23552 ioctl c018620b 0 returned -14 13:55:24 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x100000000000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:24 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x1f) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r2 = accept$unix(0xffffffffffffff9c, &(0x7f0000002a40), &(0x7f0000002ac0)=0x6e) pipe(&(0x7f0000000040)) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000002b00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002b40)=0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000002bc0)={0x2000000000000000, 0x3, 0x5, 0x0, 0x0, [{r1, 0x0, 0x3f}, {r2, 0x0, 0x2}, {r3, 0x0, 0x7}, {r4}, {r5, 0x0, 0x401}]}) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r6, &(0x7f0000000480), 0x100000000000006a, 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000000), 0x2) [ 936.302050][T23559] binder: 23548:23559 Release 1 refcount change on invalid ref 2 ret -22 [ 936.333678][T23559] binder: 23548:23559 got reply transaction with bad transaction stack, transaction 668 has target 23548:0 13:55:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x5000000) [ 936.389285][T23559] binder: 23548:23559 transaction failed 29201/-71, size 96-40 line 2914 13:55:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6000000) 13:55:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7000000) 13:55:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xa000000) [ 936.965144][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 937.007459][T23559] binder_alloc: binder_alloc_mmap_handler: 23548 20001000-20004000 already mapped failed -16 [ 937.027308][T23559] binder: 23548:23559 ioctl c018620b 0 returned -14 [ 937.047113][T23631] binder: BINDER_SET_CONTEXT_MGR already set 13:55:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x2, 0x3, 0x10000, 0x8, 0x0, 0xfffffffffffffff9, 0x2000, 0x5, 0x0, 0x7f, 0x7, 0x29, 0x1, 0xde8, 0xe5a1, 0x6, 0x7, 0x3, 0x3, 0x74, 0x80000001, 0x1, 0x2, 0x20b, 0x3, 0x100000001, 0x4, 0x4, 0x3, 0x80000001, 0x47, 0xfffffffffffffffb, 0x2, 0x10000, 0x6, 0x5, 0x0, 0x9, 0x5, @perf_config_ext={0x3, 0x10000}, 0x2000c, 0x7, 0xc0a0, 0xa, 0xfe0d000000000, 0x0, 0x6}, 0x0, 0x1, r0, 0x8) preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 937.053532][T23635] binder_alloc: 23548: binder_alloc_buf, no vma [ 937.059983][T23631] binder: 23548:23631 ioctl 40046207 0 returned -16 [ 937.066962][T23635] binder: 23548:23635 transaction failed 29189/-3, size 24-8 line 3147 [ 937.076209][T23559] binder: 23548:23559 BC_INCREFS_DONE u0000000000000000 no match [ 937.084489][T23631] binder: 23548:23631 Release 1 refcount change on invalid ref 2 ret -22 [ 937.094441][T23631] binder: 23548:23631 got reply transaction with no transaction stack [ 937.124898][ T12] binder: release 23548:23559 transaction 668 out, still active [ 937.165038][T23631] binder: 23548:23631 transaction failed 29201/-71, size 96-40 line 2899 [ 937.200617][ T12] binder: send failed reply for transaction 668, target dead [ 937.219513][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:26 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000009, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x10000000) 13:55:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffb, 0xa7, 0x7, @buffer={0x0, 0xf5, &(0x7f0000000500)=""/245}, &(0x7f0000000600)="46950bc9e3aa760872dc6057f3903a75509e5128c9f83d0a8c13c98abad9766ea2fbc13dc51b46cceb9e9c93dd7042257d1cedfca32d7d640821744959b4b2b9b6ae49e25d8fb1d2a1495be3c27b45e8484e51e860275bb77d8de6fc646cf5fe0148de723e12da543c390b2201e8fad1b30c4056468e2d68124313f5b6902068e3b38be606640040d41ea0890e2443b1185107fb2567e624df0584d599e1404007cb5699317064", &(0x7f0000000080)=""/37, 0xffffffff, 0x10000, 0x0, &(0x7f00000000c0)}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x10001, 0x8000, 0x4, 0x5ff, r4}, &(0x7f0000000380)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xffffffffffffff1b, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:26 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xfffffffe}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:26 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xc000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40008000000, 0x10000) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000700)={0x0, 0x0, 0x2080}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) [ 937.892259][T23713] binder: 23704:23713 ioctl c018620b 0 returned -14 13:55:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x40000000) 13:55:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x48000000) 13:55:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4c000000) 13:55:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) lchown(&(0x7f0000000340)='./file0\x00', r1, r2) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) r4 = fcntl$dupfd(r0, 0x406, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0)={0x2, 0x800}, 0x1) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r5, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:26 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xfffffffe}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x68000000) [ 938.690887][T23718] binder_alloc: binder_alloc_mmap_handler: 23704 20001000-20004000 already mapped failed -16 [ 938.719571][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 938.741106][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 938.758625][T23718] binder: 23704:23718 ioctl c018620b 0 returned -14 [ 938.766469][T23845] binder: BINDER_SET_CONTEXT_MGR already set [ 938.867306][T23844] binder: 23704:23844 BC_INCREFS_DONE u0000000000000000 no match [ 938.867318][T23845] binder: 23704:23845 ioctl 40046207 0 returned -16 [ 938.895672][T23718] binder_alloc: 23704: binder_alloc_buf, no vma [ 938.912656][T23718] binder: 23704:23718 transaction failed 29189/-3, size 24-8 line 3147 [ 938.916453][ T2988] binder: send failed reply for transaction 675 to 23704:23718 [ 938.945530][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:55:27 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6c000000) 13:55:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0xc02) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:27 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x6000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:27 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0xfffffffe}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 939.613204][T23958] binder: 23956:23958 ioctl c018620b 0 returned -14 13:55:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x74000000) 13:55:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0x263, 0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/snmp\x00\x1b\xb7\xc8\xc6\x1a\x8e\xcf\xa7\xfaK\f\x1c\x05\xf0v\x14\x18\x02\x9aN\x84\xfe\xcd\x87\x8eO\xad=s}\\B\xc9R\xbfz\xae+\xfa\x8a\x97@\x7f\xdb\xaa\x9d\xcc|\xf6]v\x13\xe3gbu\x19|\xd55\x04\xd5\x91\x1dn`\xa4\xb5\xce\xe125k\xa1\xc1\x98\x9b9\x9fF\x1c\x19\r\x96\x92\xa8\x13\x89\xb3\xb7\xf8\x10\xa5\xb8\xe8\xf2|\xa8\xb2\x06\xcc\xd5\xa6\xfdl\xc7\x11\xa99?|\xa8\x0fU\xfep\x89\xd7\xe9\xa3\x88n\x96\x02Z\xc4\x18\xbbj\xa9\x05 \xa8\n\xdbD\x8emhj(\xc8(\x11\xe5~\xfc+8%\xa6\xad\xe3\x06\xa5\x94\xbb\xbaY{\x9ek\v\xb1\xf5\x92\x7f*\x04\xb0\xb1\x03)<\x1f{n\xd8\xb5\xfexl-\xcd\xb2\xd9\xb8\xb6\xf9\xd8T5\nc\r\xe2\xfaO\xf4Fo\xa7\x17\xb4\x98R\xd5_\x94\x05D\xdc\x00\xd8\xdf.\x1e\x89Y\x1cc<\x86\x85\x05\xa6M\x15q\xfd\x1c1\x83\xb5\xc08\x1c\x9d\xfd\x9a\x0f\xd3\xdaH\xa9I\x95oF\x96}\xfcY\xbf\x89\xc6\x12\xc1(\xfa\xd3\xb2.\x97\xa9\x81\x84\x06\xd0\x9b\xa9\xbd\xbe\xfe\x9b\xb3o/') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7a000000) 13:55:28 executing program 3: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x5, 0x7, 0x95b, "605f6daffb334d92c9ee3c710cf80c3b095cb9f76c5402106295735b8751db968fe152d57a4ac4cb85fdf90227f3c29aa9a5bcae0951b417dc52bd6f012b33", 0x5}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000000c0)="f78e8966c554568f3756ac75895ae7255057c0acdc9c2ab259e4aafa5eb973f5e908ed8ab47867b7b7b5876db119466ca8eab7818cf16b1c3dcadd45e163fd8f0485e2c71eb3afc69836a7fa4d4b27863cb00e6dd99adcbc78afd58cb0f95d", 0x5f}, {&(0x7f0000000140)="29df0887075c05d57a53b26421132376ae8404b0186f9ec41f2ede4416107dae4c6996aa57c85aedafaa0af720281966ba08c8e6c6a78a58b2b1fa36", 0x3c}, {&(0x7f0000000180)="d150b16caab69f804f8c9d493980e8901b2babf79eda889374e4437b894b6e30290e3e10ab99", 0x26}, {&(0x7f00000001c0)="f0ecdd6d18363d32040a893ea36e9de76b4e671492bb0bbc5a2635bfa843e20876ed262f6780bd7ebf419ecc", 0x2c}], 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="700000000000000007010000001000007c067649d38c62a9ab191efc2d681ca7c407e37549c8ce2164cc7f36171664a96faa732acac93ab296999d9f2f93690a1845ec7c133ef6092bc59ee2bd19c2346ef073d753789c0cb5040c6f5a2e139174113aeb157d79390000000000000000"], 0x70, 0x10}, 0x20000014) 13:55:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7aecff7f) 13:55:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7fffec7a) [ 940.394969][T24092] binder_alloc: binder_alloc_mmap_handler: 23956 20001000-20004000 already mapped failed -16 [ 940.436863][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 940.444981][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 940.483316][T23968] binder: 23956:23968 ioctl c018620b 0 returned -14 [ 940.484974][T24094] binder: BINDER_SET_CONTEXT_MGR already set [ 940.571485][ T12] binder: release 23956:23968 transaction 680 out, still active [ 940.598358][T24094] binder: 23956:24094 ioctl 40046207 0 returned -16 [ 940.608735][ T12] binder: send failed reply for transaction 680, target dead 13:55:29 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000b, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:29 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x3000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/rt_cache\x00') 13:55:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7ffff000) 13:55:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000140)={0x1000000000000000, 0x6000, 0x4, 0x7, 0x18}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x104) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x6, 0x3, 0x8, 0x7, 0x0, 0xfffffffffffffffc, 0x2, 0xf, 0xd145, 0x0, 0x100000000, 0x10001, 0x3, 0xcf63, 0x1ffc00000000000, 0xfffffffffffffffc, 0x3, 0x8, 0xfffffffffffffeff, 0x5, 0x0, 0x3ff, 0x8, 0x1, 0x1, 0x7ff, 0x0, 0x0, 0x5, 0x7f, 0x0, 0x5, 0x4, 0xffffffff, 0x7fff, 0x401, 0x0, 0x10000, 0x4, @perf_bp, 0x6000, 0x100000000, 0xcd, 0x5, 0x6, 0x9, 0x7f}, r1, 0xd, r0, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:55:29 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x2000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 941.233908][T24115] binder: 24106:24115 ioctl c018620b 0 returned -14 13:55:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7ffffffff000) 13:55:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xf0ff7f00000000) 13:55:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xf0ffffff7f0000) 13:55:30 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x100000000000000) [ 941.903849][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x200000000000000) [ 942.039880][T24119] binder_alloc: binder_alloc_mmap_handler: 24106 20001000-20004000 already mapped failed -16 [ 942.058761][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 942.095243][T24119] binder: 24106:24119 ioctl c018620b 0 returned -14 [ 942.095727][T24166] binder: BINDER_SET_CONTEXT_MGR already set [ 942.204451][T24119] binder: 24106:24119 BC_INCREFS_DONE u0000000000000000 no match [ 942.232443][ T12] binder: send failed reply for transaction 684 to 24106:24119 [ 942.240505][T24167] binder_alloc: 24106: binder_alloc_buf, no vma [ 942.253884][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 942.270878][T24166] binder: 24106:24166 ioctl 40046207 0 returned -16 [ 942.295842][T24167] binder: 24106:24167 transaction failed 29189/-3, size 24-8 line 3147 [ 942.432797][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:31 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x300000000000000) 13:55:31 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x3000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:31 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x2000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xbc8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:31 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 943.000822][T24263] FAULT_INJECTION: forcing a failure. [ 943.000822][T24263] name failslab, interval 1, probability 0, space 0, times 0 [ 943.015718][T24266] binder: 24257:24266 ioctl c018620b 0 returned -14 13:55:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x400000000000000) [ 943.068931][T24263] CPU: 0 PID: 24263 Comm: syz-executor.3 Not tainted 5.1.0-rc2+ #37 [ 943.076930][T24263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.086988][T24263] Call Trace: [ 943.090296][T24263] dump_stack+0x172/0x1f0 [ 943.094682][T24263] should_fail.cold+0xa/0x15 [ 943.099289][T24263] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 943.105114][T24263] __should_failslab+0x121/0x190 [ 943.110071][T24263] should_failslab+0x9/0x14 [ 943.114584][T24263] kmem_cache_alloc_node+0x56/0x710 [ 943.119791][T24263] ? mark_held_locks+0xf0/0xf0 [ 943.124580][T24263] __alloc_skb+0xd5/0x5e0 [ 943.128942][T24263] ? skb_trim+0x190/0x190 [ 943.133276][T24263] ? __local_bh_enable_ip+0x15a/0x270 [ 943.138759][T24263] ? lockdep_hardirqs_on+0x418/0x5d0 [ 943.144059][T24263] ? lock_sock_nested+0x9a/0x120 [ 943.149021][T24263] ? trace_hardirqs_on+0x67/0x230 [ 943.154067][T24263] nr_write_internal+0x74/0xeb0 [ 943.158937][T24263] nr_establish_data_link+0x83/0xc0 [ 943.164145][T24263] nr_connect+0x7d1/0x1150 [ 943.168605][T24263] ? nr_find_next_circuit+0xb0/0xb0 [ 943.173818][T24263] ? apparmor_socket_connect+0xb6/0x160 [ 943.179373][T24263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 943.185619][T24263] ? security_socket_connect+0x93/0xc0 [ 943.191090][T24263] __sys_connect+0x266/0x330 [ 943.195689][T24263] ? __ia32_sys_accept+0xb0/0xb0 [ 943.200662][T24263] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.206131][T24263] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.211629][T24263] ? do_syscall_64+0x26/0x610 [ 943.216313][T24263] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.222388][T24263] ? do_syscall_64+0x26/0x610 [ 943.227079][T24263] __x64_sys_connect+0x73/0xb0 [ 943.231862][T24263] do_syscall_64+0x103/0x610 [ 943.236571][T24263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.242464][T24263] RIP: 0033:0x458209 [ 943.246365][T24263] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 943.265976][T24263] RSP: 002b:00007f0dbcf64c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 943.274393][T24263] RAX: ffffffffffffffda RBX: 00007f0dbcf64c90 RCX: 0000000000458209 [ 943.282366][T24263] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000004 [ 943.290339][T24263] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 943.298317][T24263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0dbcf656d4 [ 943.306296][T24263] R13: 00000000004be5de R14: 00000000004cede0 R15: 0000000000000003 13:55:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x500000000000000) 13:55:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x600000000000000) [ 943.549684][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x700000000000000) [ 943.705913][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:32 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}, 0x3000000}], 0x8000000000003bf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 943.800473][T24270] binder_alloc: binder_alloc_mmap_handler: 24257 20001000-20004000 already mapped failed -16 [ 943.827660][T24389] binder: 24257:24389 ioctl c018620b 0 returned -14 13:55:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0xa00000000000000) [ 943.846028][T24390] binder_alloc: 24257: binder_alloc_buf, no vma [ 943.853160][T24270] binder: BINDER_SET_CONTEXT_MGR already set [ 943.894410][T24395] binder: 24257:24395 BC_INCREFS_DONE u0000000000000000 no match [ 943.949989][T24390] binder: 24257:24390 transaction failed 29189/-3, size 24-8 line 3147 [ 943.950796][T24270] binder: 24257:24270 ioctl 40046207 0 returned -16 [ 943.958423][ T12] binder: release 24257:24270 transaction 689 out, still active [ 944.005300][ T12] binder: send failed reply for transaction 689, target dead 13:55:32 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:32 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:32 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000b, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x1000000000000000) 13:55:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000a2289a43a4bc0497000700080000ee8b08b7960ff7aa6e041c7700fdff863809aa0063b8f24252b1d85cbf000000002c8c9df5a7b85a0038f70f653f0ffb09f0d536b536811c7f3814714720a3841f9d63e232b9b2500fb1d96033ccfd"], 0x64) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) [ 944.596486][T24510] binder: 24506:24510 ioctl c018620b 0 returned -14 13:55:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4000000000000000) [ 944.669315][T24541] binder: 24506:24541 BC_INCREFS_DONE node 695 has no pending increfs request 13:55:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="d3618303eb125453d4b7547f00459f666a7a995aecff0c4eed7311da4b11537179cdb95941e563802d353ca0f4eefb2f6be4aff832de6b0227508832f7119ef7c08c84f6461c773f208be1b517f6794d65549342d4589ceac76a653047b62f52c282cea3292d36e3113acb3ae3a351624e581e28a1b47a07bd6b07aec41c083abe", 0x81}, {&(0x7f00000001c0)="6b67c529037cbb89676cb3d9ec001d1efb1dda37d9e62ab64584353cc5a5c548ae2b7864ff32aa8ddc72e3a1f933f50586c40973b3a3562c1349902ab99adf1fdcedba96573767ec9610cff3dd5c60043798fe273b716cf80fc5e36cb1bc356493b11931df647c8f8cace8be5409d31edbcc607f33581c079eb6e83b94770f19f91e89af248a27c0ffb29294a448e9f74009a6e40c50c579d9312b9f30eebe5303ddf11f18c6f5c7148ba6afe1e01d82c888217871c13608585bbcdc", 0xbc}, {&(0x7f0000000280)="2f8778ce32dfa2748dfe8b86a3199ff44c554fcdf18da65d2d0461927c432090717e5f2b291e533b1cd2dc3a1b44588cf06a22087774d4d79cf55dcb16bd162f73415eb13d2ef6c2f8f36be061dc4b218469aece453ea56b000487565d72d10c189466c5394a6e41053dc65c6945950b5200fd909dc4ff7301241e9ca1ec53c7444346dda4ae47ac466957543ace1df680a03c6635ac6cfd71258d34474b6cb921d53c31ea3fd0933ec877e065a8fa88ee262185da181b6c4911adf5f986", 0xbe}, {&(0x7f0000000340)="cfdd2896d69f21c57f0a32b10aca6d34c5fdcc79f70bf8e4487802d5c2a4ab5fa4600b4b748a33446de453dd08b07087612ff908fd9c82fb826ba62c538b30ef64a1fe60cd67ec86bfbc96dfa7e9662b52dd235d34b1d72cfe2e0c59049ca2df5fa9a3a1a9e1255e73a4c8fcf6dc7a7c718aae189c302d872d254eb3e8feb2cdd6cea335adb175cc8af18d37fa6c0e6151ad60d88db729ba0a9263a1ee614268a1e1edefd11f5b83f77dd4bcb10614e17031508da4b09e89bc6d181fec", 0xbd}, {&(0x7f0000000400)="7f36e1a2d78f3a56a57581ebf90a7b68f8bd4e9b10b6f570637292138332da61e8656569b268f665ddd9672047698ab43eaf730b", 0x34}], 0x5, &(0x7f0000004740)=[@op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa0, 0x117, 0x2, 0x88, "9f4f031059a99852fee22686c769bd0093fce06ae88b28ce0273830008024db58b3216dac6fef3c47305602267b8910eeade3d4e3ebcb354541ae5fbaca9a49a577cbb1825c7cdb51967d1e20eb585c13536e79badbdbe349adacd5fd16ebda22beb8d86a164166887104eb894c3064d4ad14dc89af18585e18f4e46ea270c7eda541b4efc632715"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x2100, 0x4}, 0x80) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0x40, 0x0) write$ppp(r2, &(0x7f0000000540)="df7415fb4908920b1c14ce3a84ccfff6db0558ddd966f2d7f30d35211af73dbc97fd99cc65f8e29b7132e364453fddd7d4c39a4e30ad6a1ede77606a15277b0a41955f5aa1df060fec3f5482db3509fee418d45035cbc542d453f28da6c86d01af617441720000000031fda6e7e85b2718f0639aa061665f5d5d3d0efa35f62a1e63eb413063cd1a078bdac872cea6444d4b59acc928265c8eed40bd781b548453015f939a9dda13eb01b1843a", 0xad) 13:55:33 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x2, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4800000000000000) 13:55:33 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x7, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x4c00000000000000) [ 945.274874][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 945.301631][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 945.395437][T24541] binder_alloc: binder_alloc_mmap_handler: 24506 20001000-20004000 already mapped failed -16 [ 945.412544][T24541] binder: 24506:24541 ioctl c018620b 0 returned -14 [ 945.470923][T24541] binder: BINDER_SET_CONTEXT_MGR already set [ 945.491012][T24749] binder_alloc: 24506: binder_alloc_buf, no vma [ 945.514301][T24541] binder: 24506:24541 ioctl 40046207 0 returned -16 [ 945.518003][ T12] binder: send failed reply for transaction 694 to 24506:24510 [ 945.546367][ T2988] binder: undelivered TRANSACTION_COMPLETE [ 945.552568][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 [ 945.559521][T24749] binder: 24506:24749 transaction failed 29189/-3, size 24-8 line 3147 13:55:34 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) r2 = accept$alg(r1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="c62d99d9e3833b62bcf6e09680b994dc9f08d838e72f18c84f0ff27cbc25a5140b7e4412e2a046f298b926f563fba43a0da08b43b990b8f5", 0x38}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x2, 0x0) 13:55:34 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0xa, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6800000000000000) 13:55:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = dup3(r1, r0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/binder#\x00', r2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="ec167af03a542a09"], 0x0, 0x0, 0x0}) 13:55:34 executing program 4: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x38}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x303000, 0x0) 13:55:34 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 945.943782][T24759] binder: 24758:24759 ioctl c018620b 0 returned -14 [ 946.019188][T24802] binder: 24758:24802 BC_INCREFS_DONE u0000000000000000 node 698 cookie mismatch 092a543af07a16ec != 0000000000000000 [ 946.045725][ T2988] binder: release 24758:24802 transaction 699 out, still active [ 946.056578][T24802] binder_alloc: binder_alloc_mmap_handler: 24758 20001000-20004000 already mapped failed -16 13:55:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x6c00000000000000) [ 946.072695][T24759] binder: 24758:24759 ioctl c018620b 0 returned -14 [ 946.097531][T24802] binder: BINDER_SET_CONTEXT_MGR already set [ 946.114258][T24849] binder_alloc: 24758: binder_alloc_buf, no vma 13:55:34 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x3}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 946.139241][T24802] binder: 24758:24802 ioctl 40046207 0 returned -16 [ 946.153320][T24849] binder: 24758:24849 transaction failed 29189/-3, size 24-8 line 3147 13:55:34 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 946.183753][T24759] binder: 24758:24759 BC_INCREFS_DONE u0000000000000000 no match [ 946.217820][ T2988] binder: send failed reply for transaction 699, target dead 13:55:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x140, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x9, 0x6, 0x4, 0x9}, {0x0, 0x9, 0x40, 0x1f}, {0x9, 0x99, 0x8, 0x2}, {0x4, 0x6, 0xde85, 0x3}, {0x2, 0x8, 0x8, 0x1ff}, {0x7, 0x8, 0x3, 0xa06}, {0xfff, 0x1, 0x5f, 0x3ff}, {0x0, 0x7fff, 0x1, 0x3f}, {0x40, 0x9, 0x4, 0xffffffffffffffe1}]}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1d) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) prctl$PR_SET_PDEATHSIG(0x1, 0x2e) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="00fdff0000000000"], 0x0, 0x0, 0x0}) 13:55:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7400000000000000) [ 946.370324][T24892] binder: 24889:24892 ioctl c018620b 0 returned -14 [ 946.468115][T24896] binder: 24889:24896 BC_INCREFS_DONE u0000000000000000 node 705 cookie mismatch 0000000000fffd00 != 0000000000000000 [ 946.513740][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 947.163218][T24898] binder_alloc: binder_alloc_mmap_handler: 24889 20001000-20004000 already mapped failed -16 [ 947.179851][T24896] binder: 24889:24896 ioctl c018620b 0 returned -14 [ 947.191942][T24899] binder: BINDER_SET_CONTEXT_MGR already set [ 947.206186][T24899] binder: 24889:24899 ioctl 40046207 0 returned -16 [ 947.215294][T24898] binder: 24889:24898 BC_INCREFS_DONE u0000000000000000 no match [ 947.227219][T24896] binder_alloc: 24889: binder_alloc_buf, no vma [ 947.235686][T24896] binder: 24889:24896 transaction failed 29189/-3, size 24-8 line 3147 [ 947.248334][ T12] binder: release 24889:24896 transaction 704 out, still active [ 947.261067][ T12] binder: send failed reply for transaction 704, target dead 13:55:36 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:36 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:36 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x4}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7a00000000000000) 13:55:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = shmat(0xffffffffffffffff, &(0x7f0000002000/0x2000)=nil, 0x7000) shmdt(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:36 executing program 4: open$dir(0x0, 0x8400, 0x0) r0 = syz_open_dev$amidi(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x5050ca01000000, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x9e945000, 0x3e0000}], 0x0) [ 948.443786][T24909] binder: 24906:24909 ioctl c018620b 0 returned -14 13:55:36 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x6}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:36 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x7aecff7f00000000) 13:55:36 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x7}}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=""/123, 0x7b}, 0x40) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1, 0x48) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0585611, &(0x7f0000000040)={0x3, 0x1, 0x0, [0x500, 0x0, 0x0, 0xe7ffffffffffffff], 0x0}) 13:55:37 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x920, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xcc96}}, ["", "", ""]}, 0x24}}, 0x4008010) preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) [ 949.037357][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 949.223238][T25045] binder_alloc: binder_alloc_mmap_handler: 24906 20001000-20004000 already mapped failed -16 [ 949.258030][T24918] binder: 24906:24918 ioctl c018620b 0 returned -14 [ 949.283602][T25045] binder: BINDER_SET_CONTEXT_MGR already set [ 949.316407][T25045] binder: 24906:25045 ioctl 40046207 0 returned -16 [ 949.316485][T25047] binder_alloc: 24906: binder_alloc_buf, no vma [ 949.341456][T24918] binder: 24906:24918 BC_INCREFS_DONE u0000000000000000 no match [ 949.358501][T25047] binder: 24906:25047 transaction failed 29189/-3, size 24-8 line 3147 [ 949.371313][ T12] binder: release 24906:24918 transaction 709 out, still active [ 949.396405][ T12] binder: send failed reply for transaction 709, target dead 13:55:38 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000010, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:38 executing program 4: open$dir(0x0, 0x8400, 0x0) r0 = syz_open_dev$amidi(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x5050ca01000000, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x9e945000, 0x3e0000}], 0x0) 13:55:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r5 = getpgrp(0x0) sendmsg$netlink(r1, &(0x7f0000007740)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x810008a}, 0xc, &(0x7f0000007680)=[{&(0x7f00000001c0)={0x120, 0x27, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@generic="0d4a87de9b3c828f379589b4158d710b2e1101145cc30fabc07ce7a7ca7750cd1eda7efc84bff4aacb4da960b2d54362cbbedf57226f3a29a02f39eab636f349cf8217418731b2086d05aaf742cc9c07183374ceb8ff3196b425efa593af488bf4c3424ab56aef17fc3a84fdbb9641c1d5f5711bfac0f41617083718d3b8f7c6ab", @generic="d18da06c", @typed={0x14, 0x7d, @ipv6=@loopback}, @nested={0x48, 0x8d, [@generic="0dda25e7738012adf6ec75b2d8acbfca8ba60487a9d5bc42d453bed653fac18087", @typed={0x8, 0x76, @u32=0x6ad4}, @typed={0x4, 0x67}, @typed={0x8, 0x2e, @pid=r2}, @typed={0xc, 0x28, @u64=0xb34}]}, @typed={0x8, 0x87, @fd=r0}, @generic="5b38b4475756cc4922cc63a9bbbac2ff82c16d0f6a4d4f63bd1f754def7975c6d93726cb"]}, 0x120}, {&(0x7f0000000480)={0x102c, 0x1a, 0x400, 0x70bd29, 0x25dfdbfc, "", [@generic="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", @typed={0x8, 0x92, @uid=r3}, @generic="dd1ef53ed5c2a45b07e1a5", @generic="9f5261", @typed={0x4, 0x1d}]}, 0x102c}, {&(0x7f00000003c0)={0x24, 0x3c, 0x200, 0x70bd28, 0x25dfdbff, "", [@typed={0x14, 0x7a, @str='{[self!security\x00'}]}, 0x24}, {&(0x7f00000014c0)={0x3318, 0x24, 0x0, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x4, 0x2e}, @typed={0x8, 0x33, @ipv4=@local}, @typed={0xc, 0xb, @u64=0x9}, @generic="6df189d4a27acaf31a275b70151a4cf611fdc1ef21c018d896d36b752561aa85d572b1eef22862f02aa324ad4b816349f10b4da30b452db508ba18efe7472cbffe14bd33723fc6cf4c51e275c3b479612967d52b7be9460a820ecd2cebc34dfeb474c832733dce0aed524d36a59778f1b71bafc261cf4c1360dc87d6d579b11c484f8276a6ec0625e0d3a944dabd2173e24c356fb4b202c8b16a52e4dba781cd8bfa67453fae00c7bdfc26ec47958c94d4a09a2bd2", @generic="1175c1363ad020c1654665e4d161dcabfd9ff29f6f7db85bf292c60a83f28f6cff7cc55865bd09d9231cd3be48106cf554435babc029d931d3882ba8a2aac49cdc2d6fa7720f34d23011b865c589a646ef5b4bf7005d8869a6a265ee2b2ef7cf466927deee6699e288e5f670aad9a1bb84375d0e72867c0ff4796d6d227669847ccf2637ccc96fd462d28f3cd8eab0dc9c5d596892479ef85c69e77b20b2af38", @nested={0x1004, 0x64, [@generic="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"]}, @nested={0x2110, 0x14, [@generic="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", @generic="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", @typed={0xc, 0x57, @u64}, @generic="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"]}, @generic="2c56abc7c7d4a21806764a98805c9178863beea76287bc29401b14d7f94a7673d60fe211c313fceec29df5f69b409336ad95f65dfe2e9e279a4f7dc674fd064a5bff6e238fb67e294c72c2433b82c73308a4efc15cba5198823eef1e7fc1875893d4ed560bb655f9f83b79c7cd6228d571136726cf7fd1a38490f45cb653c7e0d493fad4a328"]}, 0x3318}, {&(0x7f0000004880)={0x854, 0x3d, 0x320, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x40, @uid=r4}, @generic="fef45737cdf0197240c0119f0b5a43f92f97317634c97b2eea6e5fbffb6fa12d5236755a761f9600978a55da1defdd242677a4", @nested={0x258, 0x3c, [@generic="3a1d3b0331f8a095694152f9e400531f04d568b62d403dcd74fb7ce656860bb56892709676ba49ce67a78fad49d9dcb319d2bedf0db065dc75a44ed1c7c4ffa9ce760360dcc056db1209f2e78518b21e37b3cfd8255f712f64e3026204bd7acbe81bf221263e233ae41aa9bdfd1e2eef88d10708d96a00351d0bacf239c0b004eb336e965142a08f9e8a1ca64120", @generic="ec6b7356b3841237045e27809cc0377836cb8f3b41c48197", @typed={0x8, 0x95, @ipv4=@empty}, @typed={0x8, 0x7e, @ipv4=@multicast2}, @generic="47374a0d131303fbe1d4af94e0dd859c7f2bb0013f778bb9ca8a1b206fba91eefc4b7bd9b2828a470c6fd8c77697ea7e968117867b1396668d9de7e980b066719a4b90bebc5280ba65211814820786d50432693cce07d6fd653ae1920203af27ac2ba4f5", @typed={0x20, 0x4, @binary="42ca37d6d952fc95e0d94ca4a18c8303e3eeb4c676e2eae8048848"}, @typed={0x10, 0xc, @str='/dev/ppp\x00'}, @generic="dbdb3f3cad1ee64ed4af883bf75cba8ec929d95f92d25e658aa283d09bc02009502084da582fa3e5de0123e0730b2deebdb54cbd9fc78928643192d6d73c33817aa470be3176676a32e854bacf6e377382b7371aea83ebf90ecabe09f88a3b217ce5e1a47504e6f9b5f16a73754d4430dd2ebf3f88c6fa443632aa5f207e267a2aca61a5531870d1e153d3f391d6d3725f5df24c994c58c2c7", @generic="f6663f1ebb44266cc323b6c7a0886fefb548733c2d410c20cd6308ff6fb864239940abfaa748c372f04880fbdd0cd12383ae0ec8e79c7195258c329ae19ee0f51f24c583c981f74a960e3152b825adf56f53942036b369937fb1aa7b885e117464b7aa818e6691", @typed={0x8, 0x83, @ipv4=@rand_addr=0x10000}]}, @nested={0xec, 0x43, [@generic="4f348ec72542f4dc45eb52374350cd522afc38f32aee83f38e6700561759feb581b4f58b15cbea0524876de8e02f1a0692578ef6e54640909159841eb27199773f31030206760d1f4deef8ee1234f91e9b14d02c460beed21ff2a09180fa37699edfc42abb34909579d239fdaa9acdbb4ad53cbe3f84e42895d8e52b9534fbf3fc1d2ac5d017e7fd097db4ff2821c9450d21a814cdba28708ca52a60f7cf974517d0dadf97d26c47a7037136ad43a6dc7cf85852cdcd1d7b09bdd263fb39c89271b79205df1e21972d19baa7a2ae0d90395abfc02ef9afe93a3c337083eafbadd39b53142f"]}, @nested={0x254, 0x0, [@generic="467a3396450147038c37908cb9b8bdc2614332ae4aa8b9e231c55d9a9dbf45156ee3670d2bb21e3e4ecd24291af6cc89bbf70edc37b90549eb3e1be247ebba457bc9b3b0112deb00aa43790af646ce04addd341aef18cd50e0d9413ac2509ec4d5616c00afa21d8ab90e1b8519a2756c00d02ce9eff60065abbe6eb7ecb55b7e8bb4e398c1274fa976312c14722b0807b226a9b6cd7d50a7546209b6b22a1608adb0c925b2bc", @typed={0xc, 0x6f, @u64=0x2}, @generic="1b78a527acc5045658a0d9db089ef20623f05d276d713d224b71c39faf704ffd4ea9376d992585be51de5da1e6d9ca951020e7c06a51b6a51de277f599385829f17ce4bf173cbaf468b61c2f88d47af78810dcb1dfadab2270eec67611a21725cbb29bff78292a4de24e94de134c2a9dd906f748261c9409dc24a0351f32d9a88e91e3ed5add838a4b3b6673963a482e690096bfaa49d8af2ef23b0a818ed8ec1aba3a97f7e625a50f87347bb02fdc6e7d43b97a278af7df66e9185548469bf555cd09dc6eaf16da6996ee531f7856f7567d05bc2438a1aae693569ee8bd4995388aa64b33a7cabafeecf966394826016e5ac5fb81f5e42d190f24bde972a1", @typed={0xc, 0x7b, @str='cgroup\x00'}, @typed={0x8, 0x47, @ipv4=@multicast1}, @generic="81712c04ce8b2ae3b7477ae08bf6a7c845483429e4dd32609543af8321f5459ff0567f943842b00678725fb9eb9c9f6625dd8289e94c7c042f0d94d4ff8989762fd8ec2e3554828e5ba603743dbbe3f21b60ea89c6eb6492eae1bc52c26db5754166e4457bb504d85f7653ca0b1e501e", @typed={0xc, 0x7f, @u64=0x1ff}, @typed={0x8, 0xf, @u32=0x2}, @typed={0x4, 0x95}]}, @generic="0752b9e2c558e8be9f43a15417e6d00d4e49502581fb64da4422f233f6657b9f9661a5cb8ad97d9fe29599e80410f3e625b04707af16a849407b03b1417976cf67db201356521577e1489c00bed193a8037b7b256d8b902c6e10a4f84d0aaf2ff8af09a3d8908f72274f0a29c846a6235435f76d2b98d01ba235fba09d0fbf4e2d0735ac754595f0898bed93e48bac4c5d34ea1af85c03ccbecf81e0602d2a090db4b20cba4125f9fa2e10f84109866534addb91276835fcdc8b5dc1f4cb7ef27538dd6b544118af93c033858917a8329bb064538e40d676052c3c1f568f0594364101b8887683", @generic="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", @typed={0x84, 0xd, @binary="d3e167dd66f90d4ad579d6c229e9f7e11644200b2ff08fe77dbd61744f56f276299f1152d55131677a79e4aed1384f49a350a70e95d53b3d799b6427e600bbb8503e9ccac667bd04e706ab7b89508f422f7e5fa62feb6509d974fc9ffa5bb5cafe330b4c6a647c154f4263aa3c4f25d80f7e1b292cf05fd65ceedaaa5bc3ff"}, @typed={0x8, 0x29, @fd=r0}]}, 0x854}, {&(0x7f0000005100)={0x154, 0x38, 0x100, 0x70bd28, 0x25dfdbfb, "", [@typed={0x14, 0x95, @ipv6=@rand_addr="0b13274ce64e46401c71bd41d7a65f5f"}, @generic="16f82a52f3ca531cb8f06974dd2c39e4059f96d3e8e90a263d707543e4e3b4376fc6075350398a7366b31855ea458cffcd8104d720c71a25613eabed6048b17d3b30273d6fc2d3fc7332e09ba8035ff33b5bcebbdf498f1da4bca86c89412bcc1b443fb22df242cb2a5494f3526a84e5f19aff03fc5704d3ffaef7dee7e50cda", @generic="f2f42d7a37fcba08c6134d27f1bbd67b22009e6add4bec0bd56408e015a0dcf21d4f1c33c970e935a972f40bf390671333dea6c385c009dcad0c20eeb5f662245e879a08f5edc15298ad64c34fec1839bc5d69eadf7850a7b76009806ee4d2ce47edfe762979f8c7470bf997c2ea96a49129c6448cccf02b7df7819ecec10faad9fcf21603d8129b1268e004c0f8030bd2b5d7e31903bb1985", @typed={0xc, 0x27, @u64=0x80}, @typed={0x8, 0x3b, @u32=0x100000001}]}, 0x154}, {&(0x7f0000005280)={0x1014, 0x34, 0x1, 0x70bd26, 0x25dfdbfb, "", [@typed={0x1004, 0x71, @binary="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"}]}, 0x1014}, {&(0x7f00000062c0)={0x1394, 0x1e, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@generic="9705ce02b255e40885d8389fbbe4796f5633543e9e34c5929ff6cb7057d5f3314a95fdad4e155d4ef267c6628b3be50b86f1cb", @nested={0x14, 0x4c, [@typed={0x4, 0x72}, @typed={0xc, 0x62, @u64}]}, @typed={0x14, 0x44, @ipv6=@mcast2}, @typed={0x8, 0x13, @ipv4=@empty}, @nested={0xe0, 0x37, [@typed={0xc, 0x33, @u64=0x5}, @generic="560192b0d07f39cd08c4134fc6781353690281850348eefdea0ad4b1dd75ff578f68fd280d0e773519b658e678d9ea7a9c4b7f159a9ffba095fe4994ee455706a9f79ed00cd56c4eed59d7be90492acf5f67e6bf94653b9019e7e93c17db07412e2c2e2bcd2d832ff67ea0baedf8855b3de877278e5310840d72b6d6d25d7337e1219da46ecaf50e2f88ad1e96dd3e6f8d05574bdec659ede13471cc70311538065779db3b6fdb2df61c06875e4f613fc507810f7d831e43b23cc6623745", @typed={0x8, 0x16, @pid=r5}, @typed={0x8, 0x60, @fd=r0}]}, @nested={0x1234, 0x45, [@typed={0x4, 0x45}, @generic="dff9b07f080c28b7a15e97e66b98ca54907b5e8c7fd60dbaf5621d85956184852639678e2615c51be2cb50b4c7afb2dc5809196fab5e57cb15e4dde9ffced8c02f385f1eb69e9ff1696a4d8e25c1c8a45cab00a3c12243a102cb5afda41a4bdbcebe8d8920af7a5a0f780b7dbde625912d7434d06a2f9337887867d568fd8ed5c5bf039b9f571b8d16e1b3c79dab41725d42d8e493", @generic="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", @typed={0x14, 0x4e, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x37, @str='.}\x00'}, @generic="67c23eea2e287d4106222beaa3143e8833af6eb6323a9191f6a4afbbee200f88af003d17d86e3b07adf45e4a89b647a144cb0c823640abf084f80e4281b6c8ab1f1213c390dc5f1c22d822dc649eb4cc3fa300918a5d9bac7fbaee91f2f90072cf9e7f42e721935efa4a3ed6e23a903015760688c6c6a26cbf", @typed={0x14, 0x6f, @ipv6=@empty}, @generic="c0a2053cd9099ec3e2e80ddddc40733171675ba3be680e06", @generic="a068c2245ff28ba3d676a76a275673f07e968b72f45c7ad3259e4150595008c8c4b8107917c832e75ffd20bdd1b1500c8c14f48265403f4b2e8cf9fb2efc9b63a77dedd7d1a6bd7aea0de7b98a4a8f76acdb10e202392ceaf652f33a6fbb48181a4ca9b06f68a799cef7eee0b4a839f875fc985e69da2f5f42c6c27dd86e0725242119af0654c0e5e5de6be18d7e81777ca59fc4e9bd366b4a72ed1c05839c23487c7b479e5dc5ca7747c0d81d65f6b07f6e2b7fe81e7b91bb9b0955e850e9fa7dcdd30042da37365b6436c28d18adeb198a9fda"]}, @typed={0xc, 0x1b, @u64=0x1}]}, 0x1394}], 0x8, &(0x7f0000007700)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x20}, 0x40001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r6, r0) 13:55:38 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0)) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00WZl\x00\x7f\x87\xf9\'\x12\x06\xee\xbe\x10\xe6~\f\x0f\x81v**\xd2\x18=\xd3\xe6I\xd0\xf2\xa2?C\x18\x028a\t\x1b|\x86\xb58x\xceU\x10\t\x86\xa89:\xf2sY.\x1a%|\xd6\xa2\x0f\xec\x93Z\nCCF\x90\xd2\xab\x03\x0e\xb30\xff\xed\x1c\xdf\x12gMw*\xeaKJQr\xdcgb\xddl\xcfX\'\x8dj\xe1\xc3N+E\xa6^\xa1\xc3\xbf\xc3U\xb8\x96pL$\x1e<\xa5\xce#y\x82#;\x017\x8ee\x97M/\xe0s\x02\x12@\x9b\xb9T{\xbf6\xf8{\x13\xc0\x9b\xaf\xbc\xda\xbf\xf0Y\xa0\f\xb74\xa2\xb3\xa0N\xdeo\xfc\x19\x9b\xbd\xe7\x82K\x1a\xc2\x1e\x93o>\xf0\x8b\x7f\xb0\xb7\xad\nyJd\x1b\xd7\xee\x15H\xa6\xccv\x17\b\r\xde\xd3\xfc\'(') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x80000) preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x800) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000100)=[0x9, 0x7fff, 0xbc, 0xe5, 0x7, 0x3ff], 0x6, 0x7, 0x1, 0x3, 0x8001, 0x7, {0x2, 0x7f, 0x6, 0x7f, 0x9, 0x4, 0x45, 0x73ff, 0x4, 0x4, 0x43, 0x5, 0x582, 0xc, "e1324d158e60d11146fd7b4bd55e4eb7a1b595708aa45e69303984c4c3aa7ef7"}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000480)={r4, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0x7, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 949.742604][T25060] binder: 25057:25060 ioctl c018620b 0 returned -14 13:55:38 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$packet_buf(r0, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:38 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 950.143138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 950.148970][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:55:38 executing program 4: syz_emit_ethernet(0x4, &(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYRES64, @ANYRES16, @ANYBLOB="d3aaa32bd2a8d28dbae254b6ae388f5fa7c043c0c60fa41ea17f3b568bcedbceab5a40ea9d8b6627a6369c0106527a57397246b726414487c0904b2ac30f94c8a88fffa96ece28851d8b67759b1740585d478935ffda0dd7c2f05befeaeb1274c7ed876d6401dfd560694721c4e1", @ANYRESDEC, @ANYBLOB="b78a4f90ad3e21c8e4253fb19e5379cb946464777abf50120671916cbf84a255eb5e55c0bd57066957308fc0df113c883595ce7d66f4d87a212e85a3cb40ccbcc6210081112791e9dad968b1dce7115235a92ec73fced4d8b480402b580d834f451bb6d24b30e6f494bdc3ea4fa078bd83e5bc19922a84da97eb2010ae5d3c76f271ce3bf2c2a1eaf6d801f7a7935e05", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYPTR, @ANYRESOCT=0x0, @ANYPTR, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRES64]], @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRESHEX, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRESHEX], @ANYRES32], @ANYRESDEC, @ANYPTR], 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x20, 0x9, 0x3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x2}, &(0x7f0000000100)=0x8) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x101100) getsockname$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) 13:55:38 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @null, @null]}, 0x48) fallocate(r0, 0x0, 0x8001, 0x2) r1 = open(&(0x7f0000000380)='./bus\x00', 0x141046, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 13:55:38 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 950.463164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.469021][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 950.516239][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 950.539969][T25217] binder_alloc: binder_alloc_mmap_handler: 25057 20001000-20004000 already mapped failed -16 [ 950.565005][T25146] binder: 25057:25146 ioctl c018620b 0 returned -14 [ 950.580869][T25217] binder: BINDER_SET_CONTEXT_MGR already set [ 950.594934][T25238] binder_alloc: 25057: binder_alloc_buf, no vma [ 950.601511][T25217] binder: 25057:25217 ioctl 40046207 0 returned -16 [ 950.616583][T25238] binder: 25057:25238 transaction failed 29189/-3, size 24-8 line 3147 [ 950.643007][T25146] binder: 25057:25146 BC_INCREFS_DONE u0000000000000000 no match [ 950.650481][ T2988] binder: send failed reply for transaction 714 to 25057:25146 [ 950.673596][ T12] binder: undelivered TRANSACTION_ERROR: 29189 13:55:39 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000011, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:39 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @loopback, 0x3ff}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x5ad0, 0x4, &(0x7f0000001380)=[{&(0x7f0000000200)="e933", 0x2, 0x6}, {&(0x7f0000000240)="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", 0x1000, 0x8}, {&(0x7f0000001240)="852fc6f1b900c8a6c69ae09eb8eaebf916089ae91b5079e279df9e88a6a66f9c7fb79b1b4ce6dcdab0915d9680a9abe61acff9e155853890788d456f51a328ea1776e647fa212863fb53bb1133e30c27f1bb48606c555125b4ae6d336ccddadef119ea141ad7fe2ed584c706d5f33703aa3944eb3aa32f080a486aed169b3b752f3ee4b4b89233e53a6ce73f327e8e67fe2bae9b2b20a5d8cb5469dc6b594a653f3768daf645353683e1fcb925ac8a219e23ac981c0620", 0xb7, 0x1}, {&(0x7f0000001300)="52cece5cc4fd89999a4763249d6817a1557605358b42efb02a8fe3d5b08570ddca1864c19ebfe20415e26f5cfdc0b92a49d88ea82d134de4391ea257b913351f70c569cfc4fc7af66333d0daff98a57d3d", 0x51, 0x3745}], 0x8000, &(0x7f00000015c0)={[], [{@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x65, 0x39, 0x30, 0x36, 0x66, 0x33, 0x77], 0x2d, [0x7f, 0x7f, 0x30, 0x34], 0x2d, [0x36, 0x36, 0x0, 0x75], 0x2d, [0x0, 0x32, 0x30], 0x2d, [0x7f, 0x77, 0x7d, 0x7b, 0x65, 0x77, 0x36, 0x39]}}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/timer\x00'}}, {@obj_type={'obj_type', 0x3d, '!'}}, {@fowner_lt={'fowner<', r6}}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) getpeername$packet(r3, &(0x7f0000000000), &(0x7f0000000040)=0x14) 13:55:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x4, 0x13b, 0x7, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, &(0x7f0000000100)=0x4) preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:39 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x10, "f097c40b1681e10ccfa034f95526b544"}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={r2, 0x1000, 0x8, 0xb5a, 0x80, 0x7f, 0x3, 0x200, {r3, @in6={{0xa, 0x4e20, 0x80, @local, 0x80000000}}, 0x6, 0x4, 0x8001, 0x200}}, &(0x7f00000003c0)=0xb0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) fadvise64(r4, 0x0, 0x2, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000000000000008000000000000005eab8e8e7be94165ead63e391eab935f5d7039198ec65b351fe296c61ad3e4791cbbebee9fdbeb699d255c0e8e7b2a9f2b61fdf6c2002dae214cb37e36c2501b243421de2c2b28d72e663d22e6bc2f72939c5f3744fd0ac0f4c610f1ec446cae9670575ff174140d7f984f43f2e9ee2710f7ffffffffffffffde677d04ff9d1a7defad22c7f0d4a075dc6271caedd728c73da63bed1831a9d046845525ebd784005bd4c3aaafc87007b42e9dbc31ce4522866bd4d1a09417841819eb15efd52fc348ce1fadfd8641c49a624e02c7f19bc890c592e54cc0fff7017837dbfaf16700", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0857e6cd73f2bede2be14194340140", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)='\xceppp1.$\x00'}, 0x30) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000540)=@buf) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000000c0)={0x2, 0x400, 0x7c, 0x7, 0x9}) setpriority(0x0, r5, 0x100000001) 13:55:39 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:39 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket(0x10, 0x80802, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) bind$netlink(r2, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x410002) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)) setxattr$security_smack_entry(0x0, &(0x7f0000000200)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000480)=0x800000000, 0x2) listen(r1, 0xc5) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x2) ioctl$TCXONC(r0, 0x540a, 0x5) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x113000, 0x0) [ 951.189874][T25308] binder: 25301:25308 ioctl c018620b 0 returned -14 [ 951.269014][T25312] binder: 25301:25312 got transaction with invalid data ptr [ 951.296323][T25312] binder: 25301:25312 transaction failed 29201/-14, size 24-8 line 3179 [ 951.345555][T25312] binder: 25301:25312 unknown command -840542456 [ 951.365860][T25312] binder: 25301:25312 ioctl c0306201 200002c0 returned -22 13:55:39 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:39 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) close(r0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000011000/0x2000)=nil, &(0x7f000000e000/0x6000)=nil, 0x2000}) 13:55:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10000000000000, 0x0, 0x0, 0xf8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x3ff, 0x1, 0xe9b}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x0, 0x0) 13:55:40 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee01]) setgroups(0xa, &(0x7f00000000c0)=[r1, r1, r0, r1, r1, r0, r1, r1, r1, r0]) [ 951.779840][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 951.984703][T25314] binder_alloc: binder_alloc_mmap_handler: 25301 20001000-20004000 already mapped failed -16 [ 952.002945][T25314] binder: 25301:25314 ioctl c018620b 0 returned -14 [ 952.012529][T25314] binder: BINDER_SET_CONTEXT_MGR already set [ 952.025176][T25314] binder: 25301:25314 ioctl 40046207 0 returned -16 [ 952.032090][T25312] binder_alloc: 25301: binder_alloc_buf, no vma [ 952.046457][T25314] binder: 25301:25314 unknown command -840542456 [ 952.063183][T25312] binder: 25301:25312 transaction failed 29189/-3, size 24-8 line 3147 [ 952.073210][T25314] binder: 25301:25314 ioctl c0306201 200002c0 returned -22 13:55:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000012, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:40 executing program 4: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0x12) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) lstat(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x4, r2}], {0x4, 0x1}, [{0x8, 0x1}, {0x8, 0x1}, {0x8, 0x7, r3}, {}, {0x8, 0x2}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x3) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r6, r5, 0x0, 0x10013c93e) 13:55:40 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x80000000000000f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="792a627300f60000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:40 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 952.485586][T25447] binder: 25446:25447 ioctl c018620b 0 returned -14 13:55:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) getpgrp(r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) [ 952.584125][T25459] binder: 25446:25459 got transaction with invalid offset (0, min 0 max 24) or object. [ 952.603199][T25459] binder: 25446:25459 transaction failed 29201/-22, size 24-8 line 3241 [ 952.674666][T25459] binder: 25446:25459 BC_INCREFS_DONE u0000000000000000 no match 13:55:41 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:41 executing program 4: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0x12) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) lstat(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x4, r2}], {0x4, 0x1}, [{0x8, 0x1}, {0x8, 0x1}, {0x8, 0x7, r3}, {}, {0x8, 0x2}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x3) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r6, r5, 0x0, 0x10013c93e) 13:55:41 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 953.282215][T25459] binder_alloc: binder_alloc_mmap_handler: 25446 20001000-20004000 already mapped failed -16 [ 953.303692][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 953.311209][T25459] binder: 25446:25459 ioctl c018620b 0 returned -14 [ 953.319613][T25553] binder_alloc: 25446: binder_alloc_buf, no vma [ 953.330401][T25548] binder: BINDER_SET_CONTEXT_MGR already set 13:55:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x1000040000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000180)={0x5, 0x2b266efb, 0x1f, 0x3, 0x6, 0x3f9}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xf, 0x1000, 0x61106799, 0x1, 0x1, r1, 0x6d}, 0x2c) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') accept4$bt_l2cap(r0, 0x0, &(0x7f0000000100), 0x80000) [ 953.359473][T25553] binder: 25446:25553 transaction failed 29189/-3, size 24-8 line 3147 [ 953.450369][T25548] binder: 25446:25548 ioctl 40046207 0 returned -16 13:55:41 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000011, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:43 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x100000, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@access_client='access=client'}, {@access_any='access=any'}], [{@uid_eq={'uid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/binder#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) setxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f00000006c0)=@v1={0x2, "43c915603785d4db51"}, 0xa, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="086358479d400900000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 13:55:43 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)='\v', 0x1) write(r1, &(0x7f00000012c0)="288738fce21783209d160bb964ad3b6c1a54d1779ea985ca5b24cf0e7b004a7982dd727cd7bb02e50ef2d6e45b090e2f63c4ec49f40ff2844a4e539658981ef58d387c6fe472c857ab5e840f3982b0d6f9dec37d3f53e3d0b627219665141e2755740c7af76b251f6b500fa82497abe18ba67a34b980015e7e67302c39ff29db622a38f72772699f01fff51891322507f0c053ecd4a8257116ccc3d5ee6fc21cf03ebbc6c98f8a2b4218aa41263f91b3c3118ed7ef855b7a399a7110890969183e56f06c6ffe8fccd5ca451364f914e6415dc3aa8a919a7e71fca02c0986ea9d1047a6f0dad4d907283d95719efeb86778fc0e737606a6ed05fa63338593c9b1169fd5a7fc0e15d50ed26667eeb0d7de6af90ecaeb1361a025ace3ba9cda624226821bef66e1c74ed3871b8ec37a54dd14da006782e149769b0630abde0ce7cc1e5e304f4292ee0a269a4dc1cd00fe90673abc7d39743214bd5e42cd2000736c6451af826f3ece67c9e8d3d391fb207796baf89f49cd2b999e84f0435c4bb76a9cef4a66b8e16bd1e953dc7c401754e9e4a82b7b1fc92bb5539b1dc654cc28a7dd874c1f68f251f8212a4f49d4962b59046d150326d07759e7f21d22c2478afd9ec81585e3dc0936734e45612e3156f5428382efb724836a6a88480fdf9e992173fc50aff8215805a5455ce84180ab2c74a9d228dec584e0c6b8308bf4c3213ff49bb9ff1a1d059053510b61fa873224020694a0e00a819f9940395c88d0ae207c11630cdb0364067dbb0eb4e3d1ad77fa5d24a180e30042c94057b2cee81547bef82b1a35a4ff8080d9dc2e8c52d5e252e4c092d3e9d0e35457f3239a9b3627189f369f95bc94cf2bc817a77a5b6d8ec036c84e2cf4082a8b98f64fd4dc74a3550836d05b4cb3398b74684b4c6a7a1b2f89383e76ab65b5203cea35155e0ce12161180feee820d613d7ab564804a32285a0048c724cc2082043c0b55ef2be81ce11e80c6e4cefe2aaf69a41b96e2815a319fdcf05e53a889da37b7f61570db9207a7baa6120c384695fa0da4205a58ae1c6e824571e926ed1691b4b57039d9c6a2f709cb768f1c7f971fa56ca8676e4518372a98475973e2ac461946a64a0707bf372049e70d6576adf549d569db6ef7d40bced9d7582d5031de8183ace6fbdbfa04dfe7559eb29805eb1f5b087508d43cd6ca221dc91057be40d61c25603ec82288cbda1e9bedeb5bbbfe1d37179a121276a22b2f65cb97c0e83b481dc9e9410dc262f2ff342dbb2a727baca28b9897d5570b8b1a4c34e3fbc204657343699795fd87ad064b68c506dfeb73514ee741cdedf518420fcde3556a4cc57bc710873352374ca41b38bf0f31652b07e69543bc7b032d999e58e669a3af68d70d9c504ee7fb5b071b624db7a20bb96b640f2614bf69a738dd516208625f4a76aac82112ee65017a917b39920b2efe2835da10a7f33966c2ec2d8b91693bd9d548315ad660856858eac0a8d70268fc6c159e2f4fee2292922da41dfb3ee333cf0be29eccdefb40ff67b271b60052999e6fae46792c92cc4fa3ab2e1b0eaa6b9d2c74429fdcd86bf266ce456864508e9f47b05f316c86cc72288571fef1748b28291f6b28433462517fcda758bc267862f5498f2357da61330350c1c0959f5a2df707781a970a65cb12544281bebad982d16897e3af1ab64a1480ae4439098526c3b0714527e740d19f027a64dfe1f27c54b313e3c834f68d36c3e24e743ea2e2522be5d71970c7f8dd37103cee68661088b084f3d2cf6601627d660c5af3519a3976254795be4829464e9eecbdd6ef94a8c322315ba599cd9b137f759d610e1a0042cb3f28ca2e35c106cce53574d2bc66a272eaa350e3bc0164aae08ef87e7d47a7a5d6fa8444aeca644a0808e3039e17aa0f0d4f247d2a1654c9036ac5d2d36826513d72e8095b5c13324dc06b52d30b718c89ba651fc576597a9b71aaf6c8965f6f9651b67dc9e7af336738d6de668720e366e72d1bca8ed00f85da3fc35f5ed14394034f300fe59b56bceff0a7cf26db445ee4b9182eeb6a028357dad039c1998b20af792942280fec5a4256409cc0d5c2e7f75306a6ad36d362a0180fcc5595c0e646cb243abae1ee64ba10d13e7af9f14ce2a48b042db122d23153dbb98a1056727b8fd5b16a378445e7ce54a0818b34134cbdf057f7299409397352b6a520068478a859b5065a22b0dac868f4bf53ff36424663bc8ea7706094ae5bd048c6e15ae5fe680f2e4f2c4cec4863d28c7dcc5540a1cd12003c6cac675359be5648bced62509f0ea55fe6d43268ee08bd88ce5476e9baf578e7a49b799a40ab046647fd0f12ce0a862f207cf47e171c66c5af5db8f4489b6df5aa625a7c95da4915edc252381c737cf0860fe863ce230da55a6026cf9ee3ab13b665574b9dc443796b112740bb8eed30d266d3d66a17ea20caf7a76bfb51d7a9feeddecd7e79bc2c0e162c59b48674448f8f89187af505e4b918c0a7fe379b7cb283f4144ec835f3149847486f9d586032d18d0ad6bd2211f4059d31c9fa42187bbd5f7cf5185102c06bfa8d8f9f6a718e63eb2bffa769c903ceb97f258078f8a896ef8daacb10a53b08b70a3f30f3aed45ed90abed490cdbac42a5c0fca7c945b77404dd29d58a1c5621398db0350af192a8356e7f281888a18930c2e3a2214c584354072fe5b78b7f71e952f7bfc35dcea104c56b74d7740fb4df2decf7f310fbf7572eb5eb40c9ca9d1fda3030fb80da3455e0aad7458232ce6df5232d84603f0c5bb4736595ee2dd58301afb06dd5176d0ba1e9935c0031586471631d857cc5411da9f007759b72cae2535d3010b0137b4bd23f59a9f82f5334824335673ca59bf5c67d9d65988bc6800a7e3c2f23992849be375a37a41f9515f675b075ae39abc6d44a856bd32937ec673e1fa2e72be039009c5fe23fac7cef1343cc63dd43e7bfae8554d2aaf5a89edb9e072575d62a7b0bc25b511e21dad320e5ce2167115b2b4b448e4f7402644000d79f200da434594ee64189cc5021013f0c22cf4a842add61d9d22881cf2b0ecb1249444c5a04cae4532524abefa3d7251be236ca661886c2c9f7e3ed236e9b5f20d1e9b7dfbf7d95567dc8061dd4b9f1fb34f6c5464f69f1c60f63145958d85de0782bf2a3659b3c3f4bf27b359b7032583d2bb78db11115522ff8dbd023854419c5108d4c0c238e705c616b76020e6b0a3d8ab6d5ba44a977d1b7861e52d5fcb9133ec83b2cd8d8f757f20c9bf8bf6e442f7795780de126026ff0e9b794a0cee549bd9c1b76126753ec921b4ea0f7a285b8be90c518b7209b5e20c3a17217387b88145cd6d46f6fffe49f64370028815455d24eb4186f688f218c9ba29661cdf66cd24f80e209961e65ae8fcdd680dfa4f827dbe29b04abd4f66e908bf9fafa35b33bb58937e9d8d87663656d671d67d3a1d3cdba53df77965d78d5365f47ca3455d07cb7f6c4740cd6d28f2fc82f9807ea16a12be49da66be1991e2757616a260525896e7cbee919df97049d891abbff01c58436f86dca21f7d771ec1eee68f21c9bf95892767c8929a40790af51723c0cd60b84a43bd97ab0262b0996dd3f9b05bd64eb2b9aef81bc53ea558b48f8293e737dd496e14c3d8d451fe11ff96e1fb2058f0284afcbb95e6f22421b0503eb6ac582de3920026ec98704e530f354d29569d10c10ebf77a45574f17d5f45b6de3c4baf7cb9bed0c657c2a2ab70aa7be84796c76fed6a6c2c7c6ac30b88dd77e6c1a0bfa46b6531b8a39d8c6ba3ebffe47df53bc1c9ca00bb6351a0c7b0c3dc699917e9d49e56f2cab21580e0c42bc6ff916aaf8365fa1d3e87b9ab00a802d9955bde2d7e24208035b4ad5f36fc8063827f7bbd6853383e8f5ade93f28966e8cf550aab34bde98bc42606730ac552d04444d208900dcc1f046a3c615c443094a29e60112df5440746d17c8762b0f724325c4b5cb0139925642b644ffc287d87392cb04b4541c60fee4d1ac422de92871553017e370d320972f087abb525152ac4a699241149901fbb13a4045c85f1fc9fcf7128f02c7915fd034fe07f49cfd925c4c3f8c50ba62c831cc76a1ecd1ae6eacab00e7d0a39245fe711823ea254fd73619f2795724d815b2b17d40d18672203b0836820dae093fada58879be5cc378bdd8a46b743d38ff2b7ad78d24b388c5dbf567520db8e453cb0f5859368d97124247cbc2679eefc360831e3012d876996ca43ec4e079606eb1ea18ab744e6dfe5f03da56da30077a578539e33a22cc22c7abdae19d23b60e1fa7cdce4e1428ced81108736878721e681bda265d8f775f1ba69ef8d754601646fc4690a5c3165c5ac7f09a68a8a573ef60de9b612caedd991b3981723e364095e96e355de9e92937d9660f513bf5186fa1f599a9ba446f4744c224b891232ba0b9caef973a9b2c9f077cb6cadb424185fb3d94e43338034fc1376a26403b1f1c1c2102e9e5fbece12a7f96c81ce01f8a1e53371c584402dcc61c762823de3785d4f39846d572dce6bee76fa3101dd2c6b28bb96c132f58e18fe4b5566bb77e567a91ad817f216b8a95ed32edfac449cff63a0f64de4c1b8baebdc9980d60b68a0cb3d6bde956e2b4789f847a3494eaa88ab1d2ea344db4deb2bff7f27b3bbeb07292b4f078e965b3454823c60c4f612f78b6d9110a8321e582093ed30a4b5a9a03cbe5a68a28cd1cfd7d813be057bb601cf0b559abfb3e53159d75cdec909a21d9a00632d0b9a42d43cf845f0bfa79a0fc191b8a8aed2d77576367eb122b3bbc36b6b9dcb3056d564957a179f9059042682ff6ff097ec1f055d27df05c3184f8cafb001bbda7cbce54758b87873e1ff0c95f4fec1157501df90df06ae9b4102805d9a5886f058f6b6e07310f2a1e9072c51abbf8659e6ed4f94de937346fed06c4ba7f566aa58ca4211c356fb934e94acd1c7e7e30edcd168a7dbed6803fc3bbe8192435b3b582357d2715ee71231267084d845c300a91ebebfaac338473429030036f2fadac0b8d831e33352b7a673987ffb667783ec45b1b9856dbab601b7188d1ed67a91cc568b04570dcc2cdabddb834debd1c2495715ac15efa9c4e08a679c86404c7aa5b412e6c78a5d567e81f5abcdb29fef3804f07246ca815191a216ecb672fb359c53f7fcbcbdf5e319456965c134854122013f4422ef5da0f4c8c88f8d4ba1565d888e1ef3b2595d020e5d6655d2dc99a40e607d5e8cabec8d4095ffebc38d53b8e2a83085f2b5f0124b11d9f8360cdde4cd32d93c0c23255bf493db5b2f694913d7551b018c57976f5e944599eb38e6df54ddb8c4375aad951066ccf0564791dcff7962145dbb7a0cae10f1f367d7ab6924852f35039cda9a8e75ba09359cf0df050d25a9ebc50573af41be96f825f058e9b7139759feca9d1e1cb34813589e3c95a494e85509ff52f11ac9735cbb4c5a773267add7e3d7858b7918ef2c713fed90d11df3c928f87f693574bb299527b890d00265ff3e193175ab20fac531264a7c6982beb79f8774993d748dd71b2d43e4848be9fd52bb8cb97227b039e71212e1d91767d0e4d9570687d3e5280b654b9ee2656bc28b630f2fa86dd972ee66dc884b68c34f3c43768d1227a89472603b2e68debf471569abe5a68d67b37653a35962acf0cb9c7c297277933b4bb7456829248cea075f6fe6ec0e444745c5a5a3c49c26713cab4cac91a65bbbb17bbca3ac805868c2e90c7c8d0bbb5a8a5820921015083037a585e1b6d0216", 0x1000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) close(r1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x101, 0xe, 0x4}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000180)={0x5, 0x7fff, 0x8, 0x80000001, 0x7ff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1000000067, &(0x7f0000000040)=0xc5, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x8, 0x6}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 13:55:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x100000001, 0x9, 0x80000001, 0x101, 0x33712a48}) 13:55:43 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000013, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:43 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000011, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 955.543994][T25705] binder: 25694:25705 ioctl c018620b 0 returned -14 13:55:43 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000012, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 955.645461][T25712] binder_alloc: 25694: binder_alloc_buf size 2305843009213693952 failed, no address space [ 955.693911][T25712] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 955.698086][T25715] binder: 25694:25715 unknown command 1196974856 [ 955.726102][T25712] binder: 25694:25712 transaction failed 29201/-28, size 1729382256910270464-576460752303423488 line 3147 13:55:44 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 955.771402][T25715] binder: 25694:25715 ioctl c0306201 200002c0 returned -22 13:55:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/148, 0xfffffffffffffe89}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vxcan1\x00', @remote}) preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:44 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="d0ab1d5d62a777326f2395fbfbf44965f6552a7649e9b9d6f8754886cf124b6d27930790fedce4e33455ee6e9bba10a1581696967ae2905ea7a2473d389203f9aad641105de7edaf56f09704acb807ee0b61175a04dcffaea222e26a5e6a02b6da28724f0f8c9e70220cc3ddb738abf946b2428c8094ea80b4920a78cacc32f8d7f8a6112a5a09803b8d1f663d3e4818a9c10efd66258457744ccd0e51e3e39489edbdfc20ae9e5c574836049db9943c", 0xb0) preadv(r0, &(0x7f0000000000), 0x0, 0x0) 13:55:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x353, 0x4) [ 956.252887][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 956.268478][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 956.311360][T25712] binder_alloc: binder_alloc_mmap_handler: 25694 20001000-20004000 already mapped failed -16 [ 956.372695][T25837] binder_alloc: 25694: binder_alloc_buf, no vma [ 956.372769][T25715] binder: BINDER_SET_CONTEXT_MGR already set [ 956.483184][T25837] binder: 25694:25837 transaction failed 29189/-3, size 1729382256910270464-576460752303423488 line 3147 [ 956.488002][T25712] binder: 25694:25712 ioctl c018620b 0 returned -14 13:55:44 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000011, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 956.532734][T25715] binder: 25694:25715 ioctl 40046207 0 returned -16 13:55:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, r2, 0x3}], 0xee, 0x0, &(0x7f0000000480)="2f63b62b20738181745bb73f959c4b0fc8043640d16d9e0fcc8e7a457ee1b7f53738dc20b6e537267641a8d8133d8d079f27dc904ee63a7e3ce044d614338c4589fd0a5081fb1aa2a8b6fe0b5bb8e650c6b870def29d76eca7e454b2daf1d40e5065183397f0b6738d5b884df0d708d9efef29903d7532839f56dafda8aaa8a28f595c81e707cd617e36079be40e88d76abe1422d83a98d12650cd84d7d2768b2a2aef4b946c4fde0824e6f8eb859e006fbdca2a44286a40dad51f475c4936eb5b3a5e8eb14db3a09e7bcb1e0ed0b0fa82871a09cd15135a783f99766fa4b5a21d56eb80e38991770cfe4a615462"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:45 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace(0x10, r2) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x2) [ 956.840524][T25850] binder: 25847:25850 ioctl c018620b 0 returned -14 [ 956.842983][T25848] binder_alloc: 25847: binder_alloc_buf, no vma [ 956.912658][T25848] binder: 25847:25848 transaction failed 29189/-3, size 24-8 line 3147 [ 956.948842][T25850] binder: 25847:25850 BC_ACQUIRE_DONE u0000000000000000 node 727 cookie mismatch 0000000000000003 != 0000000000000000 13:55:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000014, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:45 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x399f1736, r1}, &(0x7f00000000c0)={0x5, 0x7c9, 0x6, 0x8, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280), &(0x7f0000000180)=0x3) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x10000031, 0x829, 0x0, 0x0, {0x2803, 0x1000000}, [@nested={0x4}]}, 0x18}}, 0x0) 13:55:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x68, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1f, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e20, @empty}, 0x11, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_hsr\x00', 0x7fff, 0xdb, 0x3}) read(r0, &(0x7f0000000280)=""/7, 0x7) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) connect$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="00000000000000003a4f4c7dcb14604be9cfced717fca26ada53a54e8be8598d708a4323b8a3cbb2ebb45b"], 0x0, 0x0, 0x0}) 13:55:45 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x3}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:45 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) userfaultfd(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) bind$vsock_dgram(r1, 0x0, 0xffffffffffffff78) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000300)}}, 0x20) 13:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x399f1736, r1}, &(0x7f00000000c0)={0x5, 0x7c9, 0x6, 0x8, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280), &(0x7f0000000180)=0x3) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x10000031, 0x829, 0x0, 0x0, {0x2803, 0x1000000}, [@nested={0x4}]}, 0x18}}, 0x0) [ 957.435279][T25969] binder: 25966:25969 ioctl c018620b 0 returned -14 13:55:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x13, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffff9c, 0x4c07) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x2, 0x84000) fcntl$getown(r1, 0x9) getpid() r2 = gettid() r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000000)='\x05\x00\x00\x01\x00\x00\xf8\xffte\xb4\xd5\x03\x1a[\x00') getpeername$ax25(r4, &(0x7f0000000040)={{0x3, @bcast}, [@rose, @null, @bcast, @bcast, @rose, @default, @default, @netrom]}, &(0x7f00000000c0)=0x48) semget(0x0, 0x2, 0x200) preadv(r4, &(0x7f0000000040), 0x0, 0x0) 13:55:45 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x10000, 0x2}) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614e3fde3bfa0e0207e1ca9b4c71d59da30f3d115c9c7c58fb0f2b1e52135ce1a7df330a74f25a3625e9f11ab0df9f071a8429992605ecde181c3cf7a8e08f6ca875e8259a985ff0989", 0x100, 0x10000}], 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) 13:55:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x100, 0x12c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="03002200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x10) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000240)=@can={{}, 0x0, 0x0, 0x0, 0x0, "e96b4b8fdd5fd9b1"}, 0x10}}, 0x0) 13:55:46 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x7}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) [ 957.679086][T26089] BTRFS error (device loop5): unsupported checksum algorithm 22813 [ 957.701341][T26089] BTRFS error (device loop5): superblock checksum mismatch [ 957.756136][T26089] BTRFS error (device loop5): open_ctree failed [ 957.974709][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 958.225554][T25990] binder_alloc: binder_alloc_mmap_handler: 25966 20001000-20004000 already mapped failed -16 [ 958.241189][T25990] binder: 25966:25990 ioctl c018620b 0 returned -14 [ 958.249710][T26207] binder: BINDER_SET_CONTEXT_MGR already set [ 958.252621][T26209] binder: 25966:26209 BC_INCREFS_DONE u0000000000000000 no match [ 958.272503][T26207] binder: 25966:26207 ioctl 40046207 0 returned -16 [ 958.272560][ T12] binder: send failed reply for transaction 730 to 25966:25990 [ 958.292966][T26208] binder_alloc: 25966: binder_alloc_buf, no vma [ 958.300481][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 958.314281][T26208] binder: 25966:26208 transaction failed 29189/-3, size 24-8 line 3147 13:55:46 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000015, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:46 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xa, 0x1, 0x7, 0x578, 0x0, 0xfffffffffffffffc, 0x818, 0x1, 0x2, 0x5, 0x8, 0x1ff, 0xf7ef, 0x2, 0xc0, 0x2, 0x4, 0x5, 0x7, 0x30000000, 0x7, 0x81, 0x1000, 0x2, 0x0, 0x10001, 0x7, 0xfff, 0x3ff, 0x3, 0x2, 0x2, 0x200, 0xe9b3, 0x1, 0xffffffffffffff4d, 0x0, 0x2, 0x6, @perf_config_ext={0x80, 0xffffffffffff7fff}, 0x4, 0x4c, 0x2f89, 0x5, 0x8, 0x7, 0xb684}, 0xffffffffffffffff, 0x6, r0, 0x3) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x80000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @local}}, 0x80000000, 0x391}, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001380)={{{@in6, @in6=@dev}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xbd, 0x279d}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'syz_tun\x00', 0x3}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x6c3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x40004}, 0x1c) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x8) 13:55:46 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x300}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:46 executing program 5: r0 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r0, 0x94d) fcntl$addseals(r0, 0x409, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x40, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000005d00)=[{&(0x7f0000000180)={0x27, 0x1, 0x0, 0x1, 0xfffffffffffffffb, 0x9, "a3343fac19e3d24ec3b2be259a97c1713de48f9f71cb023a62c55cebda060b034ef4acd46b91def4ac2d85dda55d42fa54a8b9392c78012a87b54cde863c7f", 0x31}, 0x60, &(0x7f0000001540)=[{&(0x7f0000000200)="a41770e6647955ff40038ba909bac8a5691b1b188ab07f1c89c19a3c9925b4f1d803a8736a65855ae4dbf4ea80542a796eae0442a45ad46373587332211f2d0648dc4f6656952a0dce94c55e45cbfcc5e72672f158ee6b2ffcbd37b0c8290e4a6b6d", 0x62}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="0531b304080694552d12521dfa588f8db05c5b34213783816e56ca071fb2d371f91534e729ae52dd7eee2af7aa34eaf4ac7919bbc0f4557e20a52fe6b5a04fe7b74613cd0641afe7a271e5e6a2a98c3246624b4b591232a9315654dae0a0cd8663f43443a7e269e7d2b9b48a041b3a5c513cb7fe9a423316c83ae905732213d8", 0x80}, {&(0x7f0000001300)="6cddb7acaa550f1632b54800279acccc6ecbb6ca2a7d7cc65ea783f002ef082e65f86c1f404c138ffdcc5aeb912bf863e73c78299bbe629ed43a0ac67b2fdf29ddf30279b19f41f0d7e9a87a9759bdb760e3689be0ddeb3e9f42f3df1182e20c204ef2d2fe410c649f7260072d874596b4ed", 0x72}, {&(0x7f0000001380)="e9a02da72263a311f6fecbaf26b44f0650ceaebbab22cbd1d3722d00c7ab1c2bbf2c43960a0360f8f1ab2dd2d0340f41163edf2ba9aea68569869289b97a55ac29d7fd08240c1ca7916447eee66b29f3d4100c8823fecde7cae7dd577a520eb732309bad30caf5b18d29cd4835ec09ad5a2f34d62fa8fdcc3e1877f8a741c5aa310785857ec4e13159cca6c90fce", 0x8e}, {&(0x7f0000001440)="a5d44b080eb46e9eda636f9f91331bbeb7a235104d49d00535f808362414bc3e35451d3121d14abe77bc77bde4a012729f400597ab7ebf7ba2aba4732e54a06de872cfc3d50d7924ff37f5c9a727ff005bca15a6f9ff9fba5a1903efd12617a54b38774de710b870c960d53ab11ed713c6addb21e233a32fafd3bb3c64ec5cb6851fa5bd8ed3fe1e6c734201ca658a414cf5f7a294059b840fd1a278e466125b32177a594bc28a653e061130f36fc3f3cd18babdb6e9014aaf7cadbd17e932fb6ceae687e56853af", 0xc8}], 0x6, &(0x7f00000015c0)={0xf8, 0x11f, 0x100000000, "5d0fa83bca854d9505bf57a50de95eee80b96e7804243754880219f6e27200a0a7f91f44985cff2fba69b88daa728767be654c7171f78c8aec58f66bb5b2a76ab04f78d68da39e44df9c8090325080511b69ce4612921026bdfea8353ef3ba635927cb72cb262a4421d108d0fb33a045e6a6451cdb56eee6f2d6ae5a6c976c14ac76527d0e178e805da6219a6b87c9e5b9bafca3946caadffa3ee900c09e2f59425af26beba3c47a350c745e9b92960f346500abbf555a59af830a03de484966457b7b05cc3224df9f1d2b5e583b70b40a13c543fd9ad2596e385c456c725e540402f2b1cf"}, 0xf8, 0x1}, {&(0x7f00000016c0)={0x27, 0x1, 0x2, 0x6, 0x3ff, 0x10000, "5345467eb3917a3a67680e1c589966b749513abb2e238ffa84b6e350e0022e88827d75fcb91afca6481c9665233bd7114af1f2606dd2e75821827e7faf89b9", 0xe}, 0x60, &(0x7f0000002840)=[{&(0x7f0000001740)="ce0fd44e0db9ff98b63e2516287647683fcebacbe74eb6eb61a51fd1fd7a50aca9090203619ca2fdb01338720dc1b0a2f7f4a6444d34cf070ba6e0911134b04c9fcea77726cf6390ff09ce763ad8da89db", 0x51}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="8d29b8d3f56eda7807ede176b5f552b575de26ff00b86170c961ebd9d381d45c155c96258992a300a05b7ecb1ab3a1500c7eb9e9c01732916eaf7f36b3b112efa29f856e32d03c9a2a3bec3866", 0x4d}], 0x3, &(0x7f0000002880)={0xf0, 0x101, 0xfffffffffffff001, "48a0fe7acf2385203320a67467ad7209160ae5419f1e049f68c5a872a233f6e6c8bee3de6c3fb312150f1fb97d292be465b27a966998ff048331c159c02033114df8e36d8dbe92dbdda775fa5187f7aa12cf596ee16b3180de900c0d4785378d850d69aedfa4722ee0d13bd3e76cbf414b91563a48c2734f7f6aac2a49471c1e83cb3311f98be2abb75bcded11e1887b516731bc4a0e8c78d9b8c6a1416af162a04757757e8e8ae65cc4f59360c974df43dc6bc1946d107d60310a99ab517dfd83c8349eebde108c358e42a2717d66a018c933c52d1726ff642fb8ad05"}, 0xf0, 0x40}, {&(0x7f0000002980)={0x27, 0x1, 0x0, 0x4, 0x3, 0x3, "867aaf5a381f195650063ea4914eb930d745207f1ac9e85040366ea8db46e6c4b0dc0bddad1a4a54bd7377b56c4d4e13117e2de3afc73e4f7a5a180d8ec0c3", 0x16}, 0x60, &(0x7f0000003a40)=[{&(0x7f0000002a00)="732eb4", 0x3}, {&(0x7f0000002a40)="98f4c559423ec83a131094a452cf7caa96b8fee22b3b8c47ef59365782ea814ed50f660023fa82ca81a32bfbb9dc6aa788a2c3a7eea56105177dfc4b3d43072844720a3eb7686676c7bb10e2a83333aecde72ca7a29e0fb0a4b3dcf1f4afec8f2462aff3ff32107707dfdd9cb2b82203db739fdb5b52d5eea3f0e61de6b08ec15014ca7bbc6a6e71ca33064785fca45121a381da6b40185f8683b8c10289d3555d2926efb02b45906b34f972a31a51877c54deae2119f5eeb1d453d34267f064508bd48e3476063e5df2bf8392c31ff401ef26feadd75cf73b7e46861f2ea726914e6b56d3775c37cd9edebcc290b4e094c2b6e0efffc84bddcb5bed3a9a1155e8bbc0ca3d70fb60ab4c59e692911d64bd13c4e8de6372e9e1887842165ce6878fd8571ce7caa452f061fc694e68b23f32b47ca5b3360f91ea3a2055269e421c221e0b5ba6f22892c6703d1d7e4e91000bb200c9d193460eebc10c97d9524602073bc898d8237c9fbcb1fb62288235faf8d34153662d13e1b3dac74a5cf304b45915bc614faad13f9ace392e3a043459f4610e555e6822ca3eb745e8cf004d0c82deee9067e41ad02627c523b3642a1aadd2a8b47a96880986ff95c2e7835d2df33ee94bbf9e7927f84a7fa45040eab998ef77b29ec0ac948100643dea32dbe827c61d3d24ad3b8cb0e883cb21df08d792e64b6dbe31f2a3f080fd162902e83271b5ba1802e742c226a920e168e9f54a74011110d17b158cae657c312bb310372ea563051f4d0c4d2fc74c281e223993a1da2d158f5f80109f3f740de87b4c62067003f600cc449e51ad39cf2e150f45f871915611637535953a9ef1f2430c29f4d00b430799ce5a1f80665e6756fddcbb061ef3d4656a6bf9f3087d4ca9d00b0a5fd4654de8f89485ded58026c69b8c561dbdaa06b0afe9bd97197772422c79ccff9fc5bec4dee9854f9aed1c02ae1af3af85912e7794be840219bad2a0f34f7d5cc6a7e78a0e8fe8649c477b0a8739a19319449e958c1d17de686655df023acd636a331d0d3176c78747ea398e83fc8ca9a1897e3d0dc20f69a98555f5346501b9d5fc9804c25ed8e9f3a0317a8a65874f64db32f8d5f396797d6348584d46d648904687d7ba737f6ee90ff44aa8122755a410dc7b4447cc764e6b56c648cbe20c31008cec964eae7efc379e9d5be025bd50f2f6c8172169ac9b7469406bf700b83bcfc60dc32181ef2031820fa8c93db9b9eaa77a82afe297c37dba4ddd8db5132305be78b75bcdf55c57e6ffe902bf8605879b5d79e2cea634fc1f69e2bdab6178649d2f437659fab498c50342372bccc8715805d3caaa91e773406205b656bc475db4ab1651708064413c089aec22beb02cd4fa6cc16ab0aef83b7fbee04f5df469ef70d526eb510da36a8938f79bdbb8c89c3fd7702e0c6f16ea879b06da7b39096d980e33ead58c5dea7f0fe238a96d4f92210d495d6dacdb248ea77da3709a2479ac20ce3e161ecea43211e6354dfb2f06346b3c73e4abd342cf33cfd94492c8be1807f52f4f416f4b5f9ddbb12d7af0327f9086ceac94253986d0cc96dfd553da388a3ecb8a8d035d5f8ae0f912c80c4bdb997287fe214ce59347d76fa0bed837b3c8b1762ebfe1a0f4e17f67e228b3643f88579a420345d23261f073c37c0554dffbcb90087562122eaeda2e3db88ac71364d9b0f8eca7dcd22d37083610d00a265ff24a11f04eca3d3fc1bd74af1cc31f16104479feb0ea0d13a44bf624fe15cd8ff1a03f30d5bfd60c15fe0c08fb199e5992be05c87fe5960304f63ba1778d7a285dbfc8fa8b1999a28eb6600c688102579336038f5ffdddce8c3efe5055daa1b0f6aef9b528e6abc84811bdb538ba06c938ada67c73ada66ddf4aa081183d38ab33c4bacee462c6ccc0797acd1006cbda175ed9d5976480c49e94872913f4f5dd6870c24dc59fc3ec581bfabb074cb02b21b849eed55caba66128895850e3054e19e0700d15968da66e2c13b19b537cfa9427c49a16a7e8c0c38c99e2b59ffb8d37d69679a2e22d1386adc3b673ce6c0165772b7cdfa27d25af936a0d7e978b34e5c8d1296fb6849c6af0c120b74a8dd641890d8eab9ca8cbf4d4e07a6e947b7ae405a1d0e4b0d410d32b507ebf5b8eaf5e97d43c4f3fa194b8777670a52a5c14b28d739d8e8327ce2ed1beacf97c6044d3eea73c3aee1f50f84afebec1139854c7149a44cc6798c9f14bef2b255046621ba65cf2f0a7a48c17a60526a4a98f2db589ba4ae7fde59d09bb02691d5715a9d94034d1b96cfdcca73bb3843ba915fec4eceb36c0167462fd4802d7bc34023e3bd61d9e715447418fc9b61f35b36c7e6938d61792086e92dbae24b95f844f42c1fd8c444fe5ca5d7fb2bfdc6fb35a712ae46934e57545c472f00689153430825ce36abcb329b3faa966831790ab59aacdef052eda3e2d5e1ec15c76585a31fdbbe3ea1d0f03fe5b0b0baf99576a123f4c7049ef2ea07d2832d7fd93dfad1cd2152609e7a21711c48396a855d29f57593f660d364e7eee7cc2f62f0138b88e35c5aa791a7960b15fd664e28fb720db528ee4dff507782ee00e6cfa1a81e02aa89841124b2fd97b3d15e870ed40f2df38025ad732b1c6b4ba8a23ae0140430221ebba523a2f7d01ea93445c79f7977f7269a13ac0eb520e8c8307481b053d00a934c77c4a349ee501a1fc9957b15de5f9ec358b45841c1c90524c7eefd93b7da42b10b54ac438754ddc7c2f3cf6972f82067ccb71a615b28ad6fa80d0e33a8d72d003ba0199653ae458f91a197e0a1299f31e302f5b76150b15a4228a6441d77a6216dedb8a86e48f86a819ac5a5da94ade2cf1ffb49ca96c881fbc4aecd364a767110a6097176040b4ccbab233da3b54a8aba0abc9d02b9871474c1b233ea1bcd16be3ecd9cca39d102c03ad99c3ed74fe96d4e8d1fefc1c4f978599d945f61ddc9c728b92af4323b5eee669affc5a0eae3a11f7fb03ea4e6865662f49cfa23ed0d7972771535a6c310194532b9d58b4af5e58e0be574c2fbc52f156f657db536110de75ae0aa306d782c50a2f9d91c8bdcf0b49b2cc68d64d9027bfa8f8bf009f49287bed29a93436587323986969322ee65a9c48aad57e09dfe54c940b4108c23a4d84dda4e259c6897ebb79f839515fbb3a7a170ec7382c5ad0d64d81484e6f10bca184a3b7a4d4ccc3573ed0c040b3392e70e3f919c03eab617831a99f6b476a7041e57ef9281f47fb2cfd47458e8bd046efd6dcdbd231ba56cfe7635c9737136753d47dcbd4fff45fddc67ce96eacd79abe2b072ac25f6ca35b08cac1a957e8b3e3ebcf5a0827fe31dd03ec84438d268ba02b0fd776fab281c517cccf7034b721b40f0dc76de410bb39cfa029e2a4dd0ee6a55fd01d626003cd0cbad31d5f2879d2416fb623949ee1a977d1aa6a374006e5eeddebb172d29d46ea59452a09cf1b3b232d097dbebd7e68b28830c25b777cd942a1e33358e459b3669a8b54ed80208a1a499569c36659dce4147daaaafdfa38d7eb3066610fa584f879a16e19db056f18fd106834c6b28233327a3583fa5541bea1330af152bb9d93bc75ec506884f3a85946f63c6de75810602ba6e712dc16569709d0229f17de668aba159245d2e05411c034cc4bd4d4d9f9fc4fb56843c3c9ea88e179217fc31e9ef74c858ab224451096b16b7918feb9b115a0d549e8677f953be227e4491eb16893eb55978622b88b4f8b43b464b5a05220781bd463eb853aa639b4312bdf78705cfa4d88c9e7b249fde04a650e9c91f92ed2b434114ad03d8b06ba1938bbee6eef8707a9cb98943200a09f593b4c434567f3651bc6173e0d7c72e325edc73754c6019af29eee2d9d0d1534ec378550be4f3ab34561dfe1667951bbb5bd5034c067dfba8872a9437af108e8271ad4228a425e3d2524b83b80d35df95b855a7bf3321a7eac76426a67d56a6364755306fceea3d2ab05cc9d7ed850d622ba7b635269eee03597b9bb39f1d05aa15a90d7a0dc19d1cdc0e9ee1c49ed8e9c22225522486c607209c767818f5cad3c78be93dedeab85b4fa961e5ed0d45ccdf14aa7581d5d0b458acee679bd5b2922104666f6f71fbc9b875cff945e814699834b18fde9588b83273868500fa52e130ef25c62df09d2e846f5efdd0c5c4ceec1176752a386ba6717fc192b45b205ecf63ca772b27cad934af7a76ca9fa52211f521812b59cab87cfd525067a61829e5fbc6760376bdea8d8444dfdbb707637b9444024dcae622c18a24e98890df09d5e3521df2b9e1fc16d61862e2c64da856e042d68b44b2e596047e545fd921b77c337e3acb68d91fa86b8e34e9a2d4ebd18dced9151dc24f3351f1632e89bb730ff9f90e1fc14ebdb6e6ea4eb9f53e0ff26530a790ef5f4d73cd8e7fe847db3411f5654d057cc66b5b4c8699b8c80af68da0b7a08ca2f1309a7a3f065550d42442502aad3ff0470e75ce165f04ae0fb410177d1200c8a648e7bdb6dc0c82acc1a6d5d45154d9fc0cf47f122f03188c7add72c9053ae6493850d8b05868f77d565ec7ac87cf378d0a3cf9791550d6c964e0aa7a43b5e071433b50382f7f8ecaeb7d7bfa4398ad1710e72550fcc402f92ad7dd82dc45b85f3a88f8b8d4bde05d685d44b3e6ef690e37377e9dfd99f442628584da311663248eb59029386ceccbd15d2b14a955c1a66f5719f5462b7e0b8083efa8ca9ad508030e8b356f163cf1a8642699b3dcb042185d217858f84a3517480335ff7c0b79d5e85b1e895f3887afad448dd4cd84c1a198f7759bb5c7dd9399c9a4a87ead678ddf81e303e05efe525bbe00868ac9dda19d64422c8b52b30fdc0885414c2e03a07a0171a57c1a48156d2d817ad39dd5725786af8b7ad57c7ef3cc37f8d81ad12ca97af73b14ddec5406b6a0b6ffe33188e1c2be9d65bec44c7af94d3e6daffbe5a71b6114fb1378fa794719e9c5a1ba39b90b597e0783e853203efbc8e9116559947dba61f716e43a0a0da3a0ccd2d6d399d7f6999a82bf3979c3b9de1f5b1f8fa709014258ca4301d64ffbf568d13c592e2016f3c8121eddc68ebc3003207a136ca97a6cfc4397f18c5a55bc4148cf9597436b11162da07d3ca828d77ec2e313a2721b00f9d7440afa9a2128a95e0780abf0be015facd0ee9ff02b1929806a57a6175bd574d77f49c707f4701157bd1fe96dc6dcb6b53acfd01a9725944d0911038ed770a646c5b2f9c506a5128adbba9754503baaaa1a4a8a9dc5125a32eb593fe5f687c346198e6459193d75ae863c692004aff32fc479f4ce573d59f123dc0310c903ee49d3069ca5a68d2ea4ae61b3bd7a75b2fac78911e6591aa26bfaa1e77fe755f0b4559f38f4905092d51e59c8a69ccd7a7391b1acd312de87160b27ac4a305f8117e90e01165b8915ac554c89202e6229223f23bc5093a1e5da2467b9565f867292fd8c49b0d244ed1a316138cda63e6fe56e7fdf0f26ab649073488e402828f16385fdb1e08f18307cfa2a92307fb4f53c49d98fc4db379bdddccd10d5292aee1b7e3e09a49980dacfefb171ab5d7753806803397fd29f45295acbab1ecced09a85d9ee679ce63d5e66556327be7dfbadb5e1db62fc472a08c50b415a5edbf642259c79f087292971bd48440b571ac5fa0d9a34818f197eaed2c55ce5c23e4fee17210380544e20737a2c140453d5456a149bf0f21f6f2ab225518732552f6800b1024a693513cb887de422896fb523b6d23496b70ed786b73f1b7c4cfd1b19b66c79", 0x1000}], 0x2, &(0x7f0000003a80)={0xc0, 0x105, 0x3, "7a60e455464074e44b92901820c67ea352975922ca87ac63a5943a003dd7302c4671a6ae61dcb4589bb564273c5def32f9d45442f788d72bff38e4b741d2084e9b2aba0acffb17bceae73400ca1239382d87f384e10298bca3418c8270aed27d8f13d0cf934ccb5e4aca154d35c6aec0859bafb71f46d9f2c13e804bee20f163fd30aaa259a471f414d26c90a17d85d7ce1a70ee658b7d7587dd0b81d0ca4c3b73d5c4510e9b7ba21ac1301738a9"}, 0xc0, 0x10}, {&(0x7f0000003b40)={0x27, 0x0, 0x0, 0x7, 0x7, 0x1, "4338415d7198d86ecec7cd350fda0aa459ac27bb5bb6f93d11e282f2ece9854eb97a284be6316e1a05ae7c96fc4d16fe0bc56df8ae3f3f5a4a20db36ed5efe", 0x12}, 0x60, &(0x7f0000004000)=[{&(0x7f0000003bc0)="9e26ff8143d2b3e9ed3e0ecc54e41fb5d5a68c51b700a2f025b962c9064ac4c7c7bc0aa00e705cc5b905137199963106760d46ada94bebe060cf4e44ac89c85c151f5abfabe5c0a70bd3db01e3d3fe0614cbe4b843a9942f59efad", 0x5b}, {&(0x7f0000003c40)="61c1a011a684f297b50f3943a90a46b5d4d32374f314680a7e78ad63771ba10e39c485802622de0d8762d8", 0x2b}, {&(0x7f0000003c80)="bad753de1ddfea558da831a9e513afc6c02b2f535e913ee76fbd234108ddbde2c4a63a82480723282f7d897cbf93300cfa4668b2237f770cef93a1a63488887a5de3af29", 0x44}, {&(0x7f0000003d00)="52ffa61d4a3350e5cc7441821c3a9db7e7f620833a0a41c994033477ea71bbe5ea6538018c1abb1821b96c6f", 0x2c}, {&(0x7f0000003d40)="7b57739a06b2300a07695b2efe66b1ce8eff33461d1c1e0009974a3806a8248aca4224ec9759fffc40190822c610c5e3d6c00d87f7e19e593230fb8865d7b5f06e2b02ef8c5fc5ac62de5ccc50470067b7b4e1756c6d0bb168150221aa2f335a3c8b67a5854888f5a51143aa8951f39ae6fbc6ea1f8c3a387b8dc28787dc21bf9fad1f38059535974aac1c6c2073fcb2071aa7c00f1f1e7c727bc72b85255badf3ba2421f4fd072fdec414f5f1dd13e4", 0xb0}, {&(0x7f0000003e00)="8e04fc34ca1b3d2db3c72be64537cdca8821fa71d4659c9d9bc3ed8af19ae7fa541f1f1cbc6593fb2eaefc649a7ef1a30e4299ec4d1215e4adea3be5e906f4d7a12b37039a70c314d490b03cfe6489857b5bad7ec84f092644d171cad2ea2e1db7d2470fa2a2dfd72af6cc9cc1a898a38df245d879b703d55b1b899a11734f91dd66bfa4e62daf340ed043a6c130ecbf194d65da4c99728a46a8400da24f6d", 0x9f}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)="e23f569028ee6dffe9fa87945e59ab197ebcf921d680d5bfacf48b0995aa02eabeab5c0771510dfd3bf46b22afd8914ea91423f38dfeea686c48f90a19666583dbf735e4c836935772b2ff67671bf3fa7e554fc5319af140653663b8504eedb44b4cf076b692efba682084549e3d3fddd461f30186ea9fd95aa0d849", 0x7c}, {&(0x7f0000003f80)="e8ef07aad760486db11479f582b6f8500b00206a4e0dccdb4eef0b9ad5b728ac9c14d241130049cd23d075b2fae23414c07d34694e57d8b7602793060ef71b40aed5494f8ef6f4f142ded9c2bf5d07cf981c00c386531c74c813a73fc1", 0x5d}], 0x9, &(0x7f00000040c0)={0x1010, 0x84, 0x7, "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"}, 0x1010, 0x4}, {&(0x7f0000005100)={0x27, 0x1, 0x0, 0x7, 0x8000, 0x740d, "7ff8928f69ce592f57d6e7a16bf3c05568fa71dd1afef551b845830723f0995bb3e147a9acf0f0cf5ee663b70b68b2938b5c03c15b83a49fa6c8f4bf29bbec", 0x2f}, 0x60, &(0x7f0000005280)=[{&(0x7f0000005180)="2e0c086ac66ecc441994e29929bf98d06494d6b7a2e276703960eaa09d00cec1958d07f76561b05b36ab948ef104c29e15af898a6b6a56312c160eef072e3779ad316934c44287144feed5e4423265536b481fe55b2a6bb93f807dc2708154fb729bcbc47253101b43c2a8cc466c870dba66636cbacb1c0afe68557b69ec8a7f1e5f8849ba498a949d38a08570b80ca91c812cd6394aa5b610751be2bd217e4d326402ad7cd351e5a3652468a51fd0af2d0a43a7c1ac679c86c5b9879e18007e31855ee7d094f0eaeeb4280b122c289dcd9a2d7c1bd23c763a4c5959d682", 0xde}], 0x1, &(0x7f00000052c0)={0x38, 0x11f, 0x100000000, "caeaddefe86a3dcc2a0e20f0cf878e02c1897b7022c7c3e7f0ba7fce0f2ce89ed8db5d"}, 0x38, 0x41}, {&(0x7f0000005300)={0x27, 0x1, 0x2, 0x7, 0x2, 0x4, "ea316051d55f5799bacf91ab024897448a93cebb5a58e9f7f9b7da10d540c54c5b97b4f6304cb1f812725bb68bafceb41df3a065fde20da6a795c7d6c421d5", 0x18}, 0x60, &(0x7f0000005900)=[{&(0x7f0000005380)="059ec4d938ecb22917bc511d4b54fd50ba53ab06c505746cb156b105ed84b8ffd1d4222513af43501899d56073c7a6cf0243590cb53c77b85581614390a175b71a66218795f1e5c1f1995fd3fbe58f4ec56482daa5604430110b8d4c7b82b8472f43cf0d3c2f73448f4e0b5158c359b315d8ff50cf4ea68ea120f42b4b720b04ce72310f72e5f824453fbe96b75c18da87ef1a5952", 0x95}, {&(0x7f0000005440)="af25e6148909cb9cb2a9e1edc00845b75dfa2a", 0x13}, {&(0x7f0000005480)="1f349aac7edc69669b576413a5677f9778a76238e0c24e4acb8ed0061ac91f8055a7e015438ca8aa0eee6ef0d2ce9c37d627c4e37a9baf9291752b968f590b49c97606326e2d92442457538b069be3dc673c23cfcd2a8385bdc1ead98af59b1c8be8448e292f448e1ddf3f26ac594b83ceaa82248870484c19c35b863af43753d72448f0b97e507f6982d0955b46e2c8c3196bce07", 0x95}, {&(0x7f0000005540)="58bb7afd4ea7b018ae301d7dd3db53b2fbe32a4715c8c08664adad4dad3c232ff5e168b190fd05882bd4c95c190858e2e684baab30c873d6118c1818867b2420334af4c588994a1c22390e121af3bcda817fe9ffc65cafb8da495fe5d7ebed433badc8d730f940b2a79937e026fcbffc7e8004b653010a79d2e7d702b3e23056ffd70f83c8c83169756790cc76acec5d6bbb5e58941d8ba9fcc6c9a7d82b7c622adcfe9bd970a67894180e40c569e1719ed3592f220188a689c2139cf228d8f9d8d8165852", 0xc5}, {&(0x7f0000005640)="aa14c1e25cbd716db71d13c038e18e55ec1c9347d7c073cf22ec9a997e9651443ba9bb57644dbda3e4ceba8bd2ecec49c533dbd39f88326d7209e8cd7869ec895e8bef2ff0dd2deb049db77e94a89482adb4cee1570bc805db129f7c64611dbdd61f0159537342989ca6371ab67d82bd88fca9ec812cb89b32fe1d900ba4901aa614cf72243cb89cd889cc5509193ac0d33c9f2f99b0e4a19c731848d3c2413e069faee1c07c4b32744cb85524ac7bf9fad7dc06ee632c33410ece0f08abc4642ce8c0d6538230d7e5a1f703af143b3d6d43dac1dce892", 0xd7}, {&(0x7f0000005740)="fb1cef4c79a38384b6e4012b7c3b76d902e5af637a711447c2ef2e86722628fbcd84b7b497a8da246f91795c8f73503debbbbfd129237e0d4da2a4ab073dfb88232e8a5862e4fccc32d7d37f6a82be91dc6c681bcd276c008c36f214df4e18106449e5de36b5c0cc65490132cc56c4c695ee695b4553c6825abd5a7362eaacef7641732fc5206bf243f7109c99e6e51b394cd5b0e4eb68584389ca9bc05c5cf72d720eeed15ae1d0ed636ad2ab211e0294", 0xb1}, {&(0x7f0000005800)="6c543311e3d73e8402105853871afdba32e9f0f0ba720bec62df85c6bb2e119348a6ecb4ed5c1ee4ab4113ddfd48532934a6cec333f50f474612b7fbbaffd87b82d6f14500465277a26421d967809df9305d767b55f4b499c314646bb1c1789e0454ede3698dcfef6fb7e93eb032def015220b4c28e9ebee83f1a72cb22185c22e6a8fb1262274a9b28f4b5fc0b484f03b9e8b0edac34f910873f95ae0b84b15015eaac6730b0250e2945fbc2cb6dd0e9361407a4152a0d4857d21723f864b6e85bf78d4685872da2ba52fdb1ee8801432f0688764b67acbe01a08c0afaf230285b13dfe3a1ab7846bbcd280b5", 0xed}], 0x7, 0x0, 0x0, 0x4000001}, {&(0x7f0000005980)={0x27, 0x0, 0x2, 0x4, 0x80, 0x80000000, "2241d3b46c6f06ae0fd11bc2923de09dbed2127ed3f23df225421f8f2e511fc5ee0d41cf617c47e74af7b4c6d5e6bda378afb522c7e37911d48bc5a3689528", 0x1c}, 0x60, &(0x7f0000005c80)=[{&(0x7f0000005a00)="719ad8ba039a16abefa4993b5f887db48484badd0bf49bc429091b21e303a193d4df59ea0ff9e753164c1721c40075", 0x2f}, {&(0x7f0000005a40)="4a275a524f8779a4a5809730436370c8bf2ea8e165d0b7ace1768a25f476d004c5b985e260aa75377e8c586d61a2dc195880a8a902696fd812fbad79eff7f73be3165fe3e766e1b4024e7be21b96debaaa38b0feb52a08618209dca22bef390785e6827e70d60d9a2207294dafed1dd3af4e6120215aa2bcb6d658b48f6067de95b0f863f306a6bfb8f304e5c0f6396728173e4d3adf9b4717571cf52451444a88b3a8d2e0b6e3ae17bad8582c7117cf731ab9770977d7dd8fbdd83e14bd05a2982fc88d91db1a87cee8017ba6", 0xcd}, {&(0x7f0000005b40)="10bdc83ace98f5a9851b6cce75082c2bccc1aaf45489b6db0678c02643abc518cc60cabfe1f8e30db55c34c001eae7fe1400b8d32ddd625d932ad8c0ba7414364f21189f5396d9f14709a27097c4006af81da424375984506ff5dbf6d6b6ef6e091aa6684ced7964a63675961e9480cd2f7b8cf5d1eb545d5b04a2da2b107dba694ea5100a0ada8b669199dba3d01bcff548c3bfd87979996af5023683e33b4e09e49048f27bd95e7db666e67a65cb2c67118e", 0xb3}, {&(0x7f0000005c00)="fb774134f8cbf415abd5635529cdcc4b7980eb5e23df04a9774e9a187fc6b1f15a6628325fdda5d37446d039f1a70cfb6e681ad48c580de4533dc593afdd28b14e5f1c34e7efc1141c00da2fbd85321fc7b6c7ed14094cb330252bdb9deb7ba24d61198bc97c9f90cabf69ac5e69c6670789ce", 0x73}], 0x4, &(0x7f0000005cc0)={0x38, 0x10d, 0x7ff, "c7458afd437fb7b5b1bce5d1a43083e30029400c3bac4c7f187dcc780dd9577719e405"}, 0x38, 0x40}], 0x7, 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x80100) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x980000, 0x9, 0x8001, [], &(0x7f00000000c0)={0x980926, 0x9, [], @p_u8=&(0x7f0000000040)=0xfffffffffffffff8}}) 13:55:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/148, 0x386}], 0x29c, 0x0) fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fdatasync(r0) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='net/snm\x1dz\x83\x82\xd4)\f\x9f-\xf5\xf7&h\xf0\f\xba\xaek\x9e\x96i\xec\x11\b\xdb\x1f\x01\"h\x1f\xe9\xb6\xba\xba\a\xferp\x0e\xeb9\xe9\xc8m\f\xdb\x97\xf2\xba\xaa0\x9ce1\xebbdU\xcdO\x0e\xab\x1a\f\xc7\x19F\xf9\xdf7\x82\x0f\xc3\x95\x82\x9f\x86\xcf9\xdc\x05c\xb1D\xd6\xcc\xc9\xe2Z\xc0\'z\xd7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J\x85\xb1\f\xcf 0\x15\x9d\xbd\xe6\x04!V\xba\xf7:\b\xb3n\xda\xa7\xe3\x1e5q\xba\x8d\xd4\x80\x10~\xa3<\x803') preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x2b25, 0xa0cb, 0xffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 958.624262][T26221] binder: 26215:26221 ioctl c018620b 0 returned -14 [ 958.642284][T26238] sched: DL replenish lagged too much 13:55:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101800, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0xf, 0x3, 0x2, 0x7, 0x0, 0x8, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@rand_addr=0x1ea, 0x5, 0x0, 0x14}]}, 0x38}}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x2ca, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1d"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0xbc, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 13:55:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000121e0001060000000000000000070000007853efc99b58e0889642a31c1cd3e56f5e1473c85dea78481175c22d6aa71e7dffc8a14a9577508a73b3dadf03171784cf1130671a869637fb23425a3e0d6bc9b801175d8c5e5a3adaaa9b156fdef702b52b9f9c35a5fdaec2bb8627eccc1f1ebe25ac601185c39663c42affdcbc2c8dcbfcf608ef940e6962c78f191e1e80e2ed0ff664134f4319", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0xd], 0x28}}, 0x0) 13:55:47 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read(r1, &(0x7f00000000c0)=""/193, 0xc1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:47 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x700}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:47 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 959.155040][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 959.409574][T26455] binder_alloc: binder_alloc_mmap_handler: 26215 20001000-20004000 already mapped failed -16 [ 959.456754][T26328] binder: 26215:26328 ioctl c018620b 0 returned -14 [ 959.492245][T26328] binder: BINDER_SET_CONTEXT_MGR already set [ 959.525910][T26457] binder_alloc: 26215: binder_alloc_buf, no vma [ 959.537645][T26328] binder: 26215:26328 ioctl 40046207 0 returned -16 [ 959.547945][T26455] binder: 26215:26455 BC_INCREFS_DONE u0000000000000000 no match [ 959.548302][ T2988] binder: release 26215:26328 transaction 735 out, still active [ 959.573620][T26457] binder: 26215:26457 transaction failed 29189/-3, size 24-8 line 3147 [ 959.603715][ T2988] binder: send failed reply for transaction 735, target dead 13:55:48 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000016, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x400}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xc}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4817445500000000ecffffffffffffff0000000000000000000000000000e7c2b16b8febc3381033", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000010000000000000000c70000000000000000000000000000"], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0100000000000000020000e6ff0057791346d62b9ca110571f141a0114443442af3a2e40dd8dfbfd5706daa0008ce05ffc0559cadecdabd67e76d4b571bc2fdac8257d1297181326c2422bab8c64b98c3b8d1230f3d0ff"], 0x48}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x10, 0x2, 0x5}}, 0x14) r1 = msgget(0x2, 0x3ff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000340)=0x4) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000180)=""/164) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) ptrace$getregs(0xe, r3, 0xffff, &(0x7f00000003c0)=""/89) 13:55:48 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 13:55:48 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/148, 0xee}], 0x0, 0x1000000) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000280)=""/215) r2 = shmget$private(0x0, 0x1000, 0x880, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000002700)=""/186, 0xba}, {&(0x7f0000000040)=""/80, 0x50}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000540)=""/75, 0x4b}], 0x8, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) execve(&(0x7f0000000700)='./file0\x00', &(0x7f00000007c0)=[&(0x7f0000000740)='/dev/input/mice\x00', &(0x7f0000000780)='$loem1\'eth0\x00'], &(0x7f0000000940)=[&(0x7f0000000800)='\x00', &(0x7f0000000840)='/dev/input/mice\x00', &(0x7f0000000880)='/dev/input/mice\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='nodev{+\x1c)md5sum(cgroupvmnet0\x00']) [ 960.023267][T26470] binder: 26469:26470 ioctl c018620b 0 returned -14 [ 960.035476][T26473] RDS: rds_bind could not find a transport for ::ffff:0.0.4.0, load rds_tcp or rds_rdma? [ 960.075126][T26473] RDS: rds_bind could not find a transport for ::ffff:0.0.4.0, load rds_tcp or rds_rdma? 13:55:48 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000015, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000000, 0x60040) openat$cgroup_subtree(r0, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) r1 = semget$private(0x0, 0x200004003, 0x1fc) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000000)=0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:48 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x2000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:48 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 960.628367][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:55:49 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x3000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) [ 960.811249][T26598] binder_alloc: binder_alloc_mmap_handler: 26469 20001000-20004000 already mapped failed -16 [ 960.900486][T26500] binder: 26469:26500 ioctl c018620b 0 returned -14 [ 960.994331][T26598] binder: BINDER_SET_CONTEXT_MGR already set [ 961.054628][T26598] binder: 26469:26598 ioctl 40046207 0 returned -16 [ 961.061516][ T12] binder: send failed reply for transaction 740 to 26469:26500 [ 961.081008][T26604] binder: 26469:26604 transaction failed 29189/-22, size 24-8 line 2994 [ 961.111498][ T2988] binder: undelivered TRANSACTION_ERROR: 29189 13:55:50 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000017, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') 13:55:50 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x7000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:50 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000015, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:50 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 13:55:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x3) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) [ 961.793529][T26725] binder: 26717:26725 ioctl c018620b 0 returned -14 13:55:50 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) [ 961.907532][T26721] syz-executor.4 (26721) used greatest stack depth: 23032 bytes left 13:55:50 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x100000000000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:50 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x200000000000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:50 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 13:55:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xa455, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) [ 962.521990][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 962.589084][T26816] binder_alloc: binder_alloc_mmap_handler: 26717 20001000-20004000 already mapped failed -16 [ 962.620528][T26731] binder: 26717:26731 ioctl c018620b 0 returned -14 [ 962.655446][T26816] binder_alloc: 26717: binder_alloc_buf, no vma [ 962.678624][T26731] binder: BINDER_SET_CONTEXT_MGR already set [ 962.700308][T26731] binder: 26717:26731 ioctl 40046207 0 returned -16 [ 962.708854][T26816] binder: 26717:26816 transaction failed 29189/-3, size 24-8 line 3147 [ 962.726761][T26861] binder: 26717:26861 BC_INCREFS_DONE u0000000000000000 no match [ 962.763302][ T12] binder: release 26717:26731 transaction 745 out, still active [ 962.774897][ T12] binder: send failed reply for transaction 745, target dead 13:55:51 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000018, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:55:51 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 13:55:51 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005a, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc70ceaee0633ae4e}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) 13:55:51 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x300000000000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) 13:55:51 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x101000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='/dev/binder#\x00', 0xd, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000060000000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040)=0xffffffffffffff01, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:51 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) listen(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x800000000000015, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 963.299957][T26879] binder: 26872:26879 ioctl c018620b 0 returned -14 [ 963.334687][T26880] cgroup: fork rejected by pids controller in /syz4 13:55:51 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 963.347847][T26879] ------------[ cut here ]------------ [ 963.353326][T26879] kernel BUG at drivers/android/binder_alloc.c:1141! [ 963.382376][T26879] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 963.388487][T26879] CPU: 1 PID: 26879 Comm: syz-executor.0 Not tainted 5.1.0-rc2+ #37 [ 963.396462][T26879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.406630][T26879] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 963.413143][T26879] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 963.432746][T26879] RSP: 0018:ffff888054a97550 EFLAGS: 00010216 [ 963.438830][T26879] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90005deb000 [ 963.446799][T26879] RDX: 00000000000009f1 RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 963.454771][T26879] RBP: ffff888054a975d0 R08: ffff88808f8464c0 R09: 0000000000000028 [ 963.462752][T26879] R10: ffffed100a952f01 R11: ffff888054a9780f R12: 0000000000000020 [ 963.470730][T26879] R13: 0000000000000028 R14: ffff8880920d3d50 R15: 0000000000000000 [ 963.478726][T26879] FS: 00007f00ac695700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 963.487664][T26879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.494244][T26879] CR2: 0000000000a5048d CR3: 00000000a8560000 CR4: 00000000001406e0 [ 963.502238][T26879] Call Trace: [ 963.505535][T26879] ? memcpy+0x46/0x50 [ 963.509528][T26879] binder_alloc_copy_from_buffer+0x37/0x42 [ 963.515397][T26879] binder_get_object+0xc3/0x200 [ 963.520257][T26879] binder_transaction+0x2b4a/0x6690 [ 963.525476][T26879] ? binder_thread_read+0x3d50/0x3d50 [ 963.530852][T26879] ? __lock_acquire+0x548/0x3fb0 [ 963.535808][T26879] ? __might_fault+0x12b/0x1e0 [ 963.540581][T26879] ? lock_downgrade+0x880/0x880 [ 963.545446][T26879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 963.552147][T26879] ? _copy_from_user+0xdd/0x150 [ 963.557007][T26879] binder_thread_write+0x64a/0x2820 [ 963.557017][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 963.562223][T26879] ? binder_transaction+0x6690/0x6690 [ 963.562240][T26879] ? __might_fault+0x12b/0x1e0 [ 963.562266][T26879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 963.591024][T26879] ? _copy_from_user+0xdd/0x150 [ 963.595883][T26879] binder_ioctl+0x1033/0x183b [ 963.600573][T26879] ? binder_thread_write+0x2820/0x2820 [ 963.606129][T26879] ? tomoyo_path_number_perm+0x263/0x520 [ 963.611768][T26879] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 963.617588][T26879] ? binder_thread_write+0x2820/0x2820 [ 963.623097][T26879] do_vfs_ioctl+0xd6e/0x1390 [ 963.627693][T26879] ? ioctl_preallocate+0x210/0x210 [ 963.632813][T26879] ? __fget+0x381/0x550 [ 963.636977][T26879] ? ksys_dup3+0x3e0/0x3e0 [ 963.641397][T26879] ? nsecs_to_jiffies+0x30/0x30 [ 963.646260][T26879] ? tomoyo_file_ioctl+0x23/0x30 [ 963.651198][T26879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 963.657442][T26879] ? security_file_ioctl+0x93/0xc0 [ 963.663057][T26879] ksys_ioctl+0xab/0xd0 [ 963.667218][T26879] __x64_sys_ioctl+0x73/0xb0 [ 963.671847][T26879] do_syscall_64+0x103/0x610 [ 963.676492][T26879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 963.682377][T26879] RIP: 0033:0x458209 [ 963.686277][T26879] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 963.705878][T26879] RSP: 002b:00007f00ac694c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.714299][T26879] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 963.722275][T26879] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 963.730249][T26879] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 963.738250][T26879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00ac6956d4 13:55:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2000, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') dup2(r2, r2) preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x0) 13:55:52 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x700000000000000}, [@rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, 0x48) close(r0) [ 963.746249][T26879] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 00000000ffffffff [ 963.754240][T26879] Modules linked in: [ 963.764214][ T3877] kobject: 'loop1' (00000000daea3b94): kobject_uevent_env [ 963.782560][ T3877] kobject: 'loop1' (00000000daea3b94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 963.839331][ T3877] kobject: 'loop3' (0000000076a62a25): kobject_uevent_env [ 963.863360][ T3877] kobject: 'loop3' (0000000076a62a25): fill_kobj_path: path = '/devices/virtual/block/loop3' 13:55:52 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 13:55:52 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 963.893541][T26879] ---[ end trace 782da3c050945cde ]--- [ 963.909804][T26879] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 963.951847][T26879] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 13:55:52 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) fcntl$lock(r1, 0x6, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)) clock_settime(0x5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x100000000000003, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/22) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 964.065701][T26879] RSP: 0018:ffff888054a97550 EFLAGS: 00010216 [ 964.066126][T26996] binder: 26872:26996 BC_INCREFS_DONE u0000000000000000 no match [ 964.107968][T26879] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90005deb000 [ 964.160274][T26879] RDX: 00000000000009f1 RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 964.181790][ T3877] kobject: 'loop1' (00000000daea3b94): kobject_uevent_env [ 964.194811][ T3877] kobject: 'loop1' (00000000daea3b94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 964.222093][T27001] binder_alloc: binder_alloc_mmap_handler: 26872 20001000-20004000 already mapped failed -16 [ 964.235900][ T3877] kobject: 'loop3' (0000000076a62a25): kobject_uevent_env [ 964.257656][ T3877] kobject: 'loop3' (0000000076a62a25): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 964.263942][T26996] binder: 26872:26996 ioctl c018620b 0 returned -14 [ 964.270498][T26879] RBP: ffff888054a975d0 R08: ffff88808f8464c0 R09: 0000000000000028 [ 964.293126][T26879] R10: ffffed100a952f01 R11: ffff888054a9780f R12: 0000000000000020 [ 964.301111][T26879] R13: 0000000000000028 R14: ffff8880920d3d50 R15: 0000000000000000 [ 964.310203][T26996] binder: BINDER_SET_CONTEXT_MGR already set [ 964.317661][T26879] FS: 00007f00ac695700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 964.329373][T26879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.333635][T26996] binder: 26872:26996 ioctl 40046207 0 returned -16 [ 964.336437][T27001] binder_alloc: 26872: binder_alloc_buf, no vma [ 964.351599][T27014] binder: 26872:27014 BC_INCREFS_DONE u0000000000000000 no match [ 964.359674][T26879] CR2: 00007f5581f1a000 CR3: 00000000a8560000 CR4: 00000000001406e0 [ 964.370469][T27001] binder: 26872:27001 transaction failed 29189/-3, size 24-8 line 3147 [ 964.379570][T26879] Kernel panic - not syncing: Fatal exception [ 964.386339][T26879] Kernel Offset: disabled [ 964.390660][T26879] Rebooting in 86400 seconds..