a7, 0x7fffffff, 0x1}, 0x10) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010055], [0xc0010058, 0x4b564d02]}) 23:06:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde010000]}) 23:06:26 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x4000]}, 0x10) 23:06:26 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mime_type\x00'}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mount(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, &(0x7f0000000400)) [ 2547.709016] binder: 19723:19749 BC_INCREFS_DONE u0000000000000000 no match [ 2547.709352] binder: BINDER_SET_CONTEXT_MGR already set [ 2547.716237] binder: 19723:19749 got reply transaction with no transaction stack [ 2547.729216] binder: 19723:19749 transaction failed 29201/-71, size 0-0 line 2759 [ 2547.730090] binder: 19723:19727 ioctl 40046207 0 returned -16 [ 2547.769390] binder: undelivered TRANSACTION_ERROR: 29201 [ 2547.778106] binder: undelivered TRANSACTION_ERROR: 29201 23:06:26 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x900]}, 0x10) [ 2547.844797] 9pnet: Insufficient options for proto=fd 23:06:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x7ff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000580)="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", 0x1000) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x40800) [ 2547.887472] 9pnet: Insufficient options for proto=fd 23:06:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x187], [0xc0010058, 0x4b564d02]}) 23:06:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 23:06:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) 23:06:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000000)=0x44) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000580)="3b7a1cf6b8c5e504aa54a92e20ec7bd1eb7911b2d330b2dcee0032b14629d19ce1139b8d51708baa69e5494fb9da0cbae70b1382c5732d73e7d32544bd3ac6fd7353d8c7940109545dcd3c5cea39bcebdbe3ac9c3c3a48bd69bc8c30c4270bbe031cf267d58b27fc9f400077039946d3c7ed63d4a8f72763b4fd0d7781a1a5aafe23a819168fff0ca407d17f81990be186ea385fefd0ac10ede0a3d969428be94ea5ff927162808aeece6a8a3142f26a0015541eb2627c6781f9a434389f246580ee48f17383ed63bece7984e2d1c67dc7a9ae8aa366acfaf8b159221fe670930d678ddddc9706e328c9205a7db881a3b3672dfe60059bd4cbfafa1e") r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:26 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 2548.554223] binder: 19794:19798 BC_INCREFS_DONE u0000000000000000 node 1444 cookie mismatch 0000000000000003 != 0000000000000000 [ 2548.562705] binder: BINDER_SET_CONTEXT_MGR already set [ 2548.566364] binder: 19794:19798 got reply transaction with no transaction stack [ 2548.579116] binder: 19794:19798 transaction failed 29201/-71, size 0-0 line 2759 [ 2548.581264] binder: 19796:19799 ioctl 40046207 0 returned -16 23:06:27 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x1f4]}, 0x10) 23:06:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x3f, &(0x7f0000000000)='v\x00p') ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x58) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 2548.640627] binder: 19796:19799 BC_INCREFS_DONE u0000000000000000 no match [ 2548.647965] binder: 19796:19799 got reply transaction with no transaction stack [ 2548.655517] binder: 19796:19799 transaction failed 29201/-71, size 0-0 line 2759 [ 2548.666841] binder: BINDER_SET_CONTEXT_MGR already set [ 2548.677237] binder: 19796:19807 BC_INCREFS_DONE u0000000000000000 no match 23:06:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17b]}) [ 2548.684567] binder: 19796:19807 got reply transaction with no transaction stack [ 2548.692171] binder: 19796:19807 transaction failed 29201/-71, size 0-0 line 2759 [ 2548.709436] binder: 19796:19799 ioctl 40046207 0 returned -16 [ 2548.746435] binder: undelivered TRANSACTION_ERROR: 29201 [ 2548.754265] binder: undelivered TRANSACTION_ERROR: 29201 23:06:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xff02000000000000], [0xc0010058, 0x4b564d02]}) 23:06:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:27 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 23:06:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffffc}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r0, 0x9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000640)={@hci={0x1f, r3, 0x3}, {&(0x7f0000000580)=""/172, 0xac}, &(0x7f0000000300)}, 0xa0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000700), 0x2000000000ff, 0x3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x22e}]}, &(0x7f00000002c0)=0x4) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000400)='blacklist\x00', 0x0) ftruncate(r4, 0x2007fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000740)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) [ 2548.863451] binder: undelivered TRANSACTION_ERROR: 29201 23:06:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000]}) [ 2548.915244] binder: 19821:19825 BC_INCREFS_DONE u0000000000000000 node 1448 cookie mismatch 0000000000000003 != 0000000000000000 [ 2548.927140] binder: 19821:19825 got reply transaction with no transaction stack [ 2548.934684] binder: 19821:19825 transaction failed 29201/-71, size 0-0 line 2759 23:06:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:27 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x35000000]}, 0x10) [ 2549.015919] binder: BINDER_SET_CONTEXT_MGR already set [ 2549.024476] binder: 19821:19839 BC_INCREFS_DONE u0000000000000000 no match [ 2549.031834] binder: 19821:19839 got reply transaction with no transaction stack [ 2549.039372] binder: 19821:19839 transaction failed 29201/-71, size 0-0 line 2759 23:06:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r0, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x3a00], [0xc0010058, 0x4b564d02]}) [ 2549.063572] binder: BINDER_SET_CONTEXT_MGR already set [ 2549.079981] binder: 19821:19825 ioctl 40046207 0 returned -16 [ 2549.102960] binder: undelivered TRANSACTION_ERROR: 29201 [ 2549.115925] binder: 19840:19841 ioctl 40046207 0 returned -16 [ 2549.129569] binder: undelivered TRANSACTION_ERROR: 29201 [ 2549.180433] binder: 19840:19841 BC_INCREFS_DONE u0000000000000000 no match [ 2549.187752] binder: 19840:19841 got reply transaction with no transaction stack [ 2549.195298] binder: 19840:19841 transaction failed 29201/-71, size 0-0 line 2759 [ 2549.269463] binder: undelivered TRANSACTION_ERROR: 29201 23:06:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bpq0\x00', 0x5}) r3 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r3) 23:06:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:27 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x7f322000]}, 0x10) 23:06:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa01000000000000]}) 23:06:27 executing program 1: userfaultfd(0x800) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="015cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:27 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x40000000], [0xc0010058, 0x4b564d02]}) 23:06:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2549.622178] binder: 19877:19880 BC_INCREFS_DONE u0000000000000000 node 1452 cookie mismatch 0000000000000003 != 0000000000000000 [ 2549.634099] binder: 19877:19880 got reply transaction with no transaction stack [ 2549.641665] binder: 19877:19880 transaction failed 29201/-71, size 0-0 line 2759 23:06:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:28 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x1000000000000000]}, 0x10) [ 2549.693246] binder: BINDER_SET_CONTEXT_MGR already set [ 2549.693625] binder: 19877:19888 BC_INCREFS_DONE u0000000000000000 no match [ 2549.705728] binder: 19877:19888 got reply transaction with no transaction stack [ 2549.713278] binder: 19877:19888 transaction failed 29201/-71, size 0-0 line 2759 [ 2549.734172] binder: 19877:19880 ioctl 40046207 0 returned -16 23:06:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0xfffffffffffffc01, 0x7ff}) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x4000000000000], [0xc0010058, 0x4b564d02]}) 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0001c000000000]}) 23:06:28 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2549.836202] binder: undelivered TRANSACTION_ERROR: 29201 23:06:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x20000201, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:28 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) [ 2549.941007] 9pnet: Insufficient options for proto=fd [ 2550.015743] binder: undelivered TRANSACTION_ERROR: 29201 23:06:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x800000000000000) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r1, 0x4, r0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) mq_open(&(0x7f0000000200)='trans=fd,', 0x800, 0x89, &(0x7f0000000240)={0xffffffffffffffff, 0x10000, 0xffff, 0x1, 0x7f, 0x3, 0x85f, 0x20}) 23:06:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = getpgid(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x1, r2}) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc5936a3cfa7e67777cc4a71b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bridge\x00', 0x10) ptrace$peek(0x2, r3, &(0x7f00000001c0)) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x80002) ioctl$int_in(r1, 0x5473, &(0x7f00000006c0)=0x7e4) r6 = geteuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) r8 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) stat(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001e80)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001f80)=0xe8) getresgid(&(0x7f0000001fc0), &(0x7f0000002000)=0x0, &(0x7f0000002040)) stat(&(0x7f0000002080)='./bus\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002140)='./bus\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002200)='./bus\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() stat(&(0x7f00000022c0)='./bus\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getegid() sendmmsg$unix(r1, &(0x7f0000004b00)=[{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000780)="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", 0xff}, {&(0x7f0000000880)="48e42bc409b0197942571f52505f19cdd39ea0c87308f698404c98ebfa64f80c4ca99ea03988b7b1b36d579d9a763ab48961d3aa3ae15f116e17ece0b8437a6f840ffd24a4f94d42927ad2d6fcc303d142a1ca0e323d444e8026e52539ed8d2cb2c6aa89f8e1054cc3075735903b953933a744f1ffcb4847236f320aa3b99a8cd8f0bfc06c567fd3095280f34605cf822ec841a51a0146aa870e6bddf1827a6d9c331185307f492b201b713e885a0b8f8fef2995e0d7ce61f472f7ab4dd5a38bdd3a2d1dff684e73", 0xc8}, {&(0x7f0000000980)="4dcc8889f469217712e300d8a9f85c538fd57e0cffff8789e0c1d4e6a5", 0x1d}], 0x3, &(0x7f0000000bc0)=[@cred={0x20, 0x1, 0x2, r2, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r5, r5]}, @rights={0x20, 0x1, 0x1, [r5, r5, r1]}, @rights={0x28, 0x1, 0x1, [r8, r1, r0, r0, r5]}, @rights={0x38, 0x1, 0x1, [r5, r1, r5, r1, r1, r1, r5, r1, r4, r1]}, @cred={0x20, 0x1, 0x2, r2, r9, r10}, @rights={0x30, 0x1, 0x1, [r1, r0, r4, r4, r0, r0, r1]}], 0x110}, {&(0x7f0000000d00)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="71024067c6739fb9e316d3dc2951633e08483c9331b0ab47cd8155190da96fa8ecc402e47c4ea1300cd8e9e1846916f94aca8b522bd73a7697bf8d7d4ef7808f148fc3ca20df0b999ecfe66e93fd2ff214822a5025d5294324807b57e7b0e9d34cb4dc646e24564724ec80a2bb7d", 0x6e}, {&(0x7f0000001e00)="4db4d8a59f93dea2eda6caefc78d25c598c0c7", 0x13}], 0x3, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r2, r11, r12}, @cred={0x20, 0x1, 0x2, r3, r13, r14}, @cred={0x20, 0x1, 0x2, r2, r15, r16}, @rights={0x28, 0x1, 0x1, [r5, r4, r5, r0, r5, r0]}, @cred={0x20, 0x1, 0x2, r3, r17, r18}, @rights={0x30, 0x1, 0x1, [r1, r4, r1, r1, r0, r0, r1, r0]}], 0xd8, 0x24044080}, {&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000002500)="fda898a3df45b1259e86d546188393e51d7914a93755b64441e6de6be317a8e6f87358f3f14d341b9ea2fa8967b00eab593e2bee5d03bab5b0022740c24f2ee00a1566e312c438f3b9cb0ed48a8b9e738c8b6f764221f2276e1f5792ed7446d3b6a7b879f3b5bc8e", 0x68}, {&(0x7f0000002580)="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", 0x1000}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f00000035c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000003640)="8cb2fa77571c206a1f695ba3d64172a895055c1db7fa740b91418b3fd1e2683a040d4738dac95aed23d44f008fba7c270ebd8421c057a67dcc4734a947180118c7329ff75d41a9de2fead1359242e5fa1aa9ca0d7f264179423efc86406b160f37adeeb398a15624b9a70963f751eb8f26aa55cdf09b9002f0620179cf4fa47b04c1cc6695ef250cb737147f96ef3319d62623bf40bf6987ea97ef33ca95be1d23e389f0f6bbfb80177450200db60b0818", 0xb1}, {&(0x7f0000003700)="08d2100cf02aae2c86d36e7613ac289c057f98ca3b5135aab73256e8524e7421da0b33eec23058d22621159f5f18626d79eb18cd0c6477f0a6d61f448460a405e3610d36c61ed769536ccf63f28934106aaa", 0x52}, {&(0x7f0000003780)="322873a09c7962f7b2eee9273e8f32c8f55fe9cacba82c5e40a01314e56ffc63735a9c109705624ce4cfb323d53138b03c672f0c30c8e54b91f3a8c3e4db48e83de800f77ea64371e9891c0c73eadfbe926ed1699b95143221e47985d58b949600cbbaae9adeb2015f40b83da508f7abd4772a299b956a733c1346b9d66522763db6563edb049a83329cc29672cf1e107015be2270301c5ad41f3818d04193f4299e2e4dfe4cefc28d607ad5ea64d406d0c324a0e3ead6feb18920e457bedfb9faae1809672490a08f653b202497330ce36b7d8210e11f4f2fa084dfdba4c18de1f18d195b7503ace22aa17bc8", 0xed}, {&(0x7f0000003880)="a6e72db9013e3113eeb4991443b23e519f9f7126fdb5dd6d4d9795f4465216b621e9725c0f75bacc6cabb83ff349222e0d29fc2ce4", 0x35}, {&(0x7f00000038c0)="0ab5343c61e38d207e41b361a8bbc4885b0767228cd35cb6a2603a8b24c4d9005bf86cd2dad7ce8d7f73677c29547989a8f5fd9b849463900a4a", 0x3a}, {&(0x7f0000003900)="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", 0xfb}, {&(0x7f0000003a00)="b19cdb1dc5cddb805ae4e7c3c3239659ffa9c7c5951e6c3b485edb3c2606393373fac452eeffe1c92bbcb9915d23501e9e4cfeb4f7f39ea1a2862abd7c42c2164988437b69a5c865ef3c6771afa3d3710b6b12c48288c9e537fbee04bfd02c8d83d9f1153593406bc23fb278f43666378f70e9a1671c02a811796b", 0x7b}, {&(0x7f0000003a80)="52f76a8d98ff9b8b977339fba866e7a371d4242d56813cf02c355ae8585e6e9585b38f37e7a6c5df0dd3b3c2814a9a9ef5468afa79e3fc61c4e6f3eea5266543dbf57c45f0e25804d161c3e2e634e05691f9f6c35df0a12cf5611cd2bf3fffb5bebf0af1e2cc9b2ac8097fbc946e127209054cd5b8602d8f81a5d282787c50daae86098cdaa50faa559ef6fbe275e7355b39a86424f8eb927f9a482b1323da0de552a483fcd6ab81d028216f85bfbfc946857be6d4a37f16775ae9314d488ced13c5b0592a70c38ef74e960d7561028b09c2367dc6b198f5f24ebe638bc0fcd540ae1e4f063588045f9186ad5f3d84418ed0ccb5c630eb95b3d92d7130c7a39062984b073737145abd2e942a0a10d38fe35d97ad1183ff20809d268461e420db57ead265873e74f1a3434ccf6742a4068c08c1c69e825b534970d3acfdd178092aaf404972466b9396994b184a83143a372bd825a2a07531bb9a6d683317d696694e3ab9deddedba2c099b422884831f50cc08826ac38d7f1cfd2a4f8247ff84f634bb0a31363a3c84bec0d8026499669df9c8d3db7752e0cea91fefbb136fad203c2b1b84400c2d5f22b9034bed3ed88af643e204cb2ab153aa92ef052f9b8f6f3410221226f210fb4439513e75b8c158002e2f6b1fe8f4375b9b17ae59a684128474d259e37666d072a9a24a4f841f6b99adc816cccba6709adae4889b638a7bc243c77a181fea777d05e92ac125c6e080379706ec2e07f95ed01a54c88c1651f9a71ff18deca4e9e58d62ecd394c3afc9f63e774bc0fdba887a47bd6b0175331a8c9bb7b4b7ee94b432125f75c5ae6f623eb03314ad88963fabc4835f386632a1b870253d2c0ca4f49615ce1abb486b8e7b913b1bcd1aef86f2f4a1971a09d2df03ef282fa29a52cfbfac991de6f5cb802e34ed2d97fe2277ac66ff67a8755c193fb9b6337c2442918c06249c6900a71600890b266c018e7bf479434ba3fd9894e826af9ff6f2bad366265d17a1a594bb0ac9823fb574b5cdc7b1ce8e506748628d08d57bc93e932d567d8d958e02bdbbe998ca4476f600199ebcc6255c6a720f1ca99ec14d9bce92095fa44765aa0ff7a9186af92f974460ae5331b7af398c91da6208c97a26558f6b467b565396d888766dd18982def2a7491823e8a8d472cd18fd74ff50208f4035da8541ac9045ffd052cca2496bc7c12562da02052747ba6976e8476f6ab62a69b6d557ef1bc4ca4fcaf3245dacaaca79f7f9eff613333df303cfaf0c705d3b555936459da71294a5a2728383eb0a267cbc7d122611a40bc9a17a58c12d986e8ff7e913a2dfa0343fe15a2b6437beaffabf1efa32d34fe1d0de67f8e0990a2abe1dfdc76af3c9a11652ea3c1f12f0e522e96e5d9c98d94fc63b00bc7c393276a6c91667f4ee6010356880285c97e7b31c1291fd43af3ee9d66dd8d671d519b91ceaaa04fee760b5f22174c973a14661810f8f3fd6d4df2019bb3e5d0a2adc7db2ecc9ea78073abac14581f1beb181f1a71a9f21db661b4c5acf5047ef53519c4a9468a708146e1f962ec93fa6c0bb6925bd75e8cc275289c64a6aeb8cc1e8cdaa502400c9e6a87e517062174f68c88745be7e626d41146be94057e0c94692372d65cb8eb3a5dc297c6a4e90adc7f9d78313c438bbd0c19e2f5d572a7117a03d39db3242c09573e3bcfcb528e1576d44331356227ad48059a5651f8638092c55c4c9dad9439e61ca730bf93512d020fc1e5fb417d03dd3cd913e828dd672e1af92bc06545267180784b46897bb9eb1dfdda631bedc51079fcaeb9bfc4c9e2973b940aefbfeeac53e73e29345d800500e325f354e01977b49dca1c16abb2e74ad87df2731e46a90e9ea9cfaf4d1c0f7a32f807b1951c069c7c396c14a2f51dfd86e34b02e24982204e42414c63eef6cef5910b9c5127a248bc935f017db7553c4c9c905da93dc1efba231449983d1219720dc07d33a557883e1593add3ea5f734cec015d2f845c98bd8bbcadabfbceedb50514e73622573f427f06a9fb03c072eb2085570c801d091f0fbffa19539d8c59f13de386a074fdd5aa54425939781d6fa096a453d3f9ed023998a7d32e3d4a64cbeb8d0ec76dc55cd42bb06a5700c765655a552bee3d1787003c20678e1985d6c0fce2c66f773e2a9ff0d29c5540d40d6c6bad39d7d864781241700340b4d2333d73be1cf4dcc961cdadb74dfe22a0f2b3027a041cb38929bc6dee07dac139796f63cc3c9bdba5725ea58772e04379e6d46e77007b2d19f2f43bf1de21704fbeb0031f3dd6282f872bdfb859b57a889da0314b8ac733016ac3efe64b921d6d5d45809dcaf73fc37b7e18f4ec45f4ed384eac680da741039c9624af88fbf969f4f6de2f0381392235b2902b92e1058386fb8f95688d1440923f02f105f6ba52dec27f121971a8a96dc5be78c627d068316c314a71e1386a14dbcbd948d5c1fc795786bd88652ab88107b7a53c3c51a010c184c6b76c8a058bf1cd268cd9f4790891a8d6023808101d5c82d331d191ed1389e528ec1d9db30de5f27ee81329841542ce834a81ed72caca0aa5009616011ec0db17e8030173fa1160fed45ffdf486edf47f8dd1599c9d11e53b4525e5ba6539c4b8f2be1c53e0c8d811415dfe314449e04c4c10f529b8bcb400bbb0b8abe3c9afb2fdea3a1f5db0603d385ec66dbe90f51164f28bc0cb86da9ba922ece5eb5fb89ee47405ce7d4b2d5600fbc027e53ff041841443bd3d08aad7a4a6e9805d3ff9c06895b1877486fef41a99b00b148297d0bd0ac5c0e3e14080b86b3306ff7f20285feb6162dc820f56a5d8415275f1e974efd969667fb879afb398591ed87aa4b641e50dd8443db563910b2a06a525a8baf90e9bdc7482abb82a5d5cdf999de8a5561f31272fdd569c26df6dfbde516d6bd9611b635d52384bb860309934abe72267447eefbc6361ddd33de07add0a4de9df45c86e5815d1cb55e5175359d143106dbaf8d0acc9324cc95eabbc7b521c8b1869fc36f3e19b74769231fb9dbfe72a2424757d3c0a2cb7516082fbe95777bca7caa39becfb67be2b6affc910b10af93e287ba57d2964e2666a6c56454f1bf52ab019881d12d290465475a6fc43b6f0bca13e36b178fa78f914f6a830505f279690b538a3543f58b985224dab55de1297e00c3084c3d78c12d5c8904c700ceb2f8faeecd0e576fb9caac579912259f71c30dd060ca46802abbd024e05a6a9b8477b07339ad4694844968ea10234cb01380d5f3e1b8783b1bee4b02ba218b002270ec8aeecee561cb40737af581f9bef5d01db304f292b71117a5ca9e0cb696f9781fd0ff77408ae1a24edf13c51c10556694b4460154c5e954a5e2ff502a7554875cb063d2f9c742e5b3bcf46608b08a8a61cfa2ce6608387a016473e6c3331bc1197403746af3d5d6771a1ccc46f5fcfb94e9dbd4dfa4c0e296f86a7153088da87b508c76264ba084c14c18019f81eb347140a40f53413fe3485c9f0ec9ff301b1caf6e36579b629b1c0da61d0134d01c0a002f9038177b78fe2d0eea077330523a0c7b76f5f70beffcbb3e0051ee15f355e1c27fe4b87e75cc2aab98163ee0b6ffe1a0ea77c0cb9853d5f8dff77024df9028bba99d873e1f4a1a333aa05781c0dde332f6c084c1cf1ebaf9ac2410fed9861a520ec350be4f559bd9131848bb8b6785ae8c8c8ef197a9925249571ab54956a314dacd799a9343b9326e51cca03f245cfd70bdd66abe229f7bdeda80d74899cfae383bbc3439c471a10b3cc5469b4196a4c552218e3c8394af3259eaa762af153a3a924826b3de24eac0abe4ea5881796b38f094021258cb967fa25ae43c36851c1f9af3e18b4089023ac950088af7e07ebdc69aaa620302379d816c427872f06f1102ccb26bcbdaa31d99ccb17b56c8d0e50b1ace2b7490391e999b55b70c92df12c41b5db1b5610f2fc0a39a178bd6b3efa9e91dc6d03cefe7082208f4996bf92f9107511a03d7dbfdd270da2f331a5dff9e2820904424d0901ccad58183e5306f6e82b11e582381f97bd609f9c75429aa7d7d1a6aa7efadffb28a0cc95cc74ff40cb649c1bc89edbce4db9265bd8f515a6f51c3037e54dc7e1e654d7532061476acd8c4b6c0dcc106defdf0c4d2879d939a07fda8b3baf39bc93196644f4589377d6439330622a165c95262c732af8c7ac573eb7593f2ea07d0004b7e0dc87bbffedae8a8f4571bc1f4f7e140ed9a5716e7dcd8954834ef0aea53da6a5a99afe5c5ff15acc777e8fbd19c2d5bec7664da04d8a32985e7a6ea1395c84665319caf89ccfc6423df018c272643d1089908065e65a01ffece62aeb1abd70b582fe60631e8cc66226f4bb9e7393d25a308a250cbf4a26e27a9f5dd31a38de43062ab951719a11fbd520ed7044c1c108eff5c25667a72aed99623d2e891ca5edb89d40d63fcf3e7955388c43d93400baafcb2c6b5d74f9d97b468e42d08ba228e7938eee2ad710d1eb18f7dd69f252a5965fcd4fa6ea7e370ba89e517dcd677de259561e4595753448cce0ce485bdfee9fdd115c56ffce2c6586bf87f7e9cb96b468a59f460072f2ec6603bd3713f70da0b38389669980a487035f641cb3f7b109bd293d31b159d07e9402cd031ef1c01ff5f0106543c984176aa42e578ffdd7027b1f6222b8b814e6fa751cefdee4abfd16a8d438bde5430b95ea4e70b637a5725b8a2f940f1e0a900082bffb936cfecd7edada1dc4bd0685a0dcc2529b1b015121aa41d7d5f6d48cbc78ea9e31ee3ad0047b7b0e54416aff671a8725a0429a26e122141c42b270fe9c6e47682a955358e797df680c2c324853a90e64687da77a32c44cd06f2527473b13b550738ee3deb79d717023eb632ee41ab47ab21a81089d56b57ac8cff06f2b404bc20d69ecc07d013dffec3ff42f28b8196f04e19c638f2decc0f30b86bb4144fd411e45949bca1faabb86485830b447ea020e67276ef81e5105b1f59e7097614f432901202ae2f6d9ad1c4c857fa85095e67953e618a37dd66408842bbe2db73944840318cfda1766a0ea01f73387678521a7cfb123b9068682c33d3ac4c7b539bc84c5014af3ca07fd2d53915990bf37fda2391689cbcb3adb68812475155de6953859e267aed1e7cc1a6e454efb5da24712983154ab0d083ad4968f5b18398cfb62b0dc2ab747086e2e32af6729777904e8e01851b94aa65c3e7e5336f3f21c9236c2be319f4f73870741afc6950e2dee2ec6950e88190f1b921fb0841c646f864bcafa76cae3be5c95a66952ac59c96867eb128a0153310d2e65952cab6c914d7fcf91678ffa7b61cacc86cd49942588e3472d281ab83a71dc5823712881a1ec54b3fd872c47b53b83e8f1470ef8df0cbaa6e38980f13c6f22408552506698e1c657e3c339ffc4c62224e9b26db5bf23101ab78175696d7713dcfe5d3734aea918a57064b7327d101377b43e142bc1fdb445dece7420fbc956fdc2356c5dc246ef62490c89dc207e94eca88f2933b566830f6c5d770104a0842f454fc4184d812bbe9557fd8f45c62027a2254556aa4323183327b4e6eb178c38c2bfe9d9731c71d7bd873c83586b0934f3f403b654a7bd3823efdbd127498debde5c3f8fac6fdc69a6a989f327636cfd1f279e938a0fd8d5e1eb98df0ff11f1694f5b0e3b1f3fdcb340a11d0cb3d3960adf8c5b9c109cb2739d42bdccaea86e213b1d10ee49907d715e4b59c386e5d3f87179bed0c63f6e5bc8addd1b27e0b84581c875abaec7697676", 0x1000}], 0x8, 0x0, 0x0, 0x4000}], 0x4, 0x4000091) fcntl$getown(r1, 0x9) ftruncate(r4, 0x2007fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x1f, @local={0xfe, 0x80, [], 0xaa}, 0x8001}}, [0x3f, 0x73, 0x3, 0x7, 0x6, 0x7, 0x10001, 0xe9, 0x1, 0x7ff, 0x7, 0x4, 0xb49, 0xdc61, 0x2]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000400)={r19, 0x1}, &(0x7f0000000580)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e22, 0x3, @empty, 0x80000001}}, 0x4, 0x9, 0x9, "3bebbd0adc713bb0c7e9a0ec51c5d2a6eb8b61076bfb58f9cd5fbe7855807f8d391bbfa37c9cc2d88309a2d55b43fc4a765892e9dfa8d0c0b2d7b79fd1244e0e15569aaecb9cac21792fda6cf7cf8e21"}, 0xd8) 23:06:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc2000000], [0xc0010058, 0x4b564d02]}) 23:06:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840000c0]}) 23:06:29 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x700]}, 0x10) 23:06:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x7ffff000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2550.769803] binder: 19933:19935 BC_INCREFS_DONE u0000000000000000 node 1455 cookie mismatch 0000000000000003 != 0000000000000000 [ 2550.781826] binder: 19933:19935 got reply transaction with no transaction stack [ 2550.789418] binder: 19933:19935 transaction failed 29201/-71, size 0-0 line 2759 23:06:29 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x2000000]}, 0x10) 23:06:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x80400, 0x100000001, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x100000008912, &(0x7f0000000140)="025cc83d6d345f8f760070") recvmsg(r0, &(0x7f0000001140)={&(0x7f0000000e00)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/88, 0x58}, {&(0x7f0000000f80)=""/202, 0xca}], 0x3, &(0x7f00000010c0)=""/98, 0x62, 0x40}, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000280)=0x4) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000300)=0xfffffee7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() syz_fuseblk_mount(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus/file0\x00', 0x8000, r3, r4, 0x1000, 0x3f, 0x8) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) recvmsg(r2, &(0x7f0000000dc0)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000000b40)=""/249, 0xf9}, {&(0x7f0000000c40)=""/82, 0x52}], 0x5, &(0x7f0000000d40)=""/121, 0x79, 0xaf}, 0x20) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000840)) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r5, 0x2007fff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0xb0, &(0x7f0000000680)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0xe6b1, @mcast2={0xff, 0x2, [], 0x1}, 0x57}, @in6={0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x401}, @in6={0xa, 0x4e21, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10000}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x2}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x1f, 0x1}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={r7, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) munlockall() setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) [ 2550.880579] binder: 19933:19950 BC_INCREFS_DONE u0000000000000000 no match [ 2550.880915] binder: BINDER_SET_CONTEXT_MGR already set [ 2550.887761] binder: 19933:19950 got reply transaction with no transaction stack [ 2550.900612] binder: 19933:19950 transaction failed 29201/-71, size 0-0 line 2759 23:06:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x480], [0xc0010058, 0x4b564d02]}) 23:06:29 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x3400]}, 0x10) 23:06:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd004]}) 23:06:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x14c1794867ba394b, 0x10000) [ 2551.083502] binder: undelivered TRANSACTION_ERROR: 29201 23:06:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:29 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x8055]}, 0x10) [ 2551.242292] binder: 19933:19935 ioctl 40046207 0 returned -16 [ 2551.255050] binder: undelivered TRANSACTION_ERROR: 29201 23:06:30 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0200189e", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc) 23:06:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8601]}) 23:06:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x11, @time={0x77359400}, 0x6, {0xffffffffffff5383, 0xfff}, 0x7, 0x2}) fcntl$setstatus(r0, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) 23:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x221001c000000000], [0xc0010058, 0x4b564d02]}) 23:06:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 23:06:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2551.765393] binder: 19999:20003 BC_INCREFS_DONE u0000000000000000 node 1458 cookie mismatch 0000000000000003 != 0000000000000000 [ 2551.777337] binder: 19999:20003 got reply transaction with no transaction stack [ 2551.784889] binder: 19999:20003 transaction failed 29201/-71, size 0-0 line 2759 [ 2551.821277] 9pnet: Insufficient options for proto=fd 23:06:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fanotify_mark(r2, 0x22, 0x1, r2, &(0x7f0000000000)='./bus\x00') 23:06:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 23:06:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2551.860430] 9pnet: Insufficient options for proto=fd 23:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xd9010000], [0xc0010058, 0x4b564d02]}) 23:06:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00000000000000]}) 23:06:30 executing program 3: mount$9p_xen(&(0x7f0000001280)='rfdno', &(0x7f00000012c0)='./control\x00', &(0x7f0000001300)='9p\x00', 0x40, &(0x7f0000001340)={'trans=xen,', {[{@aname={'aname', 0x3d, 'trans=fd,'}, 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@version_L='version=9p2000.L', 0x2c}, {@access_user='access=user', 0x2c}]}}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r1, 0x100000406, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) ioctl$KDSETMODE(r2, 0x4b3a, 0x7) write$sndseq(r2, &(0x7f0000000040)=[{0x2, 0x61e, 0x1, 0xd9, @tick=0x2, {0x3, 0x6}, {0x9, 0x80}, @ext={0x1000, &(0x7f0000000200)="b90e47b0677ac84c26f5f3cca0acd5e75f43bb3b297b3ae64c75431a3165193457f4dcbbd06c8e14f36a5a9838155e8bfd296fe40936685b76f39f2898f5c65bbce4d620ab56267bfe6be153ddeea5400f3f2c3ec6cdcdeee70c4496f0492f2f60e38767dde447a4974c2e94b4690b2ade44f2e3bcbeda855e0cfcb352847ebf3993c4b944571432eec1ea888aae8a5b6a1f2bfd7e00dca8f75070b6fb3671df8807a1b12bafe69149d189338d3a5ad6e80f695aac129765bf57145e0787adb3469724ca5ddd679acfa56a0c5a8be65072298c7edf6b4e307f94162e48b6060876c4776bbee1569f46a974ecd8a1bf1a30dd33a4770787b9de7c8831c5319e64e0a9f2d593b5a3176b7d8c856cbb628474cffa656e286f138e23e982dc55b5dcc9579e4240ff36c269c23a5ceab71988ee14664099808d5d1b422e75785b8be597ff9496225fdd946db10d38cc5be948cb4be14c133f49b9eae61aa8873690c330ebdcca4652ab275ee501457764997dd1a156cc5f90fa470c0f14b191f68dadd1b2f30643cdf255ec4634df5912f655f1b4450a4f9ce1b35c47d49aef70c70bb7e9af7f7a717606b813840bc8436e85f50a3410d5cc77078fa7f8322441a0f85878b200a8656ae94a7ba86c4377e19382be8b8d05dbaa1dd622a1b3fd906a7e23f40370a8f80dc8c2e62a7d7b260d0757952b90099b875a6e79505a3d50f0f2908ac63876d16f086709ffba81318618cbd50e615a0a8bd1f86d17a245e9ebb7eb347055cf88860c7896582ef0a6bc72f51e3e0cc70ad67b1983affbfc9ef9162722e34755c5fad08ce9600a99f358d7bffef9fa0b88bcd5939b1f1f19ee48a25613fb49c6dc8b70aedeb3bb555d1eef06ec2706458039f89da2ff33aa9198f172ad5d2639eea5eeb266a84dc7f0818ad64197fd3dac2869488b6fccd4206db33ac8d5f0607617e01f3e9bb28995b0d64be428754c475f5d12fdaa7555f873ce687c7111f51c700e53bd3bad9b2f6c7f3d4b5c6ebf83ebc8f6472efbf1c1361b274677cfe41a0d99dec0aa2c6188ecd49d4ef1827084a00419329d25b3ed06960ef946563ff02dd12cf8acdd949826d902fae5724a0d362f607c6807422fe4cdb0f09f6b3ec2a45b77637a712d2b395ee077b250c01db906a08ec5a0e5f6af33376c89fded1eaa1d248e6f879dbcb929f45bc65a4edc7ed84c141b263c37573880b1d38dafae9f28531f218cda7b73bd7251786a7136f01a9498608f100a3ae747a42f68067c42a2bad7feeaeac3198706d8eef6a7c64cc030e0dc20a952d618896bd7b95c1a40961a55c33b28bd6839fe1b14e930aa2f02c739e623e81958e0c228af6ec8f86fbe43144222daef754470be49d0a2ef637c1e686ecda329dd3d313152a03bb1d8d80f2a26880de81628cf6c50c76cc6ce6ae0b35b9a9c2994a3be4dce6bf3e68b59189e3e65692172fba0420a1b22b7f7bc78242ad01e35907f52b4fb8ed8b5f681ab08e9ab7e24c3678b3b7ea546e8e07a7d1916770197a95c52e3e85a48cee67bedcb0b41c7f3fe07c863fd92987578189674e8add88eae4ab4ba933c2bbee5e6e24ccf9d57c250230e8e132e973b8098956ac26675c6325ef1e3a648f2f74268b0ecc75135cc7d2f0586b1f672ddf75b266ad3fb88e3da41a9e91f43bca197d8a991eb7614012a95178366e24119f0d4323974dd2a7060bf4cfa65dbc5bb1adee07af43c8007095eccea2ef5ef02f00c604348ecb372e1e7f2cde582be47dd15e3c6b535be25b3b47ec92e8f4c641a20647ef7faa87b9b50f1a45db13d84a6eda87c65e42f4d00df88e6c31ab353449e56c214945edcf0da781254ff3892c54a7ab4d1c6008ab4cdcbae22ba11c47dedc8d903da6cb53feaad030b63bf5481be3b284578ffed6c47ab446558dfe9d200ad8af1be2fcd890c000eb93c82c646a51042527c45fe67b144992dde4962ed45624a5412cc3c8f0014adf951f13b96f7fc10dcef92af2413d6a4336766abfee3f6768cac48e400b59c8e839e141cfa1cea95f271b7410dcf9c6f446d203a79e4edc5b727ad6c3aaa47eb101591e14143f353c54f589d2dd310c564d611b5d5ae7641090546baee5003fb52357132a4abe35f2d32b0cdfae7c0e1c48c490b070df6bfe75e88943e3d2056828aa98dfb357627ba1fb811b59a6c058e8d5b6c876d278f9f4efd882dc30837558c13221187b298e5ee83d4216099c1e3f6ef9b0fe4b2e98275efdec8e6fe1d4e5d6ce99c8d18ee6211c382de0f56fdca78298ebe627196c2e2a294912b9479b0593f6a42ea9fecf05ae0a2c92a4e0b2adbf37a83bfc93b1371b2d57eb9653f27069340e4984e4bf5d23690a31b3c9253403ad1b614111287dd873b0b77f6befe7b354d27ebaf01b8549f46ecc81899211c148d359091d242caff668cc18a30ac702c05215b31bd620fe9fe8f48385a1aa8501179d7aeb5ba3b168afc1eb7b70e57ce541d869a3e923fd1c4eaf3d7b5f2c512698dca15b75ab5168b0ea3d1df24802ee0e3b19fe135fb60b22a56c08639c4a499612d6feb05e48f19d00295d1e05348764a67e81ccb205506e7faad372c458e032e72cafb85986164bb132e7f44a23dccb1f2ab681e409aa39247af2cad9bc2870a000b0fe90b8d5fd3cfb4b4af07fdd07b66dfd77af22fa2731912589463ac830898adb4804e36d07c413ca20b626eb9c4fd739b0114fb66a2496888fa38ca102ead7252266188757a501e48f51394bc90f23c568b87cbf483b7bb5c17de64084dd575a0c0e7222952ecd7d1d6a4e35a3246d3e34f87c96617d05bb80ef6d3194b84a685cf2f4c79ffa4f632ab0be4e70975e78aa54cea3b9dd2c2ea1e7403cc3813fd27eadb24d17987825b5407e20c857860072812f7245aaa13154d44bba8c5d1765608e3679a5d7141d19bcaa6e5dd5581343b5d82bdede1c8faa8f2081e25c1a8f22112db4357ebf6006c9d7733ae12d1f72d36655b4b7cf5f20c8dad45daa7b292c7a7d5d8e0b29d32b75728bdbc8028c62fa21c43fa40d442410b74843ea3f67e25787b5d667b5068e4a785bd0bbb3192a20322573116031f99fafe7d9e77e6f510f0f2c44ca167b7e66622679e469cd464e9e46785d14ee9c01fa1521e0288ff382d1c5d1f17316cb55649a7f3edc165faa189eb53a1f802adca1e6719fc81e754015c47207d1082bea137b7b29acf9b5805bfef943b374973e5dd9afb1a886f682c88f6b29491c16654c12ab7e715b57c8921109a9120a4786895179d164aa2d2287883e6e4dac085794adc04f68ed966f2e1f7e296cb5c79ecdb20bd8c0a3c6f51e87edca498d652764726a4c0ff3b31f3d6c5372fa0e9c67e0605fdc4ca2bad44c173ff1d5b19733a6e90f77988e88d275aff2fa139d6f65bf189eb2b6c2dabbfbbed458f12b5958a81bfeb26c0c19e7a7e625714b27dad73abb330d6b6b62b0468de6b609547c1d6c6af7049df0536aa94840bfbcd1452a8ee2d68aa5585dff148b8363985fdf1bdef1db9fdd903f268d08f763170c5cf62da513fa0a141b43171062d904403641c84e3648d9782fb5067ff9188050bbb89b2656425ecf5fde17b3a40b3842c5c07a16d8c387013f733210bad6ef1a8a0cb5c0fff2d87d69d9eb374fd7163f7485cc3c85e71fa9a2a9b8e9054419ce9b659939660aa7c5d08b26be09bd8c877675dd3e596a416b0895a8c86519f8eb74b55427f3aa2e8ea1756c54f4cba8af4f1a88b8c7d5dccf23da5681b1e1332a95e2ee333626dd091cbf4c2b7707072d4a19d41cede6c60a78b2d7ca8ce0d89baa89ea8a7819418e1d479bdd64e4e151f1a24a65ac601cee4ed9160b45a6053a2d56e1ca05722dba6ac0b837437a92d856b7a65aaae90708527fc3542f80b7bc70865412ec0af7cfe7b6ec5360bc799556d5420e60d71334445d788a31d31b0ddfd639a225b4b83a773ee14b4a0f93feb71def050ab00fa51dfe148000c8f9c444cfe5ac0701537a94013904023dedaa7ffe97250fcc1928277278a0716f67311c167c3dcc5df584f9b87e2af0e65c35b8aed1045303046d463c8a2001cd2223b5c45f8ceff1e147fdd12503f1be260f50b0c80f9674f57647438675fe16d5e035c86c028a3c7009e1ab6294e00f9d3b822a90be72af0473683adeba44d3cccecc17dbdfe5ae9a9d0f873ac584c66e4db30efc44d6781d04ad5aa3ff505ee37db9e2129a41f902c7c29ae0460d1b67ac6dc44ff131ae00b69ce070bb216708024e05d0451d61abe1b44e3e97ad20ac110518a252d5481711b78fad11d4abe4447c8190850bcc4275f48aeb5f403b37971b4c4130a6b3b51b952077320b06e0d9294600b58fa0186d94228997e39928d8e023c1b14be4a192a1110a3077294a4aa0ada3bb2f09d0347b3e92eb8975af9d82d464b286a5c62549f0387743814717fe43c53756b1d2643b6de02e3b4a0ff7f43feb3850670320cb2fe1efdae0c8b01c0681b8026ee26f50327ad64d04464a75f1f4f1e9a9d612a39a9477e909de28a12b53f6c92a74e50e8ef8e877d16b4344a946253a37199322a85fafdf7db1d2f31736ffeef506be7a19afa8caf90e3288329ada601eb836a2192ca2373045fd8f5bf786181ea71d65d90be7c23894521c1212be2bd36c14948c08bb7885cc569affa32a6c26d62469536d01f6b60dd5f6b6e73cf518ba914f0a962105456554ee0d1656a2d47e2fec5d57caac9def3790cfa0abae96a86add6776a9289b55996f3446adcc43a489598d747aece0ce911fe2ac0482324e1491e3c8c4bea4738f73bc768a674ed04d542b4b8286d78ffe35dd58dfe76656e0524fedf0f7251e54c7d9ebf239b3e19731f433e41dc89b48bea32b81841b9719d1c8e2ec45b4455260f23fc14fdf2ecfdb21c5955e453f86d7722fb709dd87cb2188befab59a052107943636272b7f077447ac515e058d0293cb16dd64d47b4df2008f9dbf90d933faf4352506d02899e214ae1ca1c47bd818101a7a252c820f48449350cb9ef75069f7f1f86cc6607babdf419d81e6c38f6597348992792b837f0d42bd50da23b7c809412925f7e07d2c3f40934c6ce1d3293e0e47f4a38b0b005d087921b4902d4d6104be1d4a886ca91c0f23c9c4ac6ab201972bf5d3656c18f69f4926d1353b12a077b7d0d4a832af7d43090ff63b9edbb4fd2d4e1c5a656ddb5d468967b0a9343692e8800fc3fb12dbe7d19a100dfe88899b37d6db4692b83c34bb1d68033be6525e4a9b5440124874a46c61e541d836c5a4b667160478c003990916955d3dca9cb98678dc31b32901b6ea44c591f960f2cc86ad2a4c3a375627774226b599091573194c5743cb807ce6dca205db5f35fff62eceecf2dc34868c97167ffd1cf37c06d3949a11809e312d0b3236d24c09b01d2c2f765993140b8f211b43c9c6969c87138e9937959d2eb60db65f0cbbfa52e3a147ee3e928648d187d3826a712f20b426669bb0f0d41c44dab1b606bc4f602f3081896f2cf8b1c787b9862b475a653bf342cc07cebf860885ff24b72be209ed6cd08b65f73d35ae584e755b29abf20b9ff1bc3c36c2c59609e468af5178d4d2318f286aa1529985007cefa96d32df27577b8b6490203cb721abdbf9232e8266e07cd978e20601496310d574b594ad501c05376358a40b961fd0a693830b237c90eccfcc94030702ae1f531a59d35ce5064a9ec17e3e7b4a453fed6f744c34a70734e371159463592c80f7584c4165c135fdfdbccdfdfa1beadc560"}}], 0x30) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, &(0x7f0000000140)=0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x60000008}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x64, r4, 0x0, 0x70bd29, 0x25dfdbfc, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x36}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001200)={r3, 0x7ff, 0x4, 0x2000000000000}, &(0x7f0000001240)=0x10) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x0, 0x3, 0x7}}, 0xfd15) [ 2551.975061] binder: BINDER_SET_CONTEXT_MGR already set 23:06:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0xf401]}, 0x10) 23:06:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x20, 0x200000000000, 0x4, 0x6}, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xfc00, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) [ 2552.017186] binder: 19999:20026 BC_INCREFS_DONE u0000000000000000 no match [ 2552.024491] binder: 19999:20026 got reply transaction with no transaction stack [ 2552.032093] binder: 19999:20026 transaction failed 29201/-71, size 0-0 line 2759 23:06:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2552.151530] binder: undelivered TRANSACTION_ERROR: 29201 [ 2552.164379] binder: 19999:20003 ioctl 40046207 0 returned -16 23:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xdb01000000000000], [0xc0010058, 0x4b564d02]}) 23:06:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x7]}, 0x10) [ 2552.192766] 9pnet: Insufficient options for proto=fd [ 2552.194653] binder: undelivered TRANSACTION_ERROR: 29201 23:06:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d000000000000]}) 23:06:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r3, r4+30000000}, &(0x7f0000000200)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x7f32200000000000]}, 0x10) [ 2552.338836] binder: 20066:20069 BC_INCREFS_DONE u0000000000000000 node 1461 cookie mismatch 0000000000000003 != 0000000000000000 [ 2552.350774] binder: 20066:20069 got reply transaction with no transaction stack [ 2552.358329] binder: 20066:20069 transaction failed 29201/-71, size 0-0 line 2759 23:06:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1004000000000], [0xc0010058, 0x4b564d02]}) 23:06:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86010000]}) 23:06:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) [ 2552.489191] binder: BINDER_SET_CONTEXT_MGR already set [ 2552.505539] binder: 20066:20080 BC_INCREFS_DONE u0000000000000000 no match [ 2552.512835] binder: 20066:20080 got reply transaction with no transaction stack [ 2552.520390] binder: 20066:20080 transaction failed 29201/-71, size 0-0 line 2759 [ 2552.615524] binder: 20066:20069 ioctl 40046207 0 returned -16 [ 2552.616341] binder: undelivered TRANSACTION_ERROR: 29201 [ 2552.651108] binder: undelivered TRANSACTION_ERROR: 29201 23:06:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200100, 0x0) readlinkat(r2, &(0x7f0000000080)='./control\x00', &(0x7f0000000200)=""/76, 0x4c) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='@']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:31 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 23:06:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xce000000], [0xc0010058, 0x4b564d02]}) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150001c000000000]}) 23:06:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2553.119970] 9pnet: Insufficient options for proto=fd [ 2553.131344] binder: 20111:20113 BC_INCREFS_DONE u0000000000000000 node 1464 cookie mismatch 0000000000000003 != 0000000000000000 [ 2553.143386] binder: 20111:20113 got reply transaction with no transaction stack [ 2553.150932] binder: 20111:20113 transaction failed 29201/-71, size 0-0 line 2759 [ 2553.206325] 9pnet: Insufficient options for proto=fd 23:06:31 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 23:06:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe80000000ffff000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) [ 2553.254278] 9pnet: Insufficient options for proto=fd 23:06:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000640)={0x4c7be371, {{0xa, 0x4e24, 0x9, @empty, 0x10001}}}, 0x88) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r1, r2, 0xb, 0x1}, 0x10) r3 = dup(r0) fcntl$setstatus(r3, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r3, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=0x0, &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e20, 0x80000001, @ipv4={[], [0xff, 0xff], @rand_addr=0x20000000000000}, 0xb84}}}, 0x84) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r3, 0x9) ftruncate(r5, 0x2007fff) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8010040], [0xc0010058, 0x4b564d02]}) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd00000000000000]}) 23:06:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20000, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)="c2d65a27d67a403fca5821ff9c87ceed6d218d48af1a3538eeb0815ac7d2fa167950bd0908c047d9b58d8a5f07dc530d55ce1be1478eb248dd58", 0x3a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r4, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c72e6646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cedeb8f7a65e46d7845cbc9733cb7bf"]) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000001340)={0x2, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x4, 0x1, 0x7d4, 0x7, 0x7659, &(0x7f0000001300)='gretap0\x00', 0x2, 0x8, 0x8}) socket$inet6_dccp(0xa, 0x6, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000002c0)=""/4096) [ 2553.415833] binder: BINDER_SET_CONTEXT_MGR already set [ 2553.434096] binder: 20111:20150 BC_INCREFS_DONE u0000000000000000 no match [ 2553.437353] binder: 20111:20113 ioctl 40046207 0 returned -16 [ 2553.441247] binder: 20111:20150 got reply transaction with no transaction stack [ 2553.441263] binder: 20111:20150 transaction failed 29201/-71, size 0-0 line 2759 23:06:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:31 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x3500000000000000]}, 0x10) [ 2553.449718] 9pnet: Insufficient options for proto=fd 23:06:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc200], [0xc0010058, 0x4b564d02]}) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a010000]}) [ 2553.528804] binder: undelivered TRANSACTION_ERROR: 29201 [ 2553.535416] binder: undelivered TRANSACTION_ERROR: 29201 [ 2553.551879] 9pnet: Insufficient options for proto=fd 23:06:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x6000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x1, &(0x7f0000000580)=""/4096) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:32 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x1000000]}, 0x10) [ 2553.638615] 9pnet: Insufficient options for proto=fd 23:06:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000080)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xbff], [0xc0010058, 0x4b564d02]}) 23:06:32 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x80550000]}, 0x10) 23:06:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) getsockname$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, [], 0xb}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e22, 0x2, 0x4e20, 0x2, 0x2, 0xa0, 0x80, 0x3c, r2, r3}, {0x6, 0x9, 0x9555, 0x130c, 0xea, 0x3, 0x1, 0x80000001}, {0x0, 0x6, 0x3, 0xfffffffffffffffe}, 0x4, 0x0, 0x3, 0x1, 0x3, 0x2}, {{@in=@broadcast=0xffffffff, 0x4d2, 0xff}, 0xa, @in=@multicast1=0xe0000001, 0x3504, 0x5, 0x2, 0x9, 0x5, 0x6, 0x9}}, 0xe8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x4, r4, &(0x7f00000001c0)) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000002c0)=""/16, &(0x7f0000000300)=0x10) fcntl$getown(r1, 0x9) ftruncate(r5, 0x2007fff) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) [ 2553.786107] binder: 20193:20194 BC_INCREFS_DONE u0000000000000000 node 1467 cookie mismatch 0000000000000003 != 0000000000000000 [ 2553.798017] binder: 20193:20194 got reply transaction with no transaction stack [ 2553.805574] binder: 20193:20194 transaction failed 29201/-71, size 0-0 line 2759 23:06:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) [ 2553.905897] IPVS: length: 16 != 8 [ 2553.966419] IPVS: length: 16 != 8 23:06:32 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x5580]}, 0x10) 23:06:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2553.989418] binder: BINDER_SET_CONTEXT_MGR already set 23:06:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xff0b000000000000], [0xc0010058, 0x4b564d02]}) 23:06:32 executing program 7: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7000040]}) 23:06:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffebc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1}) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) ptrace$poke(0x5, r4, &(0x7f00000000c0), 0x9) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x7, 0x5, 0xffffffffffffff01, 0x7, 0x0, 0x5, 0x0, 0x1, 0x8, 0xd3e0000000000000, 0x10000, 0xfff, 0x8, 0xff, 0x2, 0x1, 0x8, 0xfffffffffffffffb, 0x4, 0x7, 0x0, 0x7, 0x40000000000, 0x1, 0x20000, 0xfc, 0x8, 0x9, 0x1, 0x7, 0x2, 0x7ff, 0x7, 0x8, 0x2, 0x1000, 0x0, 0x3ff, 0x1, @perf_config_ext={0x2, 0x5}, 0x4000, 0x1, 0x5, 0x6, 0x3, 0x5, 0x576}, r2, 0xe, 0xffffffffffffffff, 0x2) [ 2554.020553] binder: 20193:20215 BC_INCREFS_DONE u0000000000000000 no match [ 2554.027822] binder: 20193:20215 got reply transaction with no transaction stack [ 2554.035402] binder: 20193:20215 transaction failed 29201/-71, size 0-0 line 2759 [ 2554.038068] binder: 20193:20194 ioctl 40046207 0 returned -16 [ 2554.059471] binder: undelivered TRANSACTION_ERROR: 29201 [ 2554.067640] binder: undelivered TRANSACTION_ERROR: 29201 [ 2554.122088] 9pnet: Insufficient options for proto=fd 23:06:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:32 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x34]}, 0x10) 23:06:32 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2554.296224] binder: 20252:20253 BC_INCREFS_DONE u0000000000000000 node 1470 cookie mismatch 0000000000000003 != 0000000000000000 [ 2554.308145] binder: 20252:20253 got reply transaction with no transaction stack [ 2554.315696] binder: 20252:20253 transaction failed 29201/-71, size 0-0 line 2759 [ 2554.363350] 9pnet: Insufficient options for proto=fd [ 2554.375985] binder: BINDER_SET_CONTEXT_MGR already set [ 2554.376630] binder: 20252:20257 BC_INCREFS_DONE u0000000000000000 no match [ 2554.386949] binder: 20252:20253 ioctl 40046207 0 returned -16 [ 2554.388934] binder: 20252:20257 got reply transaction with no transaction stack [ 2554.402457] binder: 20252:20257 transaction failed 29201/-71, size 0-0 line 2759 [ 2554.412325] binder: undelivered TRANSACTION_ERROR: 29201 [ 2554.418484] binder: undelivered TRANSACTION_ERROR: 29201 23:06:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x3011, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r1, 0x4, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000243689212f385c55987619a875edab6b32e97c20a0deb8131a8ce5bd8a78286863537e69f15d54016f5a53687be895b74af065a03560b79b40ab3408b61ebe7b232a13fe52389270db312c5f90fa98445d516b57db5166df620c834ee47f3fa814f33bf7939ac38b97ba95708b597df29222c58c477dbbbbd52e726e876990738ddca8c76654901b13a3ac591c9cb0e13a5464f8b6b92ba1f1f8f2653d06ee6c2f93e7d17e0e13ed3c8012c3f87a34ab239fe2265501137ecc654d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000140)={0x80000000, 0xc95, 0x1a}) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="d364794b70d763ee483f0300009b421a5a126a99fb290f1d5c020000000124ec000000d462c9caaf22f200000000000000000000000000000000000000") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, r2, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}) 23:06:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1200], [0xc0010058, 0x4b564d02]}) 23:06:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:33 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) 23:06:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2554.713301] binder: 20266:20267 BC_INCREFS_DONE u0000000000000000 node 1473 cookie mismatch 0000000000000003 != 0000000000000000 [ 2554.725474] binder: 20266:20267 got reply transaction with no transaction stack [ 2554.733081] binder: 20266:20267 transaction failed 29201/-71, size 0-0 line 2759 [ 2554.734471] 9pnet_virtio: no channels available for device (null) [ 2554.749419] 9pnet: Insufficient options for proto=fd [ 2554.755069] binder: BINDER_SET_CONTEXT_MGR already set 23:06:33 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x3500]}, 0x10) [ 2554.761160] binder: 20266:20284 BC_INCREFS_DONE u0000000000000000 no match [ 2554.761844] binder: 20266:20267 ioctl 40046207 0 returned -16 [ 2554.768470] binder: 20266:20284 got reply transaction with no transaction stack [ 2554.768489] binder: 20266:20284 transaction failed 29201/-71, size 0-0 line 2759 23:06:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x2e0e52629710803b) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendto$packet(r1, &(0x7f0000000200)="e61c86e3b478daebdd154d63af5090978f22ba6eb83447177ab47bbf783318f567afb42a50008babc868ee8fa993fe373d375303470cc6f1104eca182acdfe6d9ac2d833ebd76f062c97f470edfb0bc28a915cbd3d31ff141536e3dc2b3160e59421e7c02166fe45975b67c04a7ead5cac59a02e7011a28668a6c3d356c060e19edcce8a724335", 0x87, 0x4000000, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2554.820796] 9pnet_virtio: no channels available for device (null) 23:06:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0xb, 0x1000, 0x7, 0x6, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x3, 0x0, 0x100}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0x101}]}, 0x30}, 0x1}, 0x20000000) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x900) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) 23:06:33 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x9]}, 0x10) 23:06:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0011022]}) 23:06:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8b], [0xc0010058, 0x4b564d02]}) [ 2554.955507] binder: undelivered TRANSACTION_ERROR: 29201 [ 2554.962980] binder: undelivered TRANSACTION_ERROR: 29201 23:06:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0xfffffffffffffd85) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:33 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 23:06:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000081]}) [ 2555.120555] binder: 20324:20325 BC_INCREFS_DONE u0000000000000000 node 1476 cookie mismatch 0000000000000003 != 0000000000000000 [ 2555.132468] binder: 20324:20325 got reply transaction with no transaction stack [ 2555.140013] binder: 20324:20325 transaction failed 29201/-71, size 0-0 line 2759 23:06:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x900d000000000000], [0xc0010058, 0x4b564d02]}) 23:06:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f0000000000)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7fffffff, 0x4, 0xe3a, 0x7ff, 0x1c, 0x80000000, 0x5, {0x0, @in={{0x2, 0x4e22, @rand_addr=0xfff}}, 0x9, 0x5, 0x4, 0x81, 0x1}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x245, 0x8005, 0x9, 0x0, r2}, 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:33 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0xe00]}, 0x10) 23:06:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x580001c000000000]}) [ 2555.316177] binder: BINDER_SET_CONTEXT_MGR already set [ 2555.332161] binder: 20324:20325 ioctl 40046207 0 returned -16 [ 2555.343373] binder: 20324:20350 BC_INCREFS_DONE u0000000000000000 no match [ 2555.350604] binder: 20324:20350 got reply transaction with no transaction stack [ 2555.358244] binder: 20324:20350 transaction failed 29201/-71, size 0-0 line 2759 [ 2555.384114] binder: undelivered TRANSACTION_ERROR: 29201 [ 2555.420136] binder: undelivered TRANSACTION_ERROR: 29201 23:06:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2555.847724] 9pnet: Insufficient options for proto=fd 23:06:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="286a5fb4b00e3c61b2f3a986afcd365964a7ecde9ab2d0269c6ad0a12d0b60f9efbe3709704640446b737f4a468ad48c0df9b83a3fbbaf11380d5e75756913231a043d7fb013d287b4d814ac4062debd9a335398907c34a9f178c07692720ff5557d1a8121c8bff75a953f20bb8b38083fe89e78f489ae4dab395501e1f18f99b210db144b31f683be79b48bf6e8b4b41f5899f3a288c50f7a9c5899b889daec28de4c04d0dc1694f37fdfc33b114ca90204b6dc44517dc744b4665b0c988deefded1f702c62bd78927c69163e0ad36270e985", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, r2, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x900d0000], [0xc0010058, 0x4b564d02]}) 23:06:34 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x20327f]}, 0x10) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000004000000000]}) 23:06:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:34 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x2]}, 0x10) [ 2555.974811] 9pnet: Insufficient options for proto=fd [ 2555.978158] binder: 20387:20389 BC_INCREFS_DONE u0000000000000000 node 1479 cookie mismatch 0000000000000003 != 0000000000000000 [ 2555.986722] 9pnet: Insufficient options for proto=fd [ 2555.991898] binder: 20387:20389 got reply transaction with no transaction stack [ 2556.004714] binder: 20387:20389 transaction failed 29201/-71, size 0-0 line 2759 [ 2556.052514] 9pnet: Insufficient options for proto=fd 23:06:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r0, 0x4, 0x400) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x0, 0x7ff, 0x200, 0x662}, 0x14) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000140)=0x54) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x9e000000], [0xc0010058, 0x4b564d02]}) 23:06:34 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x4002]}, 0x10) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9901000000000000]}) 23:06:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000ffff00fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) [ 2556.294090] binder: BINDER_SET_CONTEXT_MGR already set [ 2556.295668] binder: 20387:20428 BC_INCREFS_DONE u0000000000000000 no match [ 2556.306734] binder: 20387:20428 got reply transaction with no transaction stack [ 2556.314299] binder: 20387:20428 transaction failed 29201/-71, size 0-0 line 2759 23:06:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000280)={0x8000000000000000, 0x0, 0x10000, 0x7, 0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) r3 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xc24, 0x80000) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/17) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$TCGETS(r3, 0x5401, &(0x7f00000002c0)) ptrace$peek(0xfffffffffffffffe, r2, &(0x7f0000000240)) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) ftruncate(r4, 0x2007fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa010000]}) 23:06:34 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 23:06:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2556.342049] binder: 20387:20389 ioctl 40046207 0 returned -16 23:06:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xe006], [0xc0010058, 0x4b564d02]}) 23:06:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe80000000000000000000000000fffffe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) [ 2556.397300] binder: undelivered TRANSACTION_ERROR: 29201 [ 2556.405222] binder: undelivered TRANSACTION_ERROR: 29201 [ 2556.437835] 9pnet: Insufficient options for proto=fd 23:06:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2556.543884] binder: 20454:20456 BC_INCREFS_DONE u0000000000000000 node 1482 cookie mismatch 0000000000000003 != 0000000000000000 [ 2556.555916] binder: 20454:20456 got reply transaction with no transaction stack [ 2556.563466] binder: 20454:20456 transaction failed 29201/-71, size 0-0 line 2759 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001]}) 23:06:35 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0xa000000]}, 0x10) [ 2556.725934] binder: BINDER_SET_CONTEXT_MGR already set [ 2556.754376] binder: 20454:20473 BC_INCREFS_DONE u0000000000000000 no match [ 2556.761642] binder: 20454:20473 got reply transaction with no transaction stack [ 2556.769193] binder: 20454:20473 transaction failed 29201/-71, size 0-0 line 2759 [ 2556.777703] binder: 20454:20456 ioctl 40046207 0 returned -16 [ 2556.839085] binder: undelivered TRANSACTION_ERROR: 29201 [ 2556.847201] binder: undelivered TRANSACTION_ERROR: 29201 23:06:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e567da1c9725ac455e56ef3fdf39ede8e65ebf4d487d100dcecea6297779bfc00be06f83d4d0fa2604b98a606000000000000003521ecf431d256739cd0c7f4e501c39016ad26020bf7908d438906871ac7cc6e30270ffb5ff7d1c5c4041b6dcfae0ec0d701f0ffffffffffff4c8d3286f89226746f7c854973", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) socket$xdp(0x2c, 0x3, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x820000c000000000], [0xc0010058, 0x4b564d02]}) 23:06:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xcc, &(0x7f0000000200)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e23, @rand_addr=0x5}, @in6={0xa, 0x4e24, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in6={0xa, 0x4e21, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x800}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, [], 0x1e}, 0x5}, @in6={0xa, 0x4e24, 0x10001, @remote={0xfe, 0x80, [], 0xbb}}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r2, 0x3ff, 0x84}, 0x8) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:35 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x3500000000000000]}, 0x10) 23:06:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700]}) [ 2557.285154] binder: 20493:20496 BC_INCREFS_DONE u0000000000000000 node 1485 cookie mismatch 0000000000000003 != 0000000000000000 [ 2557.297189] binder: 20493:20496 got reply transaction with no transaction stack [ 2557.304711] binder: 20493:20496 transaction failed 29201/-71, size 0-0 line 2759 [ 2557.316764] 9pnet: Insufficient options for proto=fd [ 2557.323252] 9pnet_virtio: no channels available for device (null) 23:06:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000ffff00000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:06:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$RTC_PIE_OFF(r1, 0x7006) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) fcntl$getown(r1, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x50000000000, 0x10000, 0x20, 0x5423e07a, 0x20}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000400)={r3, 0x100000001, 0x30}, 0xc) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:35 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) [ 2557.354956] 9pnet_virtio: no channels available for device (null) 23:06:35 executing program 3: r0 = open(&(0x7f0000000040)='./control\x00', 0x400, 0x101) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x401}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r1, 0x4, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x200000000000000], [0xc0010058, 0x4b564d02]}) [ 2557.489070] binder: BINDER_SET_CONTEXT_MGR already set 23:06:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f04]}) 23:06:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe80000000ffff0000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:06:35 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) 23:06:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 2557.538355] binder: 20493:20520 BC_INCREFS_DONE u0000000000000000 no match [ 2557.545751] binder: 20493:20520 got reply transaction with no transaction stack [ 2557.553291] binder: 20493:20520 transaction failed 29201/-71, size 0-0 line 2759 [ 2557.565077] binder: 20493:20496 ioctl 40046207 0 returned -16 23:06:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:36 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x10) [ 2557.679236] binder: undelivered TRANSACTION_ERROR: 29201 [ 2557.689312] binder: undelivered TRANSACTION_ERROR: 29201 23:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7f04], [0xc0010058, 0x4b564d02]}) 23:06:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b01]}) [ 2557.754621] 9pnet: Insufficient options for proto=fd 23:06:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:36 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000100)=0x4) ftruncate(r2, 0x400000000000) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) finit_module(r1, &(0x7f0000000200)='syz_tun\x00', 0x1) 23:06:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000ffff00000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:06:36 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) [ 2557.896188] binder: 20565:20568 BC_INCREFS_DONE u0000000000000000 node 1488 cookie mismatch 0000000000000003 != 0000000000000000 [ 2557.908104] binder: 20565:20568 got reply transaction with no transaction stack [ 2557.915650] binder: 20565:20568 transaction failed 29201/-71, size 0-0 line 2759 23:06:36 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000200)=""/254, &(0x7f0000000000)=0xfe) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 2558.003955] binder: BINDER_SET_CONTEXT_MGR already set [ 2558.050809] binder: 20565:20577 BC_INCREFS_DONE u0000000000000000 no match [ 2558.057945] binder: 20565:20577 got reply transaction with no transaction stack [ 2558.065477] binder: 20565:20577 transaction failed 29201/-71, size 0-0 line 2759 [ 2558.088589] binder: 20565:20568 ioctl 40046207 0 returned -16 [ 2558.100830] binder: undelivered TRANSACTION_ERROR: 29201 [ 2558.108239] binder: undelivered TRANSACTION_ERROR: 29201 23:06:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480]}) 23:06:36 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 23:06:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7401], [0xc0010058, 0x4b564d02]}) 23:06:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:36 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xa7c, 0x97e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x7}, 0xc) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0xbf) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2558.504848] binder: 20592:20594 BC_INCREFS_DONE u0000000000000000 node 1491 cookie mismatch 0000000000000003 != 0000000000000000 [ 2558.516733] binder: 20592:20594 got reply transaction with no transaction stack [ 2558.524456] binder: 20592:20594 transaction failed 29201/-71, size 0-0 line 2759 [ 2558.547667] 9pnet: Insufficient options for proto=fd 23:06:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:36 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 23:06:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000108]}) 23:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7901000000000000], [0xc0010058, 0x4b564d02]}) 23:06:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2558.764699] binder: BINDER_SET_CONTEXT_MGR already set 23:06:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x3, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:37 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) [ 2558.793073] binder: 20592:20631 BC_INCREFS_DONE u0000000000000000 no match [ 2558.800328] binder: 20592:20631 got reply transaction with no transaction stack [ 2558.807866] binder: 20592:20631 transaction failed 29201/-71, size 0-0 line 2759 [ 2558.807899] binder: 20592:20594 ioctl 40046207 0 returned -16 [ 2558.867610] binder: undelivered TRANSACTION_ERROR: 29201 [ 2558.876402] binder: undelivered TRANSACTION_ERROR: 29201 23:06:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) dup(r0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="4542847e1d0092dd6a82bc7a4c5285"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010055]}) 23:06:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xb0201c0], [0xc0010058, 0x4b564d02]}) 23:06:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x42, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000100)={0xf000, 0x10000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) fcntl$setstatus(r2, 0x4, 0x800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r2, 0x5, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='team_slave_1\x00', 0xffffffffffffff16) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r2, 0x9) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:37 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) [ 2559.484424] binder: 20660:20662 BC_INCREFS_DONE u0000000000000000 node 1494 cookie mismatch 0000000000000003 != 0000000000000000 [ 2559.496317] binder: 20660:20662 got reply transaction with no transaction stack [ 2559.503855] binder: 20660:20662 transaction failed 29201/-71, size 0-0 line 2759 [ 2559.518352] 9pnet: Insufficient options for proto=fd 23:06:37 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) [ 2559.555899] 9pnet: Insufficient options for proto=fd 23:06:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 2559.603153] 9pnet: Insufficient options for proto=fd 23:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7b010000], [0xc0010058, 0x4b564d02]}) [ 2559.658872] binder: BINDER_SET_CONTEXT_MGR already set [ 2559.658883] binder: 20660:20685 BC_INCREFS_DONE u0000000000000000 no match [ 2559.658898] binder: 20660:20685 got reply transaction with no transaction stack [ 2559.678983] binder: 20660:20685 transaction failed 29201/-71, size 0-0 line 2759 23:06:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 23:06:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010117]}) 23:06:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000040)='./control\x00', 0x1) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c04"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2559.903936] binder: 20660:20662 ioctl 40046207 0 returned -16 [ 2559.938387] binder: undelivered TRANSACTION_ERROR: 29201 [ 2559.950416] binder: undelivered TRANSACTION_ERROR: 29201 23:06:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") r2 = fcntl$getown(r1, 0x9) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000000)={0x3b, 0x1400000000, 0x44, 0x1}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffd) 23:06:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x10) 23:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xde01], [0xc0010058, 0x4b564d02]}) 23:06:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100c000000000]}) 23:06:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 23:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x4000009f], [0xc0010058, 0x4b564d02]}) [ 2560.071950] binder: 20734:20738 BC_INCREFS_DONE u0000000000000000 node 1497 cookie mismatch 0000000000000003 != 0000000000000000 [ 2560.083967] binder: 20734:20738 got reply transaction with no transaction stack [ 2560.091620] binder: 20734:20738 transaction failed 29201/-71, size 0-0 line 2759 23:06:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = add_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5bbd075ed68f2511384903c53f451f364d4e5c6a5bcc53af4c6a226110c4a1811b37e19640e7a2fbe06017b0dbc0fd73efd334faeb00c2313c1ce86d56a0f1ff8177047c585e738dde35ce955efb81bc95e33966aaec8ce05590a6ff32", 0x5d, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x401, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xfffffffffffffd74) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) mount$9p_tcp(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000580)='9p\x00', 0x10040, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose='cache=loose', 0x2c}, {@access_any='access=any', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@loose='loose', 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'keyring\x00'}, 0x2c}, {@mmap='mmap', 0x2c}, {@privport='privport', 0x2c}, {@privport='privport', 0x2c}]}}) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd901000000000000]}) [ 2560.171961] binder: BINDER_SET_CONTEXT_MGR already set 23:06:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) [ 2560.217619] binder: 20734:20746 BC_INCREFS_DONE u0000000000000000 no match [ 2560.224848] binder: 20734:20746 got reply transaction with no transaction stack [ 2560.232457] binder: 20734:20738 ioctl 40046207 0 returned -16 [ 2560.238551] binder: 20734:20746 transaction failed 29201/-71, size 0-0 line 2759 [ 2560.357074] binder: undelivered TRANSACTION_ERROR: 29201 [ 2560.368231] binder: undelivered TRANSACTION_ERROR: 29201 23:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x100000000000000], [0xc0010058, 0x4b564d02]}) 23:06:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}, 0x8000000000000400, 0x2100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d564b]}) 23:06:39 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) 23:06:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001240)=0x0) fstat(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001380)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000014c0)=0xe8) r8 = getgid() r9 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002840)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000002940)=0xe8) lstat(&(0x7f0000002980)='./control\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002a40)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000002b40)=0xe8) lstat(&(0x7f0000002b80)='./control\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002c40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002c80)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000002d80)=0xe8) fstat(r1, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000003280)={0x0, 0x0}) stat(&(0x7f0000005440)='./control\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003380)='./control\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000003440)=0x0) lstat(&(0x7f0000003480)='./control\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = fcntl$getown(r0, 0x9) stat(&(0x7f00000035c0)='./control\x00', &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getgid() r27 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000003cc0)='./control\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003d80)='./control\x00', &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000003e40)={0x0, 0x0}) lstat(&(0x7f0000003e80)='./control\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003f40)='./control\x00', &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x1, './control\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)="4df35d9698433c90e30c8da00c3a5700e03276f2bfa289f213ecfb7661d61148594281ed0fb554512130151c05a9ae2f1d6d2f95a5497930a7", 0x39}, {&(0x7f0000000200)="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", 0x1000}], 0x2, &(0x7f0000001500)=[@rights={0x20, 0x1, 0x1, [r1, r2, r0]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r1, r2, r1, r1]}], 0xa8, 0x4800}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="13db7bef01eb145ca21e0b113fc69644e014dff4d5d79d5dba5ccbb199d8f8f5b0e06441489ee215d460392fad24f09fe1b76db8c30024b0527c6f3454b63b2f0ddd14c135655d28a29f5368afbcd716c055be48445a1f9bfcddc9468e94a4db81b2a3772d8775c213ed98e2c6cbfd6f4e0dcf883cf5c30f1bb79013e0efa4d9b1518a3779e70ad2c013bc74ad9ce02220aaa9d5638c533c133d53ccc2de0e", 0x9f}, {&(0x7f0000002700)="c075e37dd859ffcbee3d5eaa9f5643c7ff5983ce4fff08cd95cc0ebeffae93d94aeb92713b3f2dd16adf1766f78b2525de03fb9462daca5d2ae0963ca67e3e0b673bcc2f33a94c310186b2a15eed9412c2bb8fbd9cff94f54506dd3331e4a014b66e93753a4c51f000b08171c1794fadf370c7a8aa675a5a8f3c48c2f19830e2800100acd26f40d41c233a6f16ef9d192eb7cd2c5d1a34ebc0324c6906d9413526e96b0e7c554a451307de05ae71076322d83400bdf6c7e8b4ce3a3c305367800bcef13b32dca0e604f686ee1715fac16350c34803750d", 0xd7}], 0x3, &(0x7f0000002e40)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x38, 0x1, 0x1, [r2, r2, r2, r2, r0, r1, r2, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x28, 0x1, 0x1, [r0, r2, r1, r0, r2]}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x150, 0x44000}, {&(0x7f0000002fc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003040)="4918d40c878de4017fc2484e85e2de12d91f141a99e5f4c50d00d274337b60ffa4c8d89097fdb2", 0x27}, {&(0x7f0000003080)="5ee70cc5db25a599622a194a6d20412dd7cb02f817a173dbd06ea3f962324d4a91e730a72ad8146810185010f432cecea0c601d89a5f7af980f4d1628b6b584580298559bff8bdae44d5424532c5c6fad7f30e614641c276cd22ba380cbcf97d44e21f0dcc87969597c8d6f5ff71ba2862cdf57b6bd5b31731c84dc209559e57284dbad47cd73057a0549f9bbc2bd1", 0x8f}, {&(0x7f0000003140)="d1fcf934f20f547239e581c4e7f174668767e7395dab773ea49a8dfe3ec2b4c782c226079ec874a00d865d544237a700ee13d04c9eb2dbbd9ae321600f23e6590d8682e19e6fe57196f8c2b79cf6739eae45c2cf46b89c846425fd883e6573413b98fb7853a6ba84876f7428223c87ff980356b47d60ac76381964b320ec25a54e8425f492f2d2f67d5e050a9f6caa33b00c371e010c815825b8e80c6a1053f802ef93c9020d152606df39c4c26c0afef32d82e46850b62c5d95b86782f2475d952446bc0f", 0xc5}], 0x3, &(0x7f0000003680)=[@cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x30, 0x1, 0x1, [r2, r1, r0, r1, r1, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r1, r0, r1, r2, r2, r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x28, 0x1, 0x1, [r0, r2, r0, r0, r1, r0]}], 0xf0, 0x44000}, {&(0x7f0000003780)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003800)="f884a7d60e5c10416533c85891d87684b1d215937cad5cc47d673d600652436697a3d5f81a0c18156c66051c688936c3eef41e4b0d364fe1c8e45c464a2456", 0x3f}, {&(0x7f0000003840)="46cc0eead39c4688d272dcdc2c2a40a0c42d8ad06ddd7327a9e3e40c198fbcf4926a1d12512e695bff6c62a91e30ca044f4999e04f6b60e56ce38f39e07b0c6c6aaea04b298eaf865abd746841690d1511e828ecf5701653acf4291a7c7d1ffa025b2d06c24d87591908d8aad9651b17cc9244ea0fbc573951aff6e49691b9c89bce60df8111daced0ebddeba53251688fc08ea3677d7d9eaec5b7d37504d212e3dcce41b5c4c4d0264c4f7d", 0xac}, {&(0x7f0000003900)="1b", 0x1}, {&(0x7f0000003940)="fe650cf9719b8478121dbb33e3a7a78afb97e16957b095d615854b89c2a3cdf6c3698bd5", 0x24}, {&(0x7f0000003980)="676dd190cd31e6fce206154d3a7c9b6f95ca05f03cc4ec2788f7b2f9de74199e974d047502d9202f85a59014bface494a3972a15e2cf897c61348431812b0f35420026189660b399b5c8e76a12d006e1c9db2644918351a821a7b35643b89fb28f4f915e349f9c8ecf0fefb64314ff7898046def11910533f479d5bff3442c7d43505dca8a8e484846d9d45433eae99d99371444df47d913d762844e74635871cd1629c4de5c9347446f7f0ae548fd109955b0bf034d0a99361a9d66075e6042bf2ecf1d2ea8aa4f07c3ad1637b7e18f124ccf", 0xd3}, {&(0x7f0000003a80)="210d7bc2e8a41ef242b51ed4eb23e1df56da9ae8a714352d55d17c0ab8e6db8bbbc272b90eeb37c69c2a5a15db2b23efc6fc53f2a070c71813f822c36c2914", 0x3f}], 0x6, 0x0, 0x0, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './control\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003bc0)="f06c9db85254f91c59e6987dfe5dbea5b5c51fc5ffe6432a1292e40759814c7e6c7433eb0f8100090b938e916c74680b59b7f10ce5656ccb5b63176e948448073c2d96d5eae84bf7a0ce635bcd0c19956cfae86b628a82ee5afdec93f5c85cf44ab81467f6b27ac187bf92908bb450b52c3af7b4cfe80d7464a4c2105d11467c1c215d6e04cda6417f969fa3cdb3713978d2e30e2698978e085f5950a9e37c7ce4e9a07e597704e5bae98f950de69c7ca3385f", 0xb3}], 0x1, &(0x7f0000004000)=[@cred={0x20, 0x1, 0x2, r27, r28, r29}, @cred={0x20, 0x1, 0x2, r30, r31, r32}], 0x40, 0x20008805}, {&(0x7f0000004040)=@file={0x0, './control\x00'}, 0x6e, &(0x7f0000005200)=[{&(0x7f00000040c0)="a361e131578909496c30036e749fd37b78f88265e0091983d5d0c270f8036ca6703ec2f4fb3cb7ee576104b8fdf68fdc78c37296696e64d4e2399c27e9d809c76b811996dfb3dd2a4e4df778f183fd72e0fef07e427df9655a1e0b6fd3089be830120219a9d127995f860a2d889de358e7fff308eaa1c5ceb476cec39aab4e85b1f4de7674c8f227ed6dc1ada4af1725755a98c24e3f565c030398ad717f9df6a787444c7459c841e7ea6cf67ba6b24ef0daa4ae2dbb135037fa472dc6a7e0fc9935441f84f545686c504c553116d0176a026c8a0e38b1972560a1a22a4e8cb661e685d14742f946607e79b3177cb6aba6abed7629191a3627fa1ee7be7471202990c966cb1125a3e4a049621e964ee87c487fd3740ca7de348f12e3c54e3abb238d2eafbab285233cbbac4d2cbb7526b55c7688912697ccca8385f37efa49817ce88b8baa619027400b4d6a7a6b988ed95b23dedb58f8c2de3fba953044d8f78f39e588fc41dab80a0fe42a35d3efde1343a5e72102537418ccfb3d18971fe462f392819a57162dd90e2ebfd07f10ba500c57f5e4094c3a2e299a57828e98631d1528fb1d1c4c6ff270fd8019d40a1fe4028431df6a21253532a3805e72582c0f7899363eb86f630663343fe29690ee71fdd90730e2078ce48872aac335e47759e9980c2ddbeb23d19d3285b151e724456a46df22f02576c345681a3270f3bb9060947c0c3600b7b3cb327d807433d210152ad50d994661aa5a8a87205f9fcc0792f25f133e1bdfbaf85dcd283741a136108b739866bd53dceb851e6aa04683ad24272f60081fc2cd83994e1597602c34abfcba223bf962b06308d73ca0ff3cefba8d7b67e5a265f3e1ad2e3404bf51ef119ec59115c5af88cc80dc2da2795f1dd537a123d8f1aad51c84f833a87397a8d58afbf0fe2bf86675351798d9477c3c6aa337a8c2339a8826a28cda7f0178610d946b781781a68efde0d189b4bd3a32e71c2d03070381ab405f2b1e41cb402c028183d8038624dad427cfea311b41e34f734ecf2209f4f9a5361659da5b59d1f1ace74c8338ef266a4ba4054e478eab89b7ba38eb310d612f3be3c0e4bee495340fc1381f8737b1faf9f9256171cd075534aecb5301b3b2f6afbb9ef17709ce741c0197c5d6403f5c9b871bb5eda287bce2d3b592ad1dd2569e9c9a214cec2e9a9b50497b3e47bceb6b58c286b889bdfe11c8cc47dedd02fac6276e8b887c846f8e02870fc3d6f505c4737d6ec0e3de1dc159781638016b341aac98a3c82fbb945ec9c7bba4bc2e5a1003f37d2af0803360345d81266c03b4dfb083306820d760487e90a18411da42bbd3d0b37690b2469591ad53cf8bb6722815a47893d17ed8cf3d30567b1b4ea67d78c23e262d33be841bdaee3160330894f74ffaeb6c4e3b4558581c5c381e94fdb9a5f13d796ffaecca0398f32a5f24eb64790f6e2c912fbb96245a10673f04b099561811ce5c2e6b4e7aa8838e9be639db90b54fe2cae15c6491d2dfe63b24a172f18268d0f367804adc83e9a8de72e14dd802d9320dcd9b05c4da0970623a70d00d8edcdc4dc217a7874932f112ef69ebcdf659c89ee8d31f6112a989388c81e7870d57900e77cea240a2ee7ecf52d3edaabe0ff6f36a905ac0356a15edf052854ddf277553e3c3bfd1e77d723fc7a9269b53aa5e9b7dee826f57e3d7d00c8c1c50836c57db65dbb063320778f38771efd7900466a2510c26a772035858364f56b71ed8b1a6b579f31621015138d29fb12036d6ce02bdba741a06e798d569202cd1967628d7f172ee1a8bb7e45ec120d838a66a9e86046565e1853e81283ff57519374aa114ae5cbf9e27dcbca79f30cfdb21593dd0ddb2445201cc5d63c2b6240cacf732323e302b869bc7d98c723bfa4d4ddc39c19f4eccce15720f122917e79c209185bcc487d4f0f6e76b9f9d1e30b5cc7272115d844fc70f81e4ec0be98e4c3ec4611dd3979e7263c55c80e7471fd8fe1625042b78666817e22eda6bdaefa2976197b2d53d45ed6d523c6c8c8deda799cc5510ef330d3a0f2e3a5eab206cad53dd685dac45baca4e34e5d19734faa7d9fff1c76a6762bf2709fc7eb8faef5e9774e28364aa843de0746e8d73e3e7f97f4d9445057e41aebbdd2fac49d5922f4a27560263f217f54173eb4cb519a35d39b74e881f7003909f9d91271994f18baf371de51b9613b8b110f4f450549aedad08c879e3eb8c151a432a622517f30e014f8cfc55f98d3383620066f7b9051ef818456d78968847e3d3e66d8a2be0ec8ac64b33ae695264c140d234fe8e91f70a4c23b4785bab2e015e277050367449c79acfa17cabfff74a9d1ccb26e779449c218f437a382871514a0181215a38a140cf0a8c857554e951bfc0a0bcb8b3f17cca6f644eda0220f6ddb477dc5d9b7b847619182796bb566d014129c797ed63061c7c5030cba7cd74d76d71537ebb08fe690e68950da805ada5d94f51a5a4ad6d8e674c13be6bb9a8f5615fe0f931c620f4a17709c450292b2d1df7567070e6d9a9c2d4f0e6616fd91843f8d9d26926ca9193b464d0d3369718911899096c829015da6ef2423d86bb0a692b43a60cb9c65eaf7ef3d601ae166c7cfc02d73829e4cf514ab6ca13941a1b386987248a9c9521ef37e067b114fec832a78e62648757294c5099144bd7a34368112973a7c941ac61d11137fad30bbe05c6a0201196a2046bad54c0fd00c4a800df814af3263ccf54cd73a5bec3382ad773bc1ba7867e7a90a9db5144695c61d2eab8a354d483018733ec22cbf808617d51950d1267eef687779d775ecad751ed4c1356e42c27683a4fe7ce3e0a92d05754b97256ba1f236e39e0fc75bfe8db7f442a40483c0f05413d8a59abd80ce562eeeccea0cb92760490aa16fe5f58658bc917c21dc4c341066f19abb0afa3beeada2cd3794226bb58fe1bc78ffa3f94964913886704f672993e1976801dfa2a98dc0f2aa08b075aa3b4fd3584bd8c4618c6d2940683503bd1b43ccec054070568ed822b82c454e4a90fa7e4f751b28fef4b3c7fed13be740f68e6adcdfce89837b966c46154d10a2644bc9d4d141735212bde932e13e52f00c0a6e1f38162c40ff8988769ec3e823ccd64fceda2961f98619f9d08324ccaae3f132eb606a92e95d0784a9a5f21a6b6ff8f9851cd5630d2cd880a57d902bd9703229c6ea967f41c14338d9b804eb6abb48710408f55935178aff214978929b0f3af35e5c67fa97c3cfdde32c5077e698f188d79a2b5c05d3f4b88492441ac8e2c27666c6b60998f5361042624e03f92373bc078258711303d59e8dc77ac3423ee0bc4cc3d9f19e4e7efb836d5925ebfacfc843029135c8978d640f1c07fa8d1ac784d5eafeaaa3d6f36437ae02d130fc29a9e3d996c4bfe41bfeb514c55e8980de07b1a8f6943a88955a8017e2998e301ab2433880752c47a60727d27b380891a1abe4c64809432230317bd12e23779b68bb9760e9d9a2d961d2323ff0d2eb91d341610ec6ac9c726c303255f5c991a47545e065a49123fbf442013dc0b8278c737896c5c8b5cf672ed9aa1f9de6e6aebc4209d325168d39d5e27b3d74fa2841e5a46d378ba2c070e94567892111ad38c44f39e4128529335df51b2b6c78eb256b1e48682043312f24c5ef0371ac8232ca3853044bd4ee6a3aa45304d8d1a8e7a0679cb0bf5df65e9afafa2fb9b1a6d03ea8084b5191f5e0e2837f546dad39c4a06a85d3c0e764a7546760b833784397cc277adb7157673553154073d223383296e4b4ee15757262a15392e7807aee6b4d470755a24ff8cbc12bcacf7f0c2d7fc772b422db29f2fd3a500fe84815635864f9f7bd8aa995a05b7099a0e4eb4ebb5854b0e7e140588b0c19fe877e3b73e61012c67c27c5a1503a5b117e3d36b0101f4215beef281cca683a575e5e732c63565849d8392ac88d5061cad8728df2f11cdb8a200f760606c24c814f2598c70e91a47e86a98538da6ab9d89c45cbf59e6bbfbf94870bd230c807ab1d35d7d8e41ee03b2dcb2d6019afda438f2f5b2cc46c8112e9838da621a3045c67f0438ce168a4609209f475814dbc4472b244c0d1d38d047045e965c5bec5afdfcc44463b4d7804a13fd6bb595fe909a4d30c6b060e22fe30e50a4cad45a5779e87db46bbee9e770d5f287947f13f1b0daac2b9cf178a1ad157308e77c7549923f56b06fd381a85555893b17051396c17e2d5303add4ae4f6683e808914832eac7215d778654c2e47bc91247489c13eb3e607bc51edc1cbbd00625e36aaca72f407cb66cac2628a96241b6fc2c1901cc2866704ce1f3b1e81e17c5cf8becc32e90bea295bacb44c73f9b25f67d9048c7222013aaa4002b3452335f7951a9d0fce55e7707ad45c155435bb07d672d9356bd55d545c5ca5a5f3d39a949ef359f9d1661609e9167664480010c77c141e41d16228957285d5ebfc44da655ec6b53565846f7d95211d7126f56f2cc3cad9f10c48b769a15995d024e460f5e02f4eec8b51553f254e61274a05c3647741a8ba506030c2f7138b4f266b45771442eb5ec4cf41a2f8772fc56c735d2160fb46b8f6c13f2fb757bdee564cbd4b15e7b1f1af80266cfc625826564ddf73e3ae550700cfba486e5d1a2a33cd2ef3d5c81ca8bf3ec462f9a8e5276dfd093e2f527599f200353b3e4d868555c017089a22c17864e7f9bf79c806f8a92b772ca879587d17c44aa581b05d9c2db4524d5b81c78c0aada5f75acd067eeb1ac49631f03c0b4d0505f78fccea0b048c52756000ca2783def1c0aaa4967def2eac17e4f0be226c6f591716b4a09663ce161789c8956d677a29273727045c95717db4d0189f418b317a0de944d0a20822d7aff4cb65e726e4219b788184b3ab52447aa5ca62ce1bd68e29abb6515abad7abf5078bae00aaa3ed122bab741d591ad0d6c4c0875e1119902386857b900b55e922d036ab16854b077a7d2f5c6f1e2d08169afee166c4abeb3c7b1f60890b609a7cc98925f39edc1666370cc427896c4666e504e32a5381e8937a83c3c68eae8b80f573fb999f5d17327358c2ebedf9819759d38ee95b3a18249cc4bd0d60d7bbf0413b97f4ef3dabb30acdde9548bee8c6c71cb08b620269f7d51c88c38f4d790b30fc632013186bd0c9f247802f1fec2537002d9cadfae3cfefe5c3185f6b7ba4d6b133a73e5688b4b3caf11490261d8df09e55079f78b4d36739da598fdb6912cf7d286d9762a1f4d2355a34e7b32aae12ce00d1cc84387de81e37889745e6e36dffb4443421d06730121aa95acb9f281925cd7f62c3396fa7f187706233803f9d7a05fce270972544940692957a72acedba27b76f3ca4a8c4030f81438f12e835d9eb6cb829eb007adc46aa8edec511be62338653cf9f0d89b25bfa82dee35aa9d053b7f9a534e10aaa492049ebcffc8c3c3ce26ace7cce9a314719289b34a77f0bc53e6981970486e4eb134b304b9faea64298b4a9761a1014f8126267b2be9ed3c57fba366563a0ca43e6c0987b986db69655305853aa1e50779d50461886480878827497aa5d97f6ee6c43d688141e2f2e5b7b78fc0a6511571ec8e263790fc81a5fb535600f907da8c5745461ab02fb887562ad6a31b1cc305eb14a388abeece594b0be54d3128e9c26a7336ddbd41c2220a38d38f72bd0b88e6760e328f0ae8324e99bea6086bc5e2ce1efe860483ccb912e6c7e706a25460eb57d1a677843a15e9b80d82d3a58c6bad397f9c8b298a7f743365396c", 0x1000}, {&(0x7f00000050c0)="6f1723ac3cc9d5c62de2a40e1baa8fddfa51553a5a82b313e74c189c8bb66764a4486230ea0233752b22d6238e9fdf690554620b1dfa6606299ea54ce0223f76de673d5ad0518c499d164cb0fbd16e44c717ea8de97b371fe28f1a2c9efe76490c2954c19711c594025a2479ac6f2e13c5596e1ed6259d6e1d3bc9ccc371254f44f43ffd6c94fb6141d89173bf6d843b6afddb1a92a85b0538c522f3d452c19413802ed5fa297762bab8dde7e3423f95c6f7ead6f7f8adc79938f948e34b8d5a6fb8", 0xc2}, {&(0x7f00000051c0)="8349d17c350772c41fcb21cf548b484eee3b745b612adae6f51aa6115ddf85af2b7dd609a6303d05150b5c46a2", 0x2d}], 0x3, 0x0, 0x0, 0x8000}], 0x6, 0x40000) 23:06:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e300000008000000000fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e23, 0xd47d, @mcast1={0xff, 0x1, [], 0x1}, 0x4d7}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @rand_addr=0x5}, 0xfffffffffffffff9}, @in6={0xa, 0x4e21, 0x995d, @empty, 0x1400000}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}], 0xb0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:39 executing program 7: 23:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x580001c000000000], [0xc0010058, 0x4b564d02]}) [ 2560.885863] binder: 20788:20795 BC_INCREFS_DONE u0000000000000000 node 1500 cookie mismatch 0000000000000003 != 0000000000000000 [ 2560.897756] binder: 20788:20795 got reply transaction with no transaction stack [ 2560.905431] binder: 20788:20795 transaction failed 29201/-71, size 0-0 line 2759 23:06:39 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) 23:06:39 executing program 7: 23:06:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d54d28647115ffe82b086c08f1e671ab148cb72b9606009434fa7ef516a2e738cc45d650b75447e88c99636f833338f7af4edd5c0bfc603caa7e7c71a80d1fc3b045c1e32a832a8fc71f6721dc324c65fea47b6fae", 0x55, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x6) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000084]}) 23:06:39 executing program 7: [ 2561.079903] binder: BINDER_SET_CONTEXT_MGR already set [ 2561.097110] binder: 20788:20795 ioctl 40046207 0 returned -16 [ 2561.102944] binder: 20788:20819 BC_INCREFS_DONE u0000000000000000 no match [ 2561.110376] binder: 20788:20819 got reply transaction with no transaction stack [ 2561.117916] binder: 20788:20819 transaction failed 29201/-71, size 0-0 line 2759 23:06:39 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x7f322000]}, 0x10) 23:06:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa00000000040d9078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:06:39 executing program 7: [ 2561.146359] binder: undelivered TRANSACTION_ERROR: 29201 [ 2561.152564] binder: undelivered TRANSACTION_ERROR: 29201 23:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8b00000000000000], [0xc0010058, 0x4b564d02]}) 23:06:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2561.336420] binder: 20847:20850 BC_INCREFS_DONE u0000000000000000 node 1503 cookie mismatch 0000000000000003 != 0000000000000000 [ 2561.348293] binder: 20847:20850 got reply transaction with no transaction stack [ 2561.355858] binder: 20847:20850 transaction failed 29201/-71, size 0-0 line 2759 [ 2561.396126] binder: BINDER_SET_CONTEXT_MGR already set [ 2561.411172] binder: 20847:20854 BC_INCREFS_DONE u0000000000000000 no match [ 2561.418368] binder: 20847:20854 got reply transaction with no transaction stack [ 2561.425908] binder: 20847:20854 transaction failed 29201/-71, size 0-0 line 2759 [ 2561.427107] binder: 20847:20850 ioctl 40046207 0 returned -16 [ 2561.441090] binder: undelivered TRANSACTION_ERROR: 29201 [ 2561.446804] binder: undelivered TRANSACTION_ERROR: 29201 23:06:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2000, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x401, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r4 = fcntl$dupfd(r2, 0x4, r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c80"]) splice(r2, &(0x7f0000000140)=0x59, r2, &(0x7f0000000200), 0x400, 0x5) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x0, 0x0, 0x100}}, 0x14) 23:06:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000200)=0x4) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) unlinkat(r1, &(0x7f0000000000)='./bus\x00', 0x0) 23:06:40 executing program 7: 23:06:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:40 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00000000000000]}) 23:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1d9], [0xc0010058, 0x4b564d02]}) 23:06:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:40 executing program 7: [ 2562.125671] binder: 20866:20868 BC_INCREFS_DONE u0000000000000000 node 1506 cookie mismatch 0000000000000003 != 0000000000000000 [ 2562.138834] binder: 20866:20868 got reply transaction with no transaction stack [ 2562.146418] binder: 20866:20868 transaction failed 29201/-71, size 0-0 line 2759 23:06:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0xffff000000000000}) 23:06:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="025ec83d6d345f8f762070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) sendto$inet(r3, &(0x7f0000000180)="df", 0x1, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001, [0x2]}, 0x10) ppoll(&(0x7f0000000000)=[{r3}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x8) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@local}, &(0x7f0000000100)=0x14) fcntl$getown(r1, 0x9) ftruncate(r4, 0x2007fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc001001f], [0xc0010058, 0x4b564d02]}) 23:06:40 executing program 7: 23:06:40 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7401]}) [ 2562.280226] binder: BINDER_SET_CONTEXT_MGR already set [ 2562.305129] binder: 20866:20868 ioctl 40046207 0 returned -16 [ 2562.342553] binder: 20866:20884 BC_INCREFS_DONE u0000000000000000 no match [ 2562.349751] binder: 20866:20884 got reply transaction with no transaction stack [ 2562.357453] binder: 20866:20884 transaction failed 29201/-71, size 0-0 line 2759 23:06:40 executing program 7: [ 2562.459935] binder: undelivered TRANSACTION_ERROR: 29201 [ 2562.481446] binder: undelivered TRANSACTION_ERROR: 29201 23:06:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 23:06:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0xffff0000}) 23:06:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x10a], [0xc0010058, 0x4b564d02]}) 23:06:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0xff}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) lseek(r1, 0x0, 0x2) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) getsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:41 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x20327f]}, 0x10) 23:06:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:41 executing program 7 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010015]}) [ 2563.258249] binder: 20924:20926 BC_INCREFS_DONE u0000000000000000 node 1509 cookie mismatch 0000000000000003 != 0000000000000000 [ 2563.270160] binder: 20924:20926 got reply transaction with no transaction stack [ 2563.277712] binder: 20924:20926 transaction failed 29201/-71, size 0-0 line 2759 [ 2563.297477] binder: BINDER_SET_CONTEXT_MGR already set 23:06:41 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x10) [ 2563.305436] binder: 20924:20937 BC_INCREFS_DONE u0000000000000000 no match [ 2563.312670] binder: 20924:20937 got reply transaction with no transaction stack [ 2563.320214] binder: 20924:20937 transaction failed 29201/-71, size 0-0 line 2759 23:06:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r1, 0x401) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0xffff000000000000}) 23:06:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd90]}) 23:06:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x3a], [0xc0010058, 0x4b564d02]}) 23:06:41 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) [ 2563.442949] binder: 20924:20926 ioctl 40046207 0 returned -16 [ 2563.481980] binder: undelivered TRANSACTION_ERROR: 29201 23:06:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0xffff0000}) [ 2563.489371] binder: undelivered TRANSACTION_ERROR: 29201 23:06:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) clone(0x90000, &(0x7f0000000200)="352a0a69a6be482b085fa0df1e38c122ac14600887b340a95f07ffb4a1bc3ac72affa4871d875736811df6e31f4fe58da8f483291a745dd0ee68663e7be34fa86beb702067d20a8c5d13364060f52a0427dbdc5d109a60fa69ab837650462a8763062ae6124544a97bad8b80ae48e4b5bef68b18ac00e531cec5493ea45039e4f3b627e262422cf527a67ea44a4196c5cb019e4d3509888073930d23cdd3b6dcd8a4bcd59698215343973893b9346233", &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000580)="abf2038f7ffcf019713c02882e471a62cb2f7154421bb966db406200476fe8cac25ce2052599986a5760514c84956b860de5771cd7281394c8e10eab4c40b8f552c7e5c8172b72a0fb7d7249b35f07b561a375a2f234068fe6096840b0f201525ff35c55426af9fc68f435309a0701b7bd3e88e8b45c880775f9f7e6da0f8a4fd4f1b081f86c356948ff4f2740cbfe53090fe0460b64d1839c60bd70faf190a3b8b6f7b7895ed4469fcfa4cf795d3d1e8a") r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 2564.043666] FAULT_INJECTION: forcing a failure. [ 2564.043666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2564.055935] CPU: 1 PID: 20979 Comm: syz-executor7 Not tainted 4.18.0-rc3+ #137 [ 2564.063310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.072743] Call Trace: [ 2564.075347] dump_stack+0x1c9/0x2b4 [ 2564.079023] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2564.084270] ? trace_hardirqs_on+0x10/0x10 [ 2564.088542] should_fail.cold.4+0xa/0x1a [ 2564.092626] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2564.097747] ? graph_lock+0x170/0x170 [ 2564.101581] ? kasan_check_write+0x14/0x20 [ 2564.105836] ? __mutex_lock+0x7e8/0x1820 [ 2564.109910] ? find_held_lock+0x36/0x1c0 [ 2564.113991] ? __lock_is_held+0xb5/0x140 [ 2564.118072] ? check_same_owner+0x340/0x340 [ 2564.122403] ? rcu_note_context_switch+0x730/0x730 [ 2564.127387] __alloc_pages_nodemask+0x36e/0xdb0 [ 2564.132083] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 2564.137117] ? check_same_owner+0x340/0x340 [ 2564.141443] ? rcu_note_context_switch+0x730/0x730 [ 2564.146410] ? copyin+0xb7/0x100 [ 2564.149789] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2564.154891] ? copy_page_from_iter+0x5bd/0x890 [ 2564.159571] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2564.165121] alloc_pages_current+0x10c/0x210 [ 2564.169549] pipe_write+0x913/0xeb0 [ 2564.173192] __vfs_write+0x6c6/0x9f0 [ 2564.176926] ? kernel_read+0x120/0x120 [ 2564.180857] ? wait_for_completion+0x8d0/0x8d0 [ 2564.185476] ? rw_verify_area+0x118/0x360 [ 2564.189658] vfs_write+0x1f8/0x560 [ 2564.193210] ksys_write+0x101/0x260 [ 2564.196844] ? __ia32_sys_read+0xb0/0xb0 [ 2564.201002] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2564.206571] ? ksys_ioctl+0x81/0xd0 [ 2564.210227] __x64_sys_write+0x73/0xb0 [ 2564.214119] do_syscall_64+0x1b9/0x820 [ 2564.218034] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2564.222982] ? syscall_return_slowpath+0x31d/0x5e0 [ 2564.227924] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 2564.233292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2564.238143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2564.243342] RIP: 0033:0x455e29 [ 2564.246531] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2564.265792] RSP: 002b:00007f18e2493c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2564.273536] RAX: ffffffffffffffda RBX: 00007f18e24946d4 RCX: 0000000000455e29 [ 2564.280805] RDX: 0000000020000014 RSI: 0000000020000000 RDI: 0000000000000000 23:06:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f0000292000)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c01"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:42 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x10) 23:06:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x491], [0xc0010058, 0x4b564d02]}) 23:06:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02000000000000]}) 23:06:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0xffff0000]}) 23:06:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz]tun\x00', 0xffffffffffffffd6) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2564.288071] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 2564.295337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2564.302620] R13: 00000000004c2b16 R14: 00000000004d4690 R15: 0000000000000000 [ 2564.364675] binder: 20989:20990 BC_INCREFS_DONE u0000000000000000 node 1512 cookie mismatch 0000000000000003 != 0000000000000000 [ 2564.376560] binder: 20989:20990 got reply transaction with no transaction stack [ 2564.384123] binder: 20989:20990 transaction failed 29201/-71, size 0-0 line 2759 23:06:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x40000108], [0xc0010058, 0x4b564d02]}) [ 2564.423079] binder: BINDER_SET_CONTEXT_MGR already set [ 2564.441208] binder: 20989:21006 BC_INCREFS_DONE u0000000000000000 no match [ 2564.448456] binder: 20989:21006 got reply transaction with no transaction stack [ 2564.455980] binder: 20989:21006 transaction failed 29201/-71, size 0-0 line 2759 23:06:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) r3 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) write(r4, &(0x7f00000000c0)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) ftruncate(r2, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0xffff000000000000]}) 23:06:42 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) 23:06:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd004000000000000]}) 23:06:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tXans=fe,rod~o=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) [ 2564.537150] binder: 20989:20990 ioctl 40046207 0 returned -16 [ 2564.591162] binder: undelivered TRANSACTION_ERROR: 29201 23:06:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0xffff0000]}) 23:06:43 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) 23:06:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x8001}, 0x1c) ptrace$peek(0x2, r2, &(0x7f0000000000)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getown(r1, 0x9) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:06:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2564.637366] 9pnet_virtio: no channels available for device (null) [ 2564.643881] binder: undelivered TRANSACTION_ERROR: 29201 [ 2564.660335] 9pnet_virtio: no channels available for device (null) 23:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x201c000000000], [0xc0010058, 0x4b564d02]}) 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100000000000000]}) 23:06:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0xffff000000000000]}) 23:06:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) bind(r2, &(0x7f0000000300)=@ethernet={0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0x59a) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3de2b17fdfeabd1956b580dae0fdf43268a3269f5f5b355d60d107e02132cf6232b780a6aca1a1b0dd62c37a7114ee79888917ea65f83fa978069520ab964616ffcf2a03a438b859fb5719bd427461a6d5011c0f5db8ffdc25c8d63e92942857bde4cd960483ffba98a32c6ff5555b3c85b7bde21cb8051891051176c1c15156c0427891584b7ea3a753e82ce81873f17f42305fa1eb9a68bfb7196e1ea4ad4851b0dcd056bdd000b691d2d09041b989f4075a29b3fccd0c8ffa01365b54a89e3ec153ca4b84a0963c393c6bc48405841c4b1e62813ba0c7421b07cb77a32a032955dea0f8216a9537db38ea87", @ANYRESHEX=r2, @ANYBLOB="a9739258a6607ef83cfdbd8df1c7ac1f570f099b6492c5fd7c7716420b4315753b44403ddb95fb6bbb1fa3b3829f601936c73a99e9a44c19a0b8cc5055c542fdc76a9350c981c0494f704c77c502bab2f179226b56e902ae3e8344141aad77ae0fa868fbcdb5254479cc9a3a0b57815f1f927ff77bc83b53c7f2c4a8d11d35f66257a1e53190b40801b776175cf40ddc0a9d00c40eeef0d20cf2d53622a29225bc7ed5f65cb374af545542b36d1a3361b28fc7ee2090581d9b76cc0880738d0a534d26016feea762461e3503fd32eacf04b01e0ccc1bee62acfa11a2c29221761443ee1f19500c82b38293210a0cf3b85b40542e6226fbfa337cc46b9d4c9ed97043eb81f866d9799d95fddf18d7f493167ad0652852f4592b19f81c91a122444e54d49f6b6c33205f95b6045e4c13a8d8fb9c9eee841cb5a1aa64aba6ca4312171699be0ae324a9150063f0a258785fde76ac3134a9820d41846b6ef65d94a2e8c162fe278adfff25cbcd6cb617495cdcf3954c89ba48467cc587573555fd4e1850705cf6492da22685c7ccee456c7cfb1ce11159fa6c1f3c64d5300cd9d769796026cce7", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000040)="3f19931a83d53e0ed7e986bf865ab1478d34c1a50d62cdec49") ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r2, 0x0, 0x9, 0xf5, 0x8001}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000200)={0x6, 0x7fffffff}) stat(&(0x7f0000000080)='./control\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x28, &(0x7f0000000140)}, 0x10) fchown(r2, r3, r4) [ 2564.780270] binder: 21040:21043 BC_INCREFS_DONE u0000000000000000 node 1515 cookie mismatch 0000000000000003 != 0000000000000000 [ 2564.792168] binder: 21040:21043 got reply transaction with no transaction stack [ 2564.799704] binder: 21040:21043 transaction failed 29201/-71, size 0-0 line 2759 23:06:43 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2564.887247] binder: BINDER_SET_CONTEXT_MGR already set [ 2564.920469] binder: 21040:21054 BC_INCREFS_DONE u0000000000000000 no match [ 2564.925602] 9pnet: Insufficient options for proto=fd [ 2564.927868] binder: 21040:21054 got reply transaction with no transaction stack [ 2564.940478] binder: 21040:21054 transaction failed 29201/-71, size 0-0 line 2759 [ 2564.949988] FAULT_INJECTION: forcing a failure. [ 2564.949988] name failslab, interval 1, probability 0, space 0, times 0 [ 2564.961335] CPU: 0 PID: 21060 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #137 [ 2564.968716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.968771] binder: 21040:21043 ioctl 40046207 0 returned -16 [ 2564.978181] Call Trace: [ 2564.978211] dump_stack+0x1c9/0x2b4 [ 2564.978232] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2564.978252] ? trace_hardirqs_on+0x10/0x10 [ 2564.978281] should_fail.cold.4+0xa/0x1a [ 2564.978305] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2564.978320] ? __lock_acquire+0x7fc/0x5020 [ 2564.978342] ? trace_hardirqs_on+0x10/0x10 [ 2564.978363] ? trace_hardirqs_on+0x10/0x10 [ 2564.985949] binder: undelivered TRANSACTION_ERROR: 29201 [ 2564.986875] ? print_usage_bug+0xc0/0xc0 [ 2564.986896] ? graph_lock+0x170/0x170 [ 2564.986917] ? print_usage_bug+0xc0/0xc0 [ 2564.986935] ? __d_alloc+0xc8/0xd50 [ 2564.986945] ? d_alloc+0x96/0x380 [ 2564.986963] ? d_alloc_parallel+0x15a/0x1ea0 [ 2564.997410] binder: undelivered TRANSACTION_ERROR: 29201 [ 2565.000020] ? find_held_lock+0x36/0x1c0 [ 2565.000048] __should_failslab+0x124/0x180 [ 2565.000071] should_failslab+0x9/0x14 [ 2565.000087] kmem_cache_alloc+0x47/0x760 [ 2565.000118] __build_skb+0xab/0x430 [ 2565.076053] ? skb_try_coalesce+0x1c90/0x1c90 [ 2565.080545] ? graph_lock+0x170/0x170 [ 2565.084341] ? lock_acquire+0x1e4/0x540 [ 2565.088309] ? tun_build_skb.isra.54+0x49c/0x2280 [ 2565.093163] build_skb+0x77/0x2f0 [ 2565.096614] ? __build_skb+0x430/0x430 [ 2565.100502] tun_build_skb.isra.54+0x8c0/0x2280 [ 2565.105258] ? tun_device_event+0x1030/0x1030 [ 2565.109757] ? print_usage_bug+0xc0/0xc0 [ 2565.113819] ? __wake_up_common_lock+0x1d0/0x330 [ 2565.118594] ? print_usage_bug+0xc0/0xc0 [ 2565.122652] ? lock_acquire+0x1e4/0x540 [ 2565.126634] ? alloc_set_pte+0x1027/0x1620 [ 2565.130868] ? graph_lock+0x170/0x170 [ 2565.134754] ? print_usage_bug+0xc0/0xc0 [ 2565.138813] ? reacquire_held_locks+0xbc/0x3e0 [ 2565.143404] ? alloc_set_pte+0x1027/0x1620 [ 2565.147634] ? print_usage_bug+0xc0/0xc0 [ 2565.151689] ? find_held_lock+0x13f/0x1c0 [ 2565.155851] ? print_usage_bug+0xc0/0xc0 [ 2565.159917] ? print_usage_bug+0xc0/0xc0 [ 2565.163987] ? unlock_page+0x1d1/0x2c0 [ 2565.168055] ? __lock_acquire+0x7fc/0x5020 [ 2565.172286] ? trace_hardirqs_on+0x10/0x10 [ 2565.176522] ? trace_hardirqs_on+0x10/0x10 [ 2565.180749] ? __lock_acquire+0x7fc/0x5020 [ 2565.184995] tun_get_user+0xc61/0x42f0 [ 2565.188888] ? trace_hardirqs_on+0x10/0x10 [ 2565.193126] ? tun_build_skb.isra.54+0x2280/0x2280 [ 2565.198070] ? graph_lock+0x170/0x170 [ 2565.201863] ? graph_lock+0x170/0x170 [ 2565.205688] ? graph_lock+0x170/0x170 [ 2565.209586] ? find_held_lock+0x36/0x1c0 [ 2565.213775] ? lock_downgrade+0x8f0/0x8f0 [ 2565.217922] ? kasan_check_read+0x11/0x20 [ 2565.222074] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 2565.226516] ? tun_get+0x231/0x370 [ 2565.230049] ? tun_chr_close+0x180/0x180 [ 2565.234109] tun_chr_write_iter+0xb9/0x154 [ 2565.238339] do_iter_readv_writev+0x897/0xa90 [ 2565.242835] ? vfs_dedupe_file_range+0xa00/0xa00 [ 2565.247585] ? rw_verify_area+0x118/0x360 [ 2565.251739] do_iter_write+0x185/0x5f0 [ 2565.255629] ? dup_iter+0x270/0x270 [ 2565.259248] ? proc_cwd_link+0x1d0/0x1d0 [ 2565.263306] vfs_writev+0x1f1/0x360 [ 2565.266925] ? __fget_light+0x2f7/0x440 [ 2565.270894] ? vfs_iter_write+0xb0/0xb0 [ 2565.274869] ? wait_for_completion+0x8d0/0x8d0 [ 2565.279460] ? __lock_is_held+0xb5/0x140 [ 2565.283517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2565.289142] ? __fdget_pos+0xde/0x200 [ 2565.292945] ? __fdget_raw+0x20/0x20 [ 2565.296667] ? __sb_end_write+0xac/0xe0 [ 2565.300652] do_writev+0x11a/0x310 [ 2565.304206] ? vfs_writev+0x360/0x360 [ 2565.307999] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2565.313539] __x64_sys_writev+0x75/0xb0 [ 2565.317508] do_syscall_64+0x1b9/0x820 [ 2565.321388] ? finish_task_switch+0x1d3/0x870 [ 2565.325879] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2565.330800] ? syscall_return_slowpath+0x31d/0x5e0 [ 2565.335731] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 2565.341188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2565.346039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2565.351232] RIP: 0033:0x455ce1 [ 2565.354406] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 2565.373645] RSP: 002b:00007f68fc677ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 2565.381350] RAX: ffffffffffffffda RBX: 0000000000000036 RCX: 0000000000455ce1 [ 2565.388613] RDX: 0000000000000001 RSI: 00007f68fc677bf0 RDI: 00000000000000fc [ 2565.395875] RBP: 0000000020db4fb6 R08: 00000000000000fc R09: 0000000000000000 [ 2565.403150] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000015 [ 2565.410410] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 2565.427839] 9pnet: Insufficient options for proto=fd 23:06:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) sendmsg(r0, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x7f, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000001c0)="873a1a9a", 0x4}, {&(0x7f0000000ac0)="fdcbdb19697c52cdd0cc8d366bf66072bd212837b682f496973e41d7aa9f09ecb8b3b615ab498a76f6ec2b754c2413a92802e46d4fc3a88f2ae95fc3bfcf3b14e78b8816817e8cdc824351", 0x4b}], 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1b8, 0x14}, 0x4000000) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}, {@access_client='access=client', 0x2c}]}}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/110, &(0x7f0000000140)=0x6e) sendmsg(r2, &(0x7f0000000980)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x4, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="379c33975e894136cbe4c217459f5c1306da420066a0247d40821cb4c35e19a3ffa3fdc35866581209b475ea2295bd1b5e4102cec9e777d2394482bbf43705bab2d9010c22d1e9bc24e4268ec80a4aeea38e55d718e6a00039a202f474715ad5c1ccca8d43b299013c3c512f81e9f6a6206c8346b11c55c60ad4a82a430f498d1702004139e00e32c0c1287f467450bbb74686116ae1d6dbe3edb0e4a066cb5c5b561e502ead40c63b737ddcb258020ba99539745d8667178e56bd219095ca33f495f22939ef9dce357e5d72edd7a361d8", 0xd1}, {&(0x7f0000000380)="4e6318a88ea40e59dad8b696b11cecca9d6bd5213e561b93ad0f37897271d3bfa7450c", 0x23}], 0x2, &(0x7f0000000400)=[{0xc0, 0x129, 0x5, "159818e164540656da8e789b2db63a45593bd81b1377161bf4bda607729597f62f19168f78fffa87baf095bc4d127268dd5a5a203740f483511f6fd594ffd9dea011284a8b763a4b91044e3acb42b4a6fc8bf7d80f813b134a6be6734e85b58cfd6933414ac78903474ff90114a107fae505e4b681e8be60fe8780c905312fb8f70c1f1bea80b694fde0b5c2711c6701e9a0ee6c1607a707584b101364eeb18afa4508d1a39b927fa70971"}, {0x50, 0x10f, 0x10001, "30e9bf34523bd20c0196a79734ec24ff727dc564c2dbc6a5514685b44a0154d7e5e7e157b8e40ad3e4fc1822e084eea6c2cfbdff4046991f34f706"}, {0x50, 0xff, 0xbe0, "afeab490b55ce45a515de862a2b3480c66ca5aff4b86682d8a40631d0f24461fbee007dbc5b74631f29e58ea52ab627f23c2e27e567f1858e8f8ace2de"}, {0xf8, 0x0, 0x4, "ff1e4cb3cd67118dc58b103aad5b7d3bc6a539f93aeee0c41f7268754b0586cc2ea4f3435259e9c8f97a28c8b5f29e8db082cde43dc6a6689c00b79ecb534c5df7bf365ea98393449b274633fe82de83f1542e02728834e570744a1d7324bb8aab91fa2e36d06396ffb6f24388a2e0e5080b459d87f41864466ce6e5dcd382eb113e2f8c606ba82af85b3e904748c3ecfaf6f8a79cc1d5ae50f2c8a6938066c37cc21500642e55a7739b5159f567faf9bb68db57a76f24ca9ca1ef3d8525b406e0963fa095f926251587d3e95e12161c7373b10f7f79f76ce73da259f493efe8549dabe8"}, {0x108, 0x113, 0x97, "6e46eb3f4b7931a1e85d7f6bee5f4d5377bd6f737ca5bc1967ae6038e1e74064c4260ec750ef0d2c6ce9d34dbb5045735e9f1aac90d3c9677cf1d5acaecf87dda1e0a5ba0f381000f13a8f111ff8ce082e06af7c559f2e5c62b5af73207c26ad6c9438b3bab0c8f269d99b0025d40faa290f678f7a9476d76fb1b228f11afe1b93992dcc0e78a2b6d6e4846b7e41f2d52230d09448e5d6ee1a78e874e0cae1b8386cfafc908ae8eb722f2a8af7875467dfd67aad8da47d77971f6d5aca8f336fd2da846a1d58b03e680b624ddb543a70cb9c56fa5bfeb1e0cee4b7f07e0ed736b6fa1bc7295fca4b62f822886990f646024172"}, {0xf8, 0x1, 0x0, "dea8def13d2b8393c90a08d9bd590317fb514b785cedae0e097971e7817cb462f52667ae43e128ba4ac8c6f7a55d4bec719d9d481e776cafb291c17579509ea7ba9ccbdb8b2a5b10ade2edae9bafb6b489953f24d2d34413f98abc63705e51f49d4e4d2186efa729377d6a4bc6d8ef6e77300bad8be1ec8122c255b8f5e9d6ae80514a71ce4960ca69753bf6e1192873f6a0cb4a388d701f68626ab0500d4c2170df8085a4feb5d20f8b3f8b1b2f873f33173eb0f8a359a6131e2d8799765e897966d75933057d1f16d962e70c6a8bcdee4abe1a64d4b2a0edbc473d1ffea5d57e352079d6e2f482"}, {0x58, 0x117, 0xdd6, "f52aa8279408f544be37b2d0b154e240f83a1982f0aa928cc5fc332269446b5ab3532be8c11fb27c750eb3f87ef54a06e13844567e2e440e8970ba3988a92d48458381beb471eedc"}, {0xd0, 0x10b, 0x0, "cf86eb28aafea8b21ba9923ba984207937120e60a29573cdb592e41f7d03850f121fbe449a7219e3db4cb142f0c60b90f96b4de551e418abffb9d7afdcf531bc5231db8e4e2e3e8c42a427f3f4afea8b7bda3493d0f12ccc8ec7f7fad442abf0f39ca9306853a53f622c44ef790d8635215354006beef53a8e4f0365e183d3e8ac5d0a6e068706229a9b3298248fe7c1c2801296ed49149a345ba5cc0ade584731e32b43a4932bc28a7ce7c85357514a6b2ad9583d328d0faeab66ae"}], 0x580, 0x40004}, 0x24000000) 23:06:43 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 23:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x150001c0], [0xc0010058, 0x4b564d02]}) 23:06:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="85dbcdc3e860b2a85f30ff674fe7aeaa290f2a22ed8a45f5ca630107539cc058a5b1ceaffbe013fd8aa4252fb9e792082197b7d51672325bcad12551baece8d84f0a72a62dde37af85123a9ec279379f0e0691409d75ec4eca416588554b6cb9304cf87b59c87d3ecde6b4f561f2c00c50628a85280e3c60ad3049400bfdcdbb3acf0e14d23e01e2843868d7b75efca63f656675fa9186ed10699ae9bdf52a5c8622a3ed929665402485abc3901518daef4713af636fd43718660a6f37ad0e5a33c4505621eaa319568f1eeb8326d8d4dc906c5744ac8536641b8379e85211dc4ca0cad9a3671011c90390ba5831ef75404356c6b7217df57f233bb31c1ae0f6fd577a5cfe26e4c51e554d8fff642ff98b03b0c31f9cd461fdb472b2d46a1b105cb8d719427ee36290402f0a88c72acaabf3d8d01fe9877544a8da4cfd1b090f5ce894bad2495d025f7bf0311dd5db4a85491c1469bf00aec3c80159b71386ba53919ab24aa969a4a90b9593ea7b4667edad116419a66756af11d135edc8cb39aae65f699dff03cf772801af695ef227e653c82aa673614631d90d074223921db716a6c50bb196e439231272e45a9418e1a3d84597f7410b0b6797c2d929d422bd14f029afc65f768f91c6e9e5e3de4204b6d191da8d589a77ea3107ade625ff5fbb8f912211183b4dad785f6d7d9e9a9694e7469e2bbf4666c751a80ac88ee5bf6de57c4b7fee6c3aec9f36d0fd2b39f16976b7c1d457f09ff6bfc6f0253016fde77aa723118724493c916c425297285a3ee176ee0081f42fa2c843c407a4157f8c7969990b68f33ae168ff1e170ec38af4d9ccaec65bc179b957b1cef2a46025520c04741b675fdec22f504166bdafca7eb3883c8f9f3307ab13e830abd4ec18bb5d0c442ca3f1fad5418b1d80d0ecd061bb76dcd05bcda19c79bb9b5136413258faf508dd22e6586c78d0817ac3a0234956443af7ff60269eab67bd5013c565da1e310d14360ff1bf5df9b49a35258447991837eb270ca7d9d1d1e6b39e191112caa4d0dc6fdcd2dfc1e965aa8d6464c5318a23a8ff28a5e896355498da25bd3a817adc036ce3cc118ae2be22a37e2dd31d48eb20b606d3455cd6e3de585ffe42c097a165edad80bde143edc8fa0ca7693fbe53a948eb40ccb679be532fe3c9251885deff114af8bf5c2175b47de458d553318b1600e81775948419fe0d0b1a0451d7f2938b7a17c7495615feeb3063d6162ca0497d6513507504ba5c771a68a198f6061ff22f7437b69baf5a767fdff18b7cf6cca2e799d4213ea6278f2cd5651c8dbf39d2ba4891cd9790769bbb8b4e6d63b4098ce6ae59c630e308341631befba0eea39ca96cbc3296e204b80072773e38d7746ae520c3f54ac280d3e00be4b136183abb9e34a8883a2fd8db856dda3d71173122a1b6e0e7040cf7c7457a0b8a3c3bb98d384cb75a7b8fe9b0bcc8957f19711d0f774b64d3640b934561921dfccc0f4a974698992e41bac2205c15cfd49a24f9ff6598b2c58f2912c859c836fb61d06ce59698b82c24f75dedc678b06bb6b09e4577124a6866ea039a3d523e529fb079833ad4b7ac64824538ff7590bc12ab4a842b70d68d397c4615e818de7d3a3e276dc7a2a4bdb7575285d2594a1886f6871421d13d7a7ba35470f50c595b24875fc0dcc802d43f55b4ea1921ae31ca531afb4c73a0429c8935d7c10e9753e17f1c686aa9deaa0797a1b7fe95e54638308dd7a3547fa46241b7f0d0bccf8383647b6565ba614f12ca936da441c65a8d0773085c3aae63238b661a0ddd67cf454f3a177a0d2eb0697fcf98eb8ed150c5343b1ab4d7f81f18cca3ae1696e7c78d2da82c0037a95e88fe41b8c9a92b3534b836573e1f696a14f559dc326ee073a47694d6d2455a9b2a39b7762d1ff9c11e0acf958a7e2fee81bcd182aa00fa2a47ba1d8212889d2c27898d81c7106f873dbf67805680308e9043daa5364135285d7899f704e9521a7b027652bc52579cd1e38613ad94581e7c0a86354ef771cff78608d20ce02d5ef02f2039c9cb608be63b8847d7525d86ee3e63c0051e7286245edf951313bcf7589a75663b9825c4f42bfd817cbb1fe265630ebc20a02ddb4c5822bc4cdb0b1b54bcb836cfc2484c7a4f0763ff3adba0f53a5abf43095d5419c7d92e51ed0746f49a2722a55c4bcb834fdb21c6d4d35e9471b3e6caa989723e69d0e48770098f021c84a3208dd51f9f01988d4dc42cf32009d221c4ae5a624e6e73d48ce6a8a49aedd0de4a0cab518bd699358cb22c5ea72200fcf138aa36fcd89807e142d8aa7e6a6d8d4a4080139c65c995cd765c0238baceef14e40d3c978856ae18efae7248526336ba0615cf4d5678fe90b6aee1448dcad01bf34db96d3dc91cab66c07c15d9f84caeff62288095cb7fe556499448f4c95d8b071dff3b60bfc21c8ffec2083377623596da85316ee20b05eaa1f6739eaf5e7e19155f031c98c4232178d63ab7e9e0156ab9b4d1d46c448e895686bea82cad43291d6dd4d910e32c010f1bf6aa2474e1f23b28a834c226a2f130a3cf2a71e9303daf2c4ba0b745cba47fdaf53529b27bafefc1a2cc41743906156bd1b90c5560f01158841a67fe48ae133fbeb37676628b08e769c177cf0f3b4acb300108debcb2dbf1a1c6ee1343ba6396dd76bbec8ac389706b38f34ddeda61f1762218842431070d404491cacc76d4e5007a7398983f1a41f4cde094ce825ac367a12f95a59b7aba46e22d4b43ea51d91afb04f7f015b46cc43cd2539adb554239e75ba34da82aaae29d17dd088383701ed676906efb8f5bbea3e016434c1d8e05e3d8ada36abe38fdca66e7f557041cf8eaf16bb0d6b6e743892f46597c3ff4e1c0ed38d78739b03adaa77925bce746b5dfe1f579a3b403a85c21e7358988fd5a596a29935378608688c9d5395fe9883e4590ac815602a45848223400ea87e53e04f24952a88b3c1ac5898d4f4422692889efdc17a83d8ca88b7e6738244e09791873b980c0df22ae43f0c9bc16813e665723ae3a077d5f417ce8b4e81619f707915d85951335c7d93b1c7abde869630dfbc53911f951a60ed9d2de8ff96af4eed39b3746f2a268b067a26d7b7626f5b1388079a251ed0590df18b9fd7049f9fc1bf7f6309a4bb1455c44b4967386d4aca674a6e3cdbbc60fab33e5546585bb2aedc58a757b3726e41452f906f1bf66e1691993b3b93a0c8f76c9f79ea33848aac2ba0c5efd8f23240ca6dbad1af955ceda0d9b373aafb94605598cd06e51303a7f3d6dfd97a2f063681f3d77344c9130d1bc9fc06ed8a9cf6994cfc0db555d26eda30fc597b505c0f00d465579c1c19d27e407b40c5c5d10860a1716a5cbe1125537320534151166b86faa69474045b49e8d54abbce88856716992bbecba5169d74154ebea34c800f9c1b35968f10f2d3044d83585d5d8931ab05681d2533a1c1a50252a2352d5c176d71a8da23928a7654afec24fda0b292836b1a8c54256f6b9163c2b7d438ecc7ff35b7461062770b70781b9b90ab6e939a9238ef865fdf6c42b98d8ebdafc0ba175ff5c284b86359d855eca8fbd2bf4c4a9217b60b5270810ffbf2e2d7481eebcc10de1ef7d5343afbaaa21136a5360f76041b6035c323c297d5a4362e491575de3620f53de6f06b00fab698df26094447e628a94c25274097f600a7ea6d67436518926c4f74d47175953e57b7ef98ef03766c2956ea3828a5fbc8eeebc9637b7002fd4feeb80c0f44bb0d6ba37be6d87a0a434f1459a9e1fc820a7231c6f112047a2f1a475f996f984c2aaee8e8c11222dc29de14d30131f7a9781c1c1ef9e1da8ff9ba43c7cc30cf667ce67affa613fdd0f3fdcacb3411a1ecabea271894e19f1f3c82a03a9ae1a685043a9dd840ab433dc728e580eb9cd3d9d94ef81e4f205b3670bf85b72f8bcfe3c922992e9d5de8004f9c61c3a59d1d5cc516cf76e9396322497a156665f888aa1111c3305610776bf7d2be9796e3aa6eb456dc4afb0a5acf7b53cd708d9b1cf6028ff29f43c8a4337c8950f085ccc3b8427a1b4d775e63d845349fba4bb8e9c3319448b364c3e2def2d5f0ca2100224b851759fa30535cce580bceb3c7d8f2697f63ea8039c9144d09d252e26fffe61494778aa9b268cc517d98083756c5abe888f7fcdebd8a5ef077e46019be639094a5960f34f7d1e69833b5ea3ea57f8272fa3de1ed276a834bea566854ed1fb3ffc9be37815b3d0ea47577f216051ce6fca87a72ac8fab8acacdf837c6c80ef6e533b7772dd7dcc688d44639d863ffda673226ac715ffa25c353a5f32788d48e22860e4ff5360acf90ea732efc49fa3d0971b2b772196c948dae9daf84d2075c4b61e54aa00845562eb208453593176bb60a45024ade85ac83bef1a39cecd044aa74c03fb3495b28a9f60131b45a6e22a0514e5cca89c1f07b8e5087004b5bb4dcb618dc579f20d4b0fdfabb25052caac46cbbbc8ff9a667682e8ddef2766faea6af9dacf006080f453247b9435d70faacbd63ad93ee0a5ee4fac9cd3f87fecbbc90735554221292e16cc769449b3408defc5d8598240b4842c19a9022675b7b5b61e6074568976d708bd91e646421cab15b6d3a2e69d54751e399c1ac07f1aef16eea3163be8425b9d50547c126605b21941ca038300ab8e056f9193b1a6b9942734e45a6632a7a2f7da76dbf68484afb0900fdf60933ebc38ea54e631dfbd6e8f398db5c63b87bc1105ed83a66888c60860fcd9b5b5b831d57979920c266e13504f263517b39cc2d4334b8d328acc41dcd1deedd11216b783667c4d74167bae7b710c53603fce439f5a3c6fd08c3f5c5fe79492278069ccc83ac824208bf8b5f2b4906b79a4475d2bbfbfe6c9d8365b136a22cf0c8aa3b7bce83484f1011294d16c8a114f241d2a4299a8408f861b1fd40d926ba1804f185c75d818a44bd8f9de64647b5fb70c9905e804e67fb69b4eabf4c66311e7ce47742debb7e644a466f38d616ec872626c4e9fbc12871b3ea27e96bb8fefe1d84ad9e352f0634c704f0c79351980a1692eca64137bebaacee9370553b6d00e6766475d5fc4adf1c3814a94092593317d8514b80cb438ff4e87f5366455af7fe7339c94815a0496d6dc0180d2d957821d46753917ffd109cce236bb173b34b90fd2fc3465c31a7a6df5a1c1d1324d7d0b245eb65641ec18e613caa7e92de92a87a82d7a528a8f4551f67bb49295177ce354ec4d8e21569647585a42d83d54d46d824c46f98eb4cd22dea716655665be154318d004792bd32b18a8b73933ad6e2cd60f4b0aacf54ad4e78062d30c5eafcc5ef70727296b6ff81ec5992d6415c62e8f82e2d72b4c79a0064786c4c6c391db216cf0c2208ff5ee6f3c2d679f4f6e61b118ea72b49173d608aab3ebfeb11810ee164f789ba4a4da5f14e4d3b75a35269548746639f1a25f8407977aa94047e56f23d844a507ca9dd9371e36efc2e7a69cbeb0d2cc3452ee6575994da03ef2da8584f11094c00948f01ecb8356d9021122b507cdc9a68b9df4171a157d6ddc5b07ac72105c489e2a1d85b1a031c68b3a440fb39c8721aa87764c575cb06970e698ad1bfdf9f2180c5a56778d484acfadb8cd66df9a47c5aa98a88077eff1f09642b597d32b18800fffaf860337697b7599aa941e798fa682a789b40a99727bb2cc314cbada3835a633ce15f5fb8cc77b9499c02c47b46325ead25505a6085c235a4f42c9a00482d5b3706a55d0516749980aa074b322a18ac0dbc7", 0x1000}, {&(0x7f0000001200)="c46c98a34ac12b023bad92ab163c1f8d7f00316c63ef681ce77c9db8c3795f326f66cf2b7d4c5ae6ef8df10b79cefb8b910e8f5a9d0f8f2aeaab309066988cff612453f43b7ac359e873f56cfb31283c81173cb369d6e274e13158546953e504f84331db87c883b8747474d5f96ad0e58bd543a2640c36bd4e0c2075b28ed6336243104efc1c68d58670327cacb1ad0c2f51a4832d2f75028fc8f40dda2951e4ca671523f1e566b0a314a7e053bfbcaca901c392761b", 0xb6}], 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfffffffffffffffb, 0x10000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0xffff000000000000]}) 23:06:43 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd901]}) [ 2565.590506] binder: 21075:21076 BC_INCREFS_DONE u0000000000000000 node 1518 cookie mismatch 0000000000000003 != 0000000000000000 [ 2565.602465] binder: 21075:21076 got reply transaction with no transaction stack [ 2565.610252] binder: 21075:21076 transaction failed 29201/-71, size 0-0 line 2759 23:06:44 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 23:06:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0xffff0000]}) 23:06:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x201c0], [0xc0010058, 0x4b564d02]}) [ 2565.681107] binder: BINDER_SET_CONTEXT_MGR already set [ 2565.681564] binder: 21075:21095 BC_INCREFS_DONE u0000000000000000 no match [ 2565.692525] binder: 21075:21076 ioctl 40046207 0 returned -16 [ 2565.694089] binder: 21075:21095 got reply transaction with no transaction stack [ 2565.707621] binder: 21075:21095 transaction failed 29201/-71, size 0-0 line 2759 [ 2565.716512] binder: undelivered TRANSACTION_ERROR: 29201 [ 2565.724153] binder: undelivered TRANSACTION_ERROR: 29201 [ 2565.733087] FAULT_INJECTION: forcing a failure. [ 2565.733087] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.744361] CPU: 0 PID: 21096 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #137 [ 2565.751737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2565.761091] Call Trace: [ 2565.763678] dump_stack+0x1c9/0x2b4 [ 2565.767298] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2565.772520] should_fail.cold.4+0xa/0x1a [ 2565.776601] ? graph_lock+0x170/0x170 [ 2565.780399] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2565.785502] ? print_usage_bug+0xc0/0xc0 [ 2565.789645] ? print_usage_bug+0xc0/0xc0 [ 2565.793701] ? find_held_lock+0x36/0x1c0 [ 2565.797759] ? graph_lock+0x170/0x170 [ 2565.801554] ? lock_downgrade+0x8f0/0x8f0 [ 2565.805707] ? __lock_acquire+0x7fc/0x5020 [ 2565.809940] ? find_held_lock+0x36/0x1c0 [ 2565.814003] __should_failslab+0x124/0x180 [ 2565.818242] should_failslab+0x9/0x14 [ 2565.822060] kmem_cache_alloc+0x47/0x760 [ 2565.826117] ? kasan_check_read+0x11/0x20 [ 2565.830274] ? rcu_is_watching+0x8c/0x150 [ 2565.834412] ? print_usage_bug+0xc0/0xc0 [ 2565.838480] __nf_conntrack_alloc+0x1b1/0x7e0 [ 2565.842983] ? early_drop+0xaf0/0xaf0 [ 2565.846778] ? __nf_conntrack_find_get.part.44+0xfc3/0x1ac0 [ 2565.852490] ? check_noncircular+0x20/0x20 [ 2565.856723] ? ipv4_invert_tuple+0x14/0x100 [ 2565.861055] ? generic_invert_tuple+0xd/0x90 [ 2565.865461] init_conntrack+0xebc/0x1500 [ 2565.869537] ? nf_conntrack_alloc+0x50/0x50 [ 2565.873865] ? nf_conntrack_tuple_taken+0x1140/0x1140 [ 2565.879084] ? lock_acquire+0x1e4/0x540 [ 2565.883053] ? nf_conntrack_in+0x6ee/0x1640 [ 2565.887374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2565.892931] ? nf_ct_get_tuple+0x15f/0x1b0 [ 2565.897174] nf_conntrack_in+0xf05/0x1640 [ 2565.901325] ? nf_conntrack_update+0xc80/0xc80 [ 2565.905919] ? ipt_do_table+0xf27/0x1b50 [ 2565.910063] ? trace_hardirqs_on+0xd/0x10 [ 2565.914217] ? __local_bh_enable_ip+0x161/0x230 [ 2565.918981] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2565.924512] ? kasan_check_read+0x11/0x20 [ 2565.928651] ? rcu_is_watching+0x8c/0x150 [ 2565.932825] ? icmp_checkentry+0x90/0x90 [ 2565.936886] ? graph_lock+0x170/0x170 [ 2565.940772] ? lock_acquire+0x1b0/0x540 [ 2565.944746] ? ip_rcv+0xb09/0x1284 [ 2565.948286] ? ipv4_helper+0x460/0x460 [ 2565.952179] ipv4_conntrack_in+0x61/0x90 [ 2565.956230] nf_hook_slow+0xc2/0x1c0 [ 2565.959959] ip_rcv+0xd84/0x1284 [ 2565.963326] ? ip_local_deliver+0x750/0x750 [ 2565.967654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2565.973282] ? ip_local_deliver_finish+0xda0/0xda0 [ 2565.978208] ? refcount_add_not_zero+0x330/0x330 [ 2565.982973] ? __lock_is_held+0xb5/0x140 [ 2565.987036] ? ip_local_deliver+0x750/0x750 [ 2565.991371] __netif_receive_skb_core+0x2488/0x3680 [ 2565.996389] ? nf_ingress+0xa30/0xa30 [ 2566.000186] ? __lock_acquire+0x7fc/0x5020 [ 2566.004420] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2566.009180] ? trace_hardirqs_on+0x10/0x10 [ 2566.013432] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2566.018620] ? __skb_flow_dissect+0xba1/0x45e0 [ 2566.023196] ? kmem_cache_alloc+0x5fa/0x760 [ 2566.027520] ? find_held_lock+0x36/0x1c0 [ 2566.031592] ? lock_downgrade+0x8f0/0x8f0 [ 2566.035736] ? pvclock_read_flags+0x160/0x160 [ 2566.040227] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2566.045241] ? tun_build_skb.isra.54+0xb0f/0x2280 [ 2566.050088] ? __local_bh_enable_ip+0x161/0x230 [ 2566.054757] ? lock_acquire+0x1e4/0x540 [ 2566.058726] ? netif_receive_skb_internal+0xaa/0x7d0 [ 2566.063829] ? kasan_check_read+0x11/0x20 [ 2566.067969] ? rcu_is_watching+0x8c/0x150 [ 2566.072109] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 2566.076513] __netif_receive_skb+0x2c/0x1e0 [ 2566.080844] netif_receive_skb_internal+0x12e/0x7d0 [ 2566.085863] ? dev_cpu_dead+0xae0/0xae0 [ 2566.089833] ? print_usage_bug+0xc0/0xc0 [ 2566.093901] ? kasan_check_read+0x11/0x20 [ 2566.098047] ? rcu_is_watching+0x8c/0x150 [ 2566.102186] ? rcu_pm_notify+0xc0/0xc0 [ 2566.106079] ? reacquire_held_locks+0xbc/0x3e0 [ 2566.110656] netif_receive_skb+0xbf/0x420 [ 2566.114840] ? netif_receive_skb_internal+0x7d0/0x7d0 [ 2566.120035] ? find_held_lock+0x36/0x1c0 [ 2566.124108] ? tun_rx_batched.isra.55+0x494/0x8c0 [ 2566.128947] tun_rx_batched.isra.55+0x4ba/0x8c0 [ 2566.133617] ? tun_sock_write_space+0x3a0/0x3a0 [ 2566.138282] ? kasan_check_read+0x11/0x20 [ 2566.142435] ? __local_bh_enable_ip+0x161/0x230 [ 2566.147109] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2566.152119] ? tun_get_user+0x2ff6/0x42f0 [ 2566.156265] tun_get_user+0x2af1/0x42f0 [ 2566.160250] ? trace_hardirqs_on+0x10/0x10 [ 2566.164502] ? tun_build_skb.isra.54+0x2280/0x2280 [ 2566.169428] ? graph_lock+0x170/0x170 [ 2566.173220] ? graph_lock+0x170/0x170 [ 2566.177036] ? graph_lock+0x170/0x170 [ 2566.180835] ? find_held_lock+0x36/0x1c0 [ 2566.184896] ? lock_downgrade+0x8f0/0x8f0 [ 2566.189053] ? kasan_check_read+0x11/0x20 [ 2566.193198] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 2566.197602] ? tun_get+0x231/0x370 [ 2566.201236] ? tun_chr_close+0x180/0x180 [ 2566.205308] tun_chr_write_iter+0xb9/0x154 [ 2566.209537] do_iter_readv_writev+0x897/0xa90 [ 2566.214032] ? vfs_dedupe_file_range+0xa00/0xa00 [ 2566.218811] ? rw_verify_area+0x118/0x360 [ 2566.222951] do_iter_write+0x185/0x5f0 [ 2566.226845] ? dup_iter+0x270/0x270 [ 2566.230461] ? proc_cwd_link+0x1d0/0x1d0 [ 2566.234514] vfs_writev+0x1f1/0x360 [ 2566.238139] ? __fget_light+0x2f7/0x440 [ 2566.242134] ? vfs_iter_write+0xb0/0xb0 [ 2566.246100] ? wait_for_completion+0x8d0/0x8d0 [ 2566.250676] ? __lock_is_held+0xb5/0x140 [ 2566.254731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2566.260257] ? __fdget_pos+0xde/0x200 [ 2566.264051] ? __fdget_raw+0x20/0x20 [ 2566.267771] ? __sb_end_write+0xac/0xe0 [ 2566.271745] do_writev+0x11a/0x310 [ 2566.275288] ? vfs_writev+0x360/0x360 [ 2566.279080] ? syscall_slow_exit_work+0x500/0x500 [ 2566.283917] __x64_sys_writev+0x75/0xb0 [ 2566.287885] do_syscall_64+0x1b9/0x820 [ 2566.291763] ? finish_task_switch+0x1d3/0x870 [ 2566.296255] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2566.301187] ? syscall_return_slowpath+0x31d/0x5e0 [ 2566.306125] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 2566.311492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2566.316332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2566.321511] RIP: 0033:0x455ce1 [ 2566.324698] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 2566.344218] RSP: 002b:00007f68fc677ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 2566.351934] RAX: ffffffffffffffda RBX: 0000000000000036 RCX: 0000000000455ce1 [ 2566.359203] RDX: 0000000000000001 RSI: 00007f68fc677bf0 RDI: 00000000000000fc [ 2566.366462] RBP: 0000000020db4fb6 R08: 00000000000000fc R09: 0000000000000000 [ 2566.373812] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000015 23:06:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2566.381070] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000001 23:06:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 2566.449120] binder: 21104:21108 BC_INCREFS_DONE u0000000000000000 node 1521 cookie mismatch 0000000000000003 != 0000000000000000 [ 2566.461073] binder: 21104:21108 got reply transaction with no transaction stack [ 2566.468612] binder: 21104:21108 transaction failed 29201/-71, size 0-0 line 2759 23:06:44 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2566.509616] IPVS: length: 110 != 8 23:06:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0xffff000000000000]}) 23:06:44 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) [ 2566.624638] FAULT_INJECTION: forcing a failure. [ 2566.624638] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.636024] CPU: 1 PID: 21124 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #137 [ 2566.643403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2566.652795] Call Trace: [ 2566.655418] dump_stack+0x1c9/0x2b4 [ 2566.659084] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2566.664321] ? __kernel_text_address+0xd/0x40 [ 2566.668845] ? unwind_get_return_address+0x61/0xa0 [ 2566.673814] should_fail.cold.4+0xa/0x1a [ 2566.677912] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2566.683050] ? save_stack+0xa9/0xd0 [ 2566.686708] ? kasan_kmalloc+0xc4/0xe0 [ 2566.690621] ? kasan_slab_alloc+0x12/0x20 [ 2566.694794] ? kmem_cache_alloc+0x12e/0x760 [ 2566.699141] ? __nf_conntrack_alloc+0x1b1/0x7e0 [ 2566.703834] ? init_conntrack+0xebc/0x1500 [ 2566.708068] ? nf_conntrack_in+0xf05/0x1640 [ 2566.712387] ? ipv4_conntrack_in+0x61/0x90 [ 2566.716706] ? nf_hook_slow+0xc2/0x1c0 [ 2566.720588] ? ip_rcv+0xd84/0x1284 [ 2566.724127] ? __netif_receive_skb_core+0x2488/0x3680 [ 2566.729324] ? __netif_receive_skb+0x2c/0x1e0 [ 2566.733822] ? netif_receive_skb_internal+0x12e/0x7d0 [ 2566.739019] ? netif_receive_skb+0xbf/0x420 [ 2566.743337] ? tun_rx_batched.isra.55+0x4ba/0x8c0 [ 2566.748169] ? tun_get_user+0x2af1/0x42f0 [ 2566.752318] ? tun_chr_write_iter+0xb9/0x154 [ 2566.756732] ? do_iter_readv_writev+0x897/0xa90 [ 2566.761397] ? graph_lock+0x170/0x170 [ 2566.765207] ? __x64_sys_writev+0x75/0xb0 [ 2566.769357] ? do_syscall_64+0x1b9/0x820 [ 2566.773409] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2566.778769] ? find_held_lock+0x36/0x1c0 [ 2566.782828] ? graph_lock+0x170/0x170 [ 2566.786626] ? graph_lock+0x170/0x170 [ 2566.790422] ? find_held_lock+0x36/0x1c0 [ 2566.794484] __should_failslab+0x124/0x180 [ 2566.798728] should_failslab+0x9/0x14 [ 2566.802523] __kmalloc_track_caller+0x5f/0x760 [ 2566.807109] ? kasan_check_read+0x11/0x20 [ 2566.811290] ? rcu_is_watching+0x8c/0x150 [ 2566.815435] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 2566.819858] ? nf_ct_ext_add+0x370/0x7b0 [ 2566.823934] __krealloc+0x6f/0xb0 [ 2566.827395] nf_ct_ext_add+0x370/0x7b0 [ 2566.831313] ? nf_ct_ext_destroy+0x380/0x380 [ 2566.835735] ? __nf_conntrack_find_get.part.44+0xfc3/0x1ac0 [ 2566.841447] ? check_noncircular+0x20/0x20 [ 2566.845706] ? ipv4_invert_tuple+0x14/0x100 [ 2566.850044] ? generic_invert_tuple+0xd/0x90 [ 2566.854460] init_conntrack+0x7b6/0x1500 [ 2566.858524] ? nf_conntrack_alloc+0x50/0x50 [ 2566.862854] ? nf_conntrack_tuple_taken+0x1140/0x1140 [ 2566.868150] ? lock_acquire+0x1e4/0x540 [ 2566.872147] ? nf_conntrack_in+0x6ee/0x1640 [ 2566.876474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2566.882027] ? nf_ct_get_tuple+0x15f/0x1b0 [ 2566.886285] nf_conntrack_in+0xf05/0x1640 [ 2566.890446] ? nf_conntrack_update+0xc80/0xc80 [ 2566.895056] ? ipt_do_table+0xf27/0x1b50 [ 2566.899124] ? trace_hardirqs_on+0xd/0x10 [ 2566.903277] ? __local_bh_enable_ip+0x161/0x230 [ 2566.907969] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2566.913520] ? kasan_check_read+0x11/0x20 [ 2566.917684] ? rcu_is_watching+0x8c/0x150 [ 2566.921861] ? icmp_checkentry+0x90/0x90 [ 2566.925920] ? graph_lock+0x170/0x170 [ 2566.929721] ? lock_acquire+0x1b0/0x540 [ 2566.933700] ? ip_rcv+0xb09/0x1284 [ 2566.937275] ? ipv4_helper+0x460/0x460 [ 2566.941166] ipv4_conntrack_in+0x61/0x90 [ 2566.945236] nf_hook_slow+0xc2/0x1c0 [ 2566.948970] ip_rcv+0xd84/0x1284 [ 2566.952344] ? ip_local_deliver+0x750/0x750 [ 2566.956660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2566.962211] ? ip_local_deliver_finish+0xda0/0xda0 [ 2566.967144] ? refcount_add_not_zero+0x330/0x330 [ 2566.971902] ? __lock_is_held+0xb5/0x140 [ 2566.975961] ? ip_local_deliver+0x750/0x750 [ 2566.980298] __netif_receive_skb_core+0x2488/0x3680 [ 2566.985316] ? nf_ingress+0xa30/0xa30 [ 2566.989113] ? __lock_acquire+0x7fc/0x5020 [ 2566.993432] ? print_usage_bug+0xc0/0xc0 [ 2566.997494] ? trace_hardirqs_on+0x10/0x10 [ 2567.001741] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2567.006927] ? __skb_flow_dissect+0xba1/0x45e0 [ 2567.011502] ? kmem_cache_alloc+0x5fa/0x760 [ 2567.015826] ? find_held_lock+0x36/0x1c0 [ 2567.019884] ? lock_downgrade+0x8f0/0x8f0 [ 2567.024034] ? pvclock_read_flags+0x160/0x160 [ 2567.028522] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2567.033532] ? tun_build_skb.isra.54+0xb0f/0x2280 [ 2567.038366] ? __local_bh_enable_ip+0x161/0x230 [ 2567.043213] ? lock_acquire+0x1e4/0x540 [ 2567.047196] ? netif_receive_skb_internal+0xaa/0x7d0 [ 2567.052299] ? kasan_check_read+0x11/0x20 [ 2567.056436] ? rcu_is_watching+0x8c/0x150 [ 2567.060587] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 2567.065004] __netif_receive_skb+0x2c/0x1e0 [ 2567.069321] netif_receive_skb_internal+0x12e/0x7d0 [ 2567.074339] ? dev_cpu_dead+0xae0/0xae0 [ 2567.078490] ? print_usage_bug+0xc0/0xc0 [ 2567.082576] ? kasan_check_read+0x11/0x20 [ 2567.086720] ? rcu_is_watching+0x8c/0x150 [ 2567.090894] ? rcu_pm_notify+0xc0/0xc0 [ 2567.094893] ? reacquire_held_locks+0xbc/0x3e0 [ 2567.099479] netif_receive_skb+0xbf/0x420 [ 2567.103707] ? netif_receive_skb_internal+0x7d0/0x7d0 [ 2567.108904] ? find_held_lock+0x36/0x1c0 [ 2567.112978] ? tun_rx_batched.isra.55+0x494/0x8c0 [ 2567.117818] tun_rx_batched.isra.55+0x4ba/0x8c0 [ 2567.122484] ? tun_sock_write_space+0x3a0/0x3a0 [ 2567.127140] ? kasan_check_read+0x11/0x20 [ 2567.131292] ? __local_bh_enable_ip+0x161/0x230 [ 2567.135958] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2567.140969] ? tun_get_user+0x2ff6/0x42f0 [ 2567.145114] tun_get_user+0x2af1/0x42f0 [ 2567.149084] ? trace_hardirqs_on+0x10/0x10 [ 2567.153326] ? tun_build_skb.isra.54+0x2280/0x2280 [ 2567.158249] ? graph_lock+0x170/0x170 [ 2567.162056] ? graph_lock+0x170/0x170 [ 2567.165849] ? graph_lock+0x170/0x170 [ 2567.169644] ? find_held_lock+0x36/0x1c0 [ 2567.173711] ? lock_downgrade+0x8f0/0x8f0 [ 2567.177855] ? kasan_check_read+0x11/0x20 [ 2567.181996] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 2567.186402] ? tun_get+0x231/0x370 [ 2567.189939] ? tun_chr_close+0x180/0x180 [ 2567.193994] tun_chr_write_iter+0xb9/0x154 [ 2567.198224] do_iter_readv_writev+0x897/0xa90 [ 2567.202713] ? vfs_dedupe_file_range+0xa00/0xa00 [ 2567.207465] ? rw_verify_area+0x118/0x360 [ 2567.211602] do_iter_write+0x185/0x5f0 [ 2567.215480] ? dup_iter+0x270/0x270 [ 2567.219190] ? proc_cwd_link+0x1d0/0x1d0 [ 2567.223320] vfs_writev+0x1f1/0x360 [ 2567.226934] ? __fget_light+0x2f7/0x440 [ 2567.230907] ? vfs_iter_write+0xb0/0xb0 [ 2567.234875] ? wait_for_completion+0x8d0/0x8d0 [ 2567.239450] ? __lock_is_held+0xb5/0x140 [ 2567.243522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2567.249044] ? __fdget_pos+0xde/0x200 [ 2567.252835] ? __fdget_raw+0x20/0x20 [ 2567.256544] ? __sb_end_write+0xac/0xe0 [ 2567.260510] do_writev+0x11a/0x310 [ 2567.264996] ? vfs_writev+0x360/0x360 [ 2567.268788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2567.274319] __x64_sys_writev+0x75/0xb0 [ 2567.278289] do_syscall_64+0x1b9/0x820 [ 2567.282182] ? finish_task_switch+0x1d3/0x870 [ 2567.286668] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2567.291596] ? syscall_return_slowpath+0x31d/0x5e0 [ 2567.296534] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 2567.301903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2567.306741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2567.311922] RIP: 0033:0x455ce1 [ 2567.315099] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 2567.334376] RSP: 002b:00007f68fc677ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 2567.342078] RAX: ffffffffffffffda RBX: 0000000000000036 RCX: 0000000000455ce1 [ 2567.349346] RDX: 0000000000000001 RSI: 00007f68fc677bf0 RDI: 00000000000000fc [ 2567.356614] RBP: 0000000020db4fb6 R08: 00000000000000fc R09: 0000000000000000 [ 2567.363874] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000015 [ 2567.371134] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000002 [ 2567.388401] binder: 21104:21131 BC_INCREFS_DONE u0000000000000000 no match [ 2567.394830] IPVS: length: 110 != 8 [ 2567.395617] binder: 21104:21131 got reply transaction with no transaction stack [ 2567.406650] binder: 21104:21131 transaction failed 29201/-71, size 0-0 line 2759 [ 2567.434495] binder: BINDER_SET_CONTEXT_MGR already set [ 2567.452199] binder: 21104:21108 ioctl 40046207 0 returned -16 [ 2567.484652] binder: undelivered TRANSACTION_ERROR: 29201 [ 2567.494877] binder: undelivered TRANSACTION_ERROR: 29201 23:06:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c050000005e3b412afd5c23564813fa63f42bb945e4ec546c85fc7e8d3b4368d0b32c091cfe53a58a865419e2864a2c56f13a4fff67fbea86d0e59440303f2ae182e28ce38f0b9d2db7c7c0f73fa4092b463e020f56a7fec21c0ffb9dcec4f031c548c72b01b39b9c47dd901a435a6335e3409740dc2541fa59a0b277f8c83d4c7464ca1e0c91a39274a8f4e3fce06fe20864936da13905d932fc4648dd1e9dc27b1018956e81a456259d2fe7d9006845ec682e25a85d08592ed8d4cfc5501175789cb073cb93543323f853"]) fstatfs(r1, &(0x7f0000000040)=""/12) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74726690bc1ec2a0d68db8d95055cd931920005744642c00005a745cf1", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="82d4b1b3382cab93597a75df70a049d07d6e27607dcad6c0ba8e67ab61690f19a0874db9337714faec25f043a8ee556d204c0f94130de9487e3c4b5fde7229748af6510e5578a75f909338913d94bf1d6d30fb4b60301e20d81a6cbdce38dc6dc3d66cdfae2f55cdbe7b9f20e730da5591055203e1bb906d393d0b3f3a1ed87950ee02745bd3f97c6d7314102d7144677ba8b23d880f867fffe97e991b08e0cfffcee99c2775d5a816f951ecfe0ad628753ec3360bd8b913d95e802be7db8aca2abfae0c3c4108befa683c2988050870048677a38cd0a3fb6260b27edcefb9b087ed87f7b618ec06a5ab244c64aa93d2fb437dc8622ce4829975a9f4dcbb29e9cec1c22947899364000000000000000000000000087475e9fd7e2610031b8c2a35040055f68788a94609f543e882ae6c68d8bc74f4a82fa656f243632803e4d545b7e0f9e9a0d2cd36b1c96db95797e6d29cf84593d7f67d2a354404a2e60de62766053b9cc01352c0aa98f633fc84fc480666212d0ab06a035f6991dc4074afdb87fe69416bfe5902b67353e798707ba6094a56"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x1d, @loopback=0x7f000001, 0x4e20, 0x0, 'lblcr\x00', 0x8, 0x24, 0xc}, {@loopback=0x7f000001, 0x4e24, 0x3, 0x2, 0xffffffffa7e835c4, 0x9}}, 0x44) 23:06:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0xffff0000]}) 23:06:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x4b564d00], [0xc0010058, 0x4b564d02]}) 23:06:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a000000]}) 23:06:45 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x900]}, 0x10) 23:06:45 executing program 1 (fault-call:5 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2567.576556] 9pnet_virtio: no channels available for device (null) [ 2567.595506] binder: 21156:21158 BC_INCREFS_DONE u0000000000000000 node 1524 cookie mismatch 0000000000000003 != 0000000000000000 [ 2567.607392] binder: 21156:21158 got reply transaction with no transaction stack [ 2567.614944] binder: 21156:21158 transaction failed 29201/-71, size 0-0 line 2759 23:06:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x10000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_init() syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2567.623110] 9pnet_virtio: no channels available for device (null) 23:06:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:46 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) 23:06:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='1\x00']) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000040)) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) [ 2567.649656] binder: BINDER_SET_CONTEXT_MGR already set [ 2567.650147] binder: 21156:21162 BC_INCREFS_DONE u0000000000000000 no match [ 2567.662260] binder: 21156:21162 got reply transaction with no transaction stack [ 2567.662338] binder: 21156:21158 ioctl 40046207 0 returned -16 [ 2567.669769] binder: 21156:21162 transaction failed 29201/-71, size 0-0 line 2759 23:06:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2567.715223] binder: undelivered TRANSACTION_ERROR: 29201 [ 2567.745150] binder: undelivered TRANSACTION_ERROR: 29201 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b00]}) 23:06:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5447}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x6}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xa001000000000000], [0xc0010058, 0x4b564d02]}) [ 2567.850446] binder: 21182:21184 BC_INCREFS_DONE u0000000000000000 node 1527 cookie mismatch 0000000000000003 != 0000000000000000 [ 2567.862341] binder: 21182:21184 got reply transaction with no transaction stack [ 2567.869889] binder: 21182:21184 transaction failed 29201/-71, size 0-0 line 2759 [ 2567.906473] binder: BINDER_SET_CONTEXT_MGR already set [ 2567.950279] binder: 21182:21184 ioctl 40046207 0 returned -16 [ 2567.998751] binder: 21182:21187 BC_INCREFS_DONE u0000000000000000 no match [ 2568.005933] binder: 21182:21187 got reply transaction with no transaction stack [ 2568.013481] binder: 21182:21187 transaction failed 29201/-71, size 0-0 line 2759 [ 2568.029312] binder: undelivered TRANSACTION_ERROR: 29201 [ 2568.038406] binder: undelivered TRANSACTION_ERROR: 29201 23:06:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1fff, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='self^[ppp0\x00') ioctl(r0, 0x8914, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="0c7766646e6f3db20edb63a09c4dd2c86f4ab5609ba07add100b2ee9aaed8cae54769a2bfd7a977377de7b24beb1fb3bb072f35a3e8a389c19c644c40e69199c5b58ac3e523481", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:46 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e00000000000000]}) 23:06:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x100001c0], [0xc0010058, 0x4b564d02]}) 23:06:46 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x24001, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x80000000, 0x8) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x0, 0xff, 0x7fff, 'queue0\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2568.657829] 9pnet: Insufficient options for proto=fd [ 2568.670651] binder: 21211:21218 BC_INCREFS_DONE u0000000000000000 node 1530 cookie mismatch 0000000000000003 != 0000000000000000 [ 2568.682597] binder: 21211:21218 got reply transaction with no transaction stack [ 2568.690223] binder: 21211:21218 transaction failed 29201/-71, size 0-0 line 2759 23:06:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getitimer(0x1, &(0x7f0000000000)) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:47 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x7f32200000000000]}, 0x10) [ 2568.718380] 9pnet: Insufficient options for proto=fd [ 2568.729996] 9pnet: Insufficient options for proto=fd 23:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x86010000], [0xc0010058, 0x4b564d02]}) 23:06:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb01000000000000]}) 23:06:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x20000000400, 0x4000) write$P9_RLERRORu(r3, &(0x7f0000000080)={0x16, 0x7, 0x2, {{0x9, 'trans=fd,'}, 0x8000}}, 0x16) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) [ 2568.791671] 9pnet: Insufficient options for proto=fd 23:06:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0xd, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x2}, 0x8) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) [ 2568.888683] binder: BINDER_SET_CONTEXT_MGR already set [ 2568.890498] binder: 21211:21251 BC_INCREFS_DONE u0000000000000000 no match [ 2568.901197] binder: 21211:21251 got reply transaction with no transaction stack [ 2568.908755] binder: 21211:21251 transaction failed 29201/-71, size 0-0 line 2759 23:06:47 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) [ 2568.935926] binder: 21211:21218 ioctl 40046207 0 returned -16 23:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x2c], [0xc0010058, 0x4b564d02]}) 23:06:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7901]}) 23:06:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x76, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:47 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x1e0]}) r0 = semget(0x2, 0x4, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) semctl$IPC_RMID(r0, 0x0, 0x0) [ 2569.034150] binder: undelivered TRANSACTION_ERROR: 29201 [ 2569.040964] binder: undelivered TRANSACTION_ERROR: 29201 23:06:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:47 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 23:06:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x20db4fec, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f]}) 23:06:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) r2 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe8) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) r8 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)=0x0) r11 = getpid() getresuid(&(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)=0x0) fstat(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000003e80)={@remote={0xfe, 0x80, [], 0xbb}, 0x5, 0x0, 0x3, 0x1, 0x7f, 0xb5, 0xffffffffffff1075}, &(0x7f0000003ec0)=0x20) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001140)=0x0) lstat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001300)=0x0) getresuid(&(0x7f0000001340), &(0x7f0000001380)=0x0, &(0x7f00000013c0)) openat$null(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/null\x00', 0x40, 0x0) getresgid(&(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)=0x0) r20 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000014c0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000015c0)=0xe8) fstat(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000003d40)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="5e5ffdd35f6c8bb9916135634b8247e7a3a73e4f89635b5d5c8ceb", 0x1b}, {&(0x7f0000000440)="7e501d1d2f4df7f59ab141f260d3410785834eda0760b791125c3fe36451e3dd39f037bf30acf697856590f73ce2652b47230ab64d4c44bfd34b3ad2eb2127a91bb7f30990082b04784b577766c5409b08c04b5335cdac2ab5be91cd0a7c5dcc959505f925078f", 0x67}], 0x2, &(0x7f00000004c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x40, 0x40000}, {&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000580)="5a6aaac2f498a627890c11adc7ff422ebf9be47c8d90ca5e6b5d69acfbb7b9540a24201995e4e1ee86e38efaa70e43482456ec41c59cd31ad7e04bf7e2bf43675ed68928b4cc8e1666fd9ba40e2bf7ee366d0c7190b7c807e185a58b9df90804dae79187031d1ec78f3eecccb509818154566df2b6618fc3d3d8d0ee4e8f097ab3fbc5ba6495aafb02f98ad101091b62ec50", 0x92}], 0x1, &(0x7f0000000b40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}], 0xa8, 0x4}, {&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c80)="efdcd466bb22a2ea2f10eeafaed2af27268813f0e6947c62bb2ca57a64509be00ada3220d6d251e5a62e1a7f8df4fda87f3d025f0d6e934a149c6a6bcdb08b1332fc59b7016916970f909d20dcfd10ca5c3b56495061b8d3a111cfb6b29d856f32291e0351c55943206565fa8f475c011db07515fd1a19bd4e2cdf4ee1fb52434ef5151a4e389de933d7056d958ac78b359c77988a3d2aaf7c9e5bdcd3932d8e80d83a09a7e9e2b09381f3317e7c67f392c4ab2efbeb28d90be09b6ef76df3394829ffdbcd13cda4582bd17f07e6a6f160951b8875186a4fc23e7fca46892bca9960ec653228342bb8eb", 0xea}, {&(0x7f0000000d80)="61e005349e4b49bbcff5ec2d43bc7202cbfc19a974f0ca221068565a6f1009c95d4de36b0efa9222b200e1763669e3d9d0d57ccadf1991a3f81198f4ad12a30b40a5eca3a1562e67ee83fc06a337fc24fbeac1933d843627669c70aed40f70c692a90c0a669faccfa278d028724d785c3d225ae0061baee9a4ba0b7ac739b7f73fbeaf3236326c4cc2edaad6d0b130c365ecb008fdd46ac91f213b3353320eced5c48a4ceb5c385e3ea524dfafd0ab204476d6bf6df5e0dff761c65263482d7243d12fd29cabd0294014f654404a49fb130422f3908bccaf08e27cafdd28ff62fe355abfee51aa812f2480c05ababb", 0xef}, {&(0x7f0000000e80)="e0b7953fef9e953b70de25b458e87acd4013fdcca37b4f52822fd814785837dc7e158c567870ab7c6adcdc1c9002e37de012274aefc00a914835c89a8de28d25cc6690e3ef315b039e67c29973c4b19d1c1e", 0x52}, {&(0x7f0000000f00)="15fec2e2891743023ca04209efc1e81355c46cc2096a789641b215616b6f7a9e2fe8a8e63ba6f1c1608a587eb693fce63b0567f14562003861fc262fec498068190b947e201dc6a76cb31c48da9fb90d6852431e13d25004eb31bdb863942f45ff337738b36b50d0be9ddc7e60d8bd4844143ac7553c346f4cf1881d554132fbc43f3040af35676333ffdf0fc84061fcbaae21ef9a5717baa5", 0x99}], 0x4, &(0x7f0000001680)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0x100, 0x800}, {&(0x7f0000001780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000001800)="37ae3509447d117a14e36b6852f9103d961501ca2ae8a66122a1f6785db767d3bc98691c3accfbacb72999fabc04a61615cad94b78f4c2347e40103bd041c61a1a768801102ca879f7d2b47c279a14a9623f5f40842f858b6b3f5cf514b7b2987daf82e7a92faa7736474da9aee3eb4b2afca01b2b3e9ebefa77946807710e997028c9ea69abc6f37703140dd0c0ea0556f4fdea8b4da5e99d6404ed61ab9edfacbd85437f6cc7f6dad9e312967f", 0xae}, {&(0x7f00000018c0)="b882a4f282788e3dcd6a40a530ed372f88730da303bddbd73603331db1b04f14542010bc1afd30ab3008adfbccfab29f1f4748ae0160ca2c61feb6c494b3175392a282e9930b4b4ec6b45b9bd4ceb219efc948873a0880389c7ad9a4098dfe3e8a533e37ecc25e23a25fd32b73e342460530a2e3584fb50df1069128d46056cf95550c2ecdd8e91a6b513e97bd9f8ebd5a1807798d81e483", 0x98}, {&(0x7f0000001980)="95d4a8924a3093b1b73a16719817f495019d240ed6ba9a23a0ea9903e61987517a615c06fd1598b6107f0ed81cf4f79e61593e2c040812d269543773183d7808e0e6ac2585e1ea7513faa7210f5b23bd0248850874565526b29ac70aad7da7e6a919282900db141c0a77cc9cc20828d59d2243d62ec0001bb6a3d29240cf9fc925efc71f878f464319527c462ce117da09", 0x91}, {&(0x7f0000001a40)="7bd2efdf30dd889e794ea953e50b19f586c7c054b7a770ff217a351994b53eee671936ae57b2b7a5a10619e39bbb08bf0d02e5dc49d1f25eef4cf2e0ed7c8010a0324225470b3e323d33787ef3aa9eba92432fd4f89cb0cdcc1b73d4170509ce49ce44f9966e4b3809a1d1d28cd6bac8a7b6438d891b347bb09008e350eea669094081dec9bafcb827ecacfa5ffe5497354b6ccf9ceecad33f6409bb7ecad819c4d9b9ae02d24b4c0a84d31d91991d5de44319d3eb1de149f9a8977e8843b0277240a057737623274f9b062dd73a29e399b2d695b56637ca4d9618bd03dbbed0dac17d8a9604b3", 0xe7}, {&(0x7f0000001b40)="14f850757e4b052e2259bca137e1e170503b4633322c61d5b9f7b70f2d82fd4239a4e42ce7da95d28129e3dc1b69d54362ec0e58d36dc49365747edafb26ddc617540efca64cbd79ffd2b95249342f34ded3842341ecf5f63d8b58eaedd5af39c683f5130a2d305fb486633604253c62e964802cef77986d3162761da79d1098f87d728bdc99bde59d61e67c800256845867852e28ab887ac1a60dd610563dfce82c83bcf4f7336747cbd41d00a6be174b8e0ccd8a7238d97c519c7280461a884d560f4ca69f396f946f0fba30a0233624f0255c2956bceca29d32da64aa632d7dc528135deb4272a3d4510ead8d95bf668f9b2f745e37b9534cfa36a0003ab0661d6a376538c4cef05a349a16128cc26b0b97b1cebd780a36342b26f66e55faaec9432619de52e7b7a46cca09d4a30d9d5c62e7756de30928d74f9676e27483c109d2b872fc97c46f79908851c7c39fcf402aab1fea22ec39ffed6ff61bc770037d9da913080c7c8583ce723c691bdc1bde5dffe8f2a8034f93b741bfa29f8b0b3d4a8c45e4fd602e86191d8ea6bf8bcd121127c9cb00d71c4bb8993426a35d9d3b034036e7b98b609eefdfc86e4589efc919ff3d059865aa6d12df5c32e4f28fca82b66c45047b08514a39224d1335fc216e155674e807b38e067e0568aac407f77dfc16f1fe73302f264d0fe05bf336611517bac6f583f3829d0c0b66b5816c61ee99830c94832623e8e80073409eba229b340f7ffc9e879e5c07e5621c1196899c30cf2ca1bb24091f48083f68fd912d5187d7415092870e17e3ee30243e13cb349c10590695dfbe8cb6cd412f0a9c7e0dad7643d75942f910943bf83ed7981fb5a9f725184445f6a12450d78b18ac4ab0d0d674dec5743d92fbf43aac5481000b45da7dc42a2c3370d2aa94e601771a951efa0a7863d5ac6014446b6cd6e0db0fb873874400a9d59e01ce645a8231225f442d2bddf616b888dcb478a80c0de4dc242d6d644cec0da416059895ce5710f6712d05b236dd7e6ef1d632e50cb26ead4baf135a86699a0a86805cec022c8c25a5a79f6cc0193d0536a44cdd4320b91e090eed2e3d4ec89f9eb3ca7d000f782f790bbce510d4c396682e1bfc8df5c96e42d449ee910e96598ca809994102bce5c6878c19435856e484f36b6ce6c2ba40af7319b4f467d91dc57083f08aceaefaa9fb48125ae2d9f42db607f2962806b673e53b11c7b3779427a7c8bba9e32fd084666f2f4e79711d9793a5d23ae1f070caae285b9569e1089cd098474ab1e3e780b2bd86ed017bc9e7b51f18a70b49d2081a91cfe7dd6534b2dc080b3b160a872ea296737e009744941d95d55dffcfcc724d39a86379e52ac546cf55c3eb6ae4c417d571b4e0a34e64b9a423a10ba19c3c562b65e0bcf79cfd9795bdb31fc4967716b0ea76d221333fac24ba8a3e2fcd5b8c612acc5e081ccea5e9d6cc0c3ab95b0ea652d8ab60a8fcd197bc0dca912f9bbe1038ed611ffcb8b64251f8af63dfc4b6bd51a21f14155ff552cea0387fb8fcb786ff49727fa4f3654e5ea347d7d1fb75699da77604e5282b25045cecbc487eb58fcc397ecac2f5a1f6a6acb8c33bc6f2e2da98650f7e7a8ac3d952338060a0b1072a535899b925d6fca364673278470cffbbe3a381c4f6cdf4d75a15e580f8d9b95266ab8d319728e529b42619f6494bf1ea12e1eefa70aa1adfa35bccb37e54badbb975a1bc956ca9ad81a7b09fa2e62bfe1ca00ce11ffff224d7c4f6b0be42dbff9de75075f9f89fa69abba1bf9746ce8f3b8c1c0ce068046c9d8e2e7c0aff5ab0934c702301a306a6ebad9d74fa876a574185e7e5d0474df6e3b1e95ee6c973f33fe65077ae946666131dc1035da07146156cd010d3eb9c4e03675cae8ed81143ba3c299a95bbe254fa2d5d245f9b2346188678b5484043927f5d65e1dfe8a3a6eb7015a399f2a92614d51b35533a9aa0a0fc1433f1119d839b7627050f0fe173e82fbf9b26832305db0e1846e72cca4a83aa3c1dac9043e2651ea8e2eb61c0f322bdc046357abd7fa5090f8f7b41ec133540a0bbe89e1a7c51badd8cdc845cb99d897515a13866c4c3d22b5119ee8309542a92384f3b3fe38e71187a4dcb42c168fea8a9b2b7473cd5bbab76627bc8c90019b1372b181147b2e48ea9da2815b66da1c1cfe8e9743f83a8165d1ea073d9b12a910540967864a6ba790fc2342fcdd126b0ac2ca09d11e14e95ae76bc3a27d3e234b43153b80772b5bafd59890651020d08cda868a9506dc7fdd4c43ec28815db6f6847ba756c922afab9b1c1c6f0a521a3475b32160f9fb916c0f0863b7c524c19127430afb6f1a605b6f463728802c0f8ccea33629632ff55ecbccd608393fc441e907851c33d5bc615fe6d2b13bd024e3083faefe62a3defa35754fe686927a2e8725b7f1a6c61518e440b0d25910002965cde45c73415f6a37fbf5ef41fad08efa06511b8f74332cb022119d761ede4b70f4cdea34bc1ea60864d862564eac29f76a78fa252bb3ba4501cce2e758e4b485f1042c56eccdbd7f5cb1328975b9b317903c9179a505b95b1d97b2c4e53e62672e943f90c56591cf6ee334c6ede08cfac1ec474d5d8ff54f052bcd80f24582eadd0f953c313745144281841de1f19e936acd547df9c4407d31fef56d485ff710c4d60611a2f9ff5401b1807758c07748fa829fac18818fd89647a7a62a2c3c7a6da97c2d3b2a9635765aa88f4d2d0cbb8878266fd8faee3c4ce101abfbc97d9d972cd4cf19a8026b122b4449a36b89770c78c6e438f1fcf8cfbfbead87fca3bdb1b8193f08797a5c9dfabae21a533f3a7fa62e03d5c1b06b360334724de482e73c36aedc6108a1af8cc6c9d829e0b9047522f44c2f4a3d5c24640a9e22530f819342734ab614bb6e53c2f036f164a33e77a8c93804b59b85c5185b1b10c713d69e0c78ce9c6a1758335e2d057e08c3662b1cdd26b24d1a7e738af9c4b1787ba87f35b9a2f814e61d0b91bbdf2c05b8347be17ac3751bd4f7a5ade85e39fef02d2aaeb59eff5fa62a846f9a081668b3f0884b2071b933f612a70e9ea2e253933142cb90b4956378ebac48b4e5c9756f51a5fe209788eb003ec5eb6ad96fda0783462d7ef2efb637322875725f62f25de944fdf5f76eb5331e7771259653e7e13c987d62b275a501056c7784d36f2913f6c8ad2733af63e8b093c67ad6e1a721e27099095e09348d8d313e3c64368fcd9a7c587a7498c26888723e029a0d0ce8f8b36395a82b197fb2ac0afaad0850ea253984f9396fdf08fc1f362c10371aca6122c41c1a876eed877bb46a45eb9fc11a27b98bfcf1c92a3979d0d44bd3b979b8340551893558558f46e5e13860eb6fe611696ad556a259f7d9ee8904c3d09bb94898385781329b21b8d8275e17ed069059bc186a94b8aac3b247247f4678cfd284c7ebe5e75af364f5dbd57c936f4e652d8a08fe348ab27e0769c9b72b5c503c514b3a51decdff42b059f95cdafe7d6240aa9b68c7203379211dd2babf5a1322cf4b0fa8f16e1944c007e87e66db20dbcf28198b43f58da74d041daf0fab93819044da625e45995f0b3c55c7f3ee52ba5a9708e248e770da6e32ea383da42d64c75117842c9b2d7ab3b687a6058683e5617a57ce9a28123f626aa87299bc1e9bed52c401a2da3b96f6ca18467376554a0740d7f1dc47ca139ab026a82a6e870d50d685ed05a368a70033a8fe2c9cbdfedb385170c372b479f34174139b606cf33884b420fa0200bdbada257a69671f036201c03d1d1cb8604a03f338252bc3949cd28ab4d4ac10ee11ef4ca28809eeeaef51eeae32f1c976ffef9086e51f17cdaad72cf1032aa7be0fb348e5bce380cc2ddc1ebf7db3c594f0a8a8334bcb1ba80106399ab86d4ac7d8cb25e923734a9b7defccc8dcf780b0435eaacad1fa0c63976fdcbefebcd129e001e9e7147efd498fc0dc534d6e746f3a7605b5a1fb71a8d7d999e8988019995fd0924d3a9b8d6262cd5886496fa9a4ebd95ceb8de6c31c52d43ccd73ab2d8eb6e74e179bbda2e749048663659b9acf5d71a0f9eda568c5e3109ed12669c4fb51d7146d27f8090355db5b1ebf6e2beae502dda60b1585616260d07c9a43256084edfe7c647595a68831ce23fff30e2fe3e6fa6c8533c841c78e2c57abfaa43414a449ded7f645fb5e18df8c7e0ee58acef62b205c01b222f040eb24068881105cd127f16254f5393705bc83a36d12819c88c80cc6489cc95456339fe218d57e7d17f6c020525b75642970ce5363210d0f0d3a7c61e345df5359d5a413d06c768c28db4e3a106f29fd905e1149a13ad893a9b9153374bb4e94ba22bb213ca134b933c2d0a42f6dc24373325108dbf94ab7229b41a74dbe5cbd626649f462a479acc457b3b6aeb292447c5f70b2f1426a82d4964db33f3f332c1366e4a90eea960ba33994e8405fb36cebf2e7b89744233e3c0f4201555cc0547d5f87b9dcd8dfa17ca8d33c8efae6ebba3f6a94ac8297cb3d608828831183094c3360fe3b99f4ea0c2d6dd2ea8ddf929f70089f661e3ee44b4c744d5ef3a6d1d3f5d52fe6b5e5be67f457bd19f09d5b51b1ae96cb028461d0e4b361cf583dcdeb26a695a42add6bc2033163d55c0edb249340bc9a792f7260502bfbe3f6e847eeee457a645142ec5bafc27650de3531420808a5ed575c662cafc05d51ee0a012a91613be15f4a9bdc8f75f8c440d92aa369a06ee6d191dd61671e9bcfc77ec87d1dface5393c205ed1bbeb4f1e92c3c7a3b33417512f7d8579f29bdc31259f2113b4e2d941b226c7cbbbabcb088bf040866a4432d6e251c1168eb9059e9379d06c49b77c2209403c08949ed9eb7cf8dad03a8e75371b4b8fe5836ca0fab5dbb1887a315b22b398f09450c35cb6a5a879fafa8fc990af7768af61b033bb060e03160966254616005f8a8746c466259722cf2a5434bd19ae88c1dff6d428b630e2bce4be1cc2b8762504d59390775d06f8c0f26a9a3c40eb4562e98753c17138d077c3f4b50de9dc3bc4f281231ef44f1176b6c545fff1049177bfbc42873de761c660e9126fda43d9e1e0215528b150fbdae34de4e72fbd363e945ce959da52f5e335bb934555eb9d4219760f7353b98494b616def50a2cf40598da20ac13c86121e5f13adebaf10a395c94a1ced1ffa502274ef587cbecc1581ff3f680f1d7926b397e0f4621768def20d0b0e2c2caacf57dd77711ce7c69f123097abfb7521e3f6f80b9bdd2e8910b20ee58c91efda1a893a94582cbe0e1547083b750e966dfe7458a7e73f06aab02fee5b62ff1d4ce319292da6879fac154ab9d9c906b6d6c1a4ac821c2b7317916f4a8e6829672d3d9662f86453e6b4c2d875dc4a8a7f1ca2fd0d5233a8be1ae1b40172f31bb9a2fd000ba5598fb2e910308c8705d8b128f6fc8b430a45ad883d7f3915c4c5cf2037cb0cc993ab5f7522418fd16d805900365443e8f92bdebdd6955d2b1a9478c9c2aefff63253c7cf09f01d7b57df7d2a769ec5c5bf324cfe7f02cfee8040028e8e1ab44c6b0a51dbc063e31b3816fe3a8bc16e663ea3089b5b9b7ac3703129b0d2c7127ec2963f88dffd9ddcd27ce4a9b8ca26211b3312c4e25dd72270c827ef6d27486d2e93a576283a6fd207d694010558b6debf7a892ac9d003b8b434129ed4a2c786061c4b28039bc048449a8c14118e90eb5e3a8b60355f285881889463da7a8c0003d0e4716fd8295a29b5e48fa4e0ac2523ade2fff9df1e414695120ecc4bf99", 0x1000}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="72f66a27b4aa7beb835487af30fe9290d9e26541fbd8ba608108193850be02108b746a325867c057bfa5618b84c1013a44d6cba0783806dcf9453afb54f2b96082", 0x41}, {&(0x7f0000003bc0)="f8a0fb10c9be652928c52d99a8f9d455811d21ebad9b5eb56bb129c2fd44a8a17b90f6c0163e8dd01544bbe0491eb8121162820309b9d759c52e8cf98c15b43f3262399df22fc5472a6acf930243454e6cccf35610eaf53804cdaa5d36ede5dc69a0775d2cb25e1d76388babbf3d4e76fd06f494e4814a6a83e4980b32de9b903dd168e598c01113c2ac5692f5bdccafe1a68a1554270ac2fbe3dcd5ce5647e28bc6586846f44a62972af60ffb6aa493674a806525f581944c330ada5375c82deebbc9dc3d32124b2422b7593a06ed09b405be1d8d5bf3bd5b4e6d98a1270aadf280", 0xe2}], 0x8, 0x0, 0x0, 0x4}], 0x4, 0x4008801) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:47 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) [ 2569.201013] binder: 21287:21288 BC_INCREFS_DONE u0000000000000000 node 1533 cookie mismatch 0000000000000003 != 0000000000000000 [ 2569.212989] binder: 21287:21288 got reply transaction with no transaction stack [ 2569.220572] binder: 21287:21288 transaction failed 29201/-71, size 0-0 line 2759 23:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010010], [0xc0010058, 0x4b564d02]}) [ 2569.247464] binder: BINDER_SET_CONTEXT_MGR already set [ 2569.253595] binder: 21287:21289 BC_INCREFS_DONE u0000000000000000 no match [ 2569.260751] binder: 21287:21289 got reply transaction with no transaction stack [ 2569.268366] binder: 21287:21289 transaction failed 29201/-71, size 0-0 line 2759 [ 2569.419791] binder: 21287:21288 ioctl 40046207 0 returned -16 [ 2569.430145] binder: undelivered TRANSACTION_ERROR: 29201 [ 2569.437007] binder: undelivered TRANSACTION_ERROR: 29201 23:06:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) eventfd(0xec48) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24d564b00000000]}) 23:06:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c0001646e6f3d985e42e65a7e1e409b89e8d9e81ea8c6bf00ed18ee43b7fa8ba47b1f363ff0a35a", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) 23:06:48 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x35000000]}, 0x10) 23:06:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x7ffff000, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x11], [0xc0010058, 0x4b564d02]}) 23:06:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000]}) [ 2570.012334] binder: 21336:21338 BC_INCREFS_DONE u0000000000000000 node 1536 cookie mismatch 0000000000000003 != 0000000000000000 [ 2570.024439] binder: 21336:21338 got reply transaction with no transaction stack [ 2570.031982] binder: 21336:21338 transaction failed 29201/-71, size 0-0 line 2759 [ 2570.051936] binder: BINDER_SET_CONTEXT_MGR already set 23:06:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x9, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000140)) r2 = msgget$private(0x0, 0x20) msgctl$IPC_RMID(r2, 0x0) 23:06:48 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) [ 2570.067750] 9pnet: Insufficient options for proto=fd [ 2570.068199] binder: 21336:21342 BC_INCREFS_DONE u0000000000000000 no match [ 2570.080235] binder: 21336:21342 got reply transaction with no transaction stack [ 2570.087769] binder: 21336:21342 transaction failed 29201/-71, size 0-0 line 2759 23:06:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0xfffffdef, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2570.156399] binder: 21336:21338 ioctl 40046207 0 returned -16 [ 2570.195134] binder: undelivered TRANSACTION_ERROR: 29201 23:06:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xb700004000000000], [0xc0010058, 0x4b564d02]}) 23:06:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8a9c961bb6ed7148}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x220, 0x70bd28, 0x25dfdbfd, {0x1}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0x5c}, 0x1}, 0x8000) [ 2570.205348] binder: undelivered TRANSACTION_ERROR: 29201 23:06:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76010000]}) 23:06:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2570.344584] binder: 21370:21373 BC_INCREFS_DONE u0000000000000000 node 1539 cookie mismatch 0000000000000003 != 0000000000000000 [ 2570.356536] binder: 21370:21373 got reply transaction with no transaction stack [ 2570.364119] binder: 21370:21373 transaction failed 29201/-71, size 0-0 line 2759 [ 2570.397607] binder: BINDER_SET_CONTEXT_MGR already set [ 2570.410696] 9pnet: Insufficient options for proto=fd [ 2570.426785] binder: 21370:21374 BC_INCREFS_DONE u0000000000000000 no match [ 2570.434055] binder: 21370:21374 got reply transaction with no transaction stack [ 2570.441612] binder: 21370:21374 transaction failed 29201/-71, size 0-0 line 2759 [ 2570.442984] binder: 21370:21373 ioctl 40046207 0 returned -16 [ 2570.481357] binder: undelivered TRANSACTION_ERROR: 29201 [ 2570.493112] binder: undelivered TRANSACTION_ERROR: 29201 23:06:49 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') ioctl$void(r0, 0x5451) r1 = socket$inet6(0xa, 0xf, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r1, 0x4, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7486df59fb3e28b20172663d31a3ffc5a751e44a6a131c2c16414fe6bc72da7d40aea846ad645060e6d9498f7ea7b52707efec126e9247433bfab25a86613dddc549320c06fcefdb16db1cfb5fb4467592557c1504aea06fc8ec806f4aee83e4f46a3a5c57329bb3d2fb221446950d034c52e3cb9bb6dbe98ed6a14e27bff6d25fa6a595bdc592b99b5282000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:49 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 23:06:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = shmget$private(0x0, 0x1000, 0xc02, &(0x7f0000ffd000/0x1000)=nil) r2 = getuid() fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r6 = getpgid(0x0) r7 = getpgrp(r6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000500)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000540)={{0x2549, r2, r3, r4, r5, 0x10, 0x100}, 0x2, 0x4, 0x0, 0x2, r7, r8, 0x4}) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241370ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bed89dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01af2259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x800, 0x0) sendto$inet(r9, &(0x7f0000000600)="1b3bed714d858bd0d893f81c461a94680ab9d04eb7713fed54b5b45a623d5880c91af173f0c3ebcc2d9196cbf274897f04ac819f822a2221a538f5ec629a66bed683cc9f6b22299f838728640cc1fef30bb0c1cd24458d50aa9d7a09c4fea271bef728d82c9b5d548f98a33e7bfab70f1e177e06bc0bb91c58af9016fb788fa73cb0f98a94c9e67126b177b3d78bbddc9951646c1e11f372f98d0715", 0x9c, 0x10, &(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) 23:06:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0xfdef, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0b0000]}) 23:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x550001c000000000], [0xc0010058, 0x4b564d02]}) 23:06:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000002c0)="295ee1311f16f477671070") socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) r3 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r4 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e23, 0x100000001, @remote={0xfe, 0x80, [], 0xbb}, 0x7fffffff}}, 0xffffffff}, &(0x7f0000000140)=0x90) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2570.945567] binder: 21386:21398 BC_INCREFS_DONE u0000000000000000 node 1542 cookie mismatch 0000000000000003 != 0000000000000000 [ 2570.957542] binder: 21386:21398 got reply transaction with no transaction stack [ 2570.965076] binder: 21386:21398 transaction failed 29201/-71, size 0-0 line 2759 [ 2570.975369] 9pnet_virtio: no channels available for device (null) 23:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xfe000000], [0xc0010058, 0x4b564d02]}) 23:06:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x400000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6ba86b530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da78c79e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x80) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:06:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:49 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) [ 2571.039265] 9pnet_virtio: no channels available for device (null) [ 2571.043839] binder: BINDER_SET_CONTEXT_MGR already set 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74010000]}) [ 2571.087179] binder: 21386:21410 BC_INCREFS_DONE u0000000000000000 no match [ 2571.094394] binder: 21386:21410 got reply transaction with no transaction stack [ 2571.098908] binder: 21386:21398 ioctl 40046207 0 returned -16 [ 2571.102057] binder: 21386:21410 transaction failed 29201/-71, size 0-0 line 2759 23:06:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) listxattr(&(0x7f00000000c0)='./control\x00', &(0x7f0000000140)=""/2, 0x2) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f0000001380)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRESHEX=r1], @ANYRES64=r0, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64]], @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x4000) ioctl$KDDELIO(r1, 0x4b35, 0x6) 23:06:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe0}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x75010000], [0xc0010058, 0x4b564d02]}) 23:06:49 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) [ 2571.200284] binder: undelivered TRANSACTION_ERROR: 29201 [ 2571.229354] 9pnet_virtio: no channels available for device (null) 23:06:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00]}) [ 2571.290900] 9pnet_virtio: no channels available for device (null) 23:06:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffff00000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:49 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) [ 2571.500264] binder: undelivered TRANSACTION_ERROR: 29201 23:06:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x100) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x50340, 0x0) linkat(r1, &(0x7f0000000080)='./control\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1400) r3 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r4 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c}) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000240)=0x9, 0x4) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) chmod(&(0x7f0000000040)='./control\x00', 0x0) 23:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010140], [0xc0010058, 0x4b564d02]}) 23:06:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda0]}) 23:06:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 23:06:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2900000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) [ 2571.945945] binder: 21481:21482 BC_INCREFS_DONE u0000000000000000 node 1545 cookie mismatch 0000000000000003 != 0000000000000000 [ 2571.957813] binder: 21481:21482 got reply transaction with no transaction stack [ 2571.965378] binder: 21481:21482 transaction failed 29201/-71, size 0-0 line 2759 23:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0xfa72, &(0x7f0000000000)="7d4878707d1d88cae3cdd481a65901e9a39fe3b423b5902b444378aa21") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x3c}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2572.048781] binder: BINDER_SET_CONTEXT_MGR already set [ 2572.050258] binder: 21481:21503 BC_INCREFS_DONE u0000000000000000 no match [ 2572.061432] binder: 21481:21503 got reply transaction with no transaction stack [ 2572.069069] binder: 21481:21503 transaction failed 29201/-71, size 0-0 line 2759 [ 2572.090791] binder: 21481:21482 ioctl 40046207 0 returned -16 23:06:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001001b]}) 23:06:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x10) 23:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000040)) 23:06:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x17b], [0xc0010058, 0x4b564d02]}) [ 2572.173344] binder: undelivered TRANSACTION_ERROR: 29201 [ 2572.184556] binder: undelivered TRANSACTION_ERROR: 29201 23:06:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x600000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80800, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x0, 0x10000, 0x6c1, 0x7}) syz_emit_ethernet(0x10b, &(0x7f00000000c0)={@random="91a455bf12c7", @empty, [], {@ipx={0x8137, {0xffff, 0xfd, 0x0, 0x5, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x3}, {@random=0x341, @random="e95ced8409ff", 0x1}, "109c90da4d651fa43553f5fd86be18bb96ae04b6f3ffb8b6570ce81bc995f378fcb289abd7e333c5da679c2bdaf64d49799938784ea4c8b6bcfae1805f013ebd8f99a0354aa368e0e761fb54ec5ce20b047bfd7c14301d1540b6468bc7223ad70d9a64449cadfa833af11ab3c05745094ab83692f42b11f99009a990cdb9b8f0c560eb750a528c2850f8c5ab23744ad21ba2abe1168d5ed0cf4120194ebb77a087bbff46df7d46db5bd35ebcef7aacff6934d5ddced3fe110c487185e9b73589c7717945fbc4dbd6384a5bcf2b47367275d67c6d47a7ed7f140debc85a9796"}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000580)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) accept4$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10, 0x80000) 23:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x40000100], [0xc0010058, 0x4b564d02]}) 23:06:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:51 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 23:06:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x300000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d0000]}) 23:06:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="6600a7d5fb8f19a8990a6a2639730d05a32ee6116acc5c7eb4ac6c59f757de254fc72fe2e21b7138b5c2e196b8d7e78ba16b3f9e1f61685423a4271efff8ee5edbca28da586cb2c0c2d57a718a085fa4a0a9588065014ca8cae395c186104fb5e2f4e7714d51465406fb2ac5"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x2a0440) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000740)=""/166) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x4c8, 0x140, 0x140, 0x140, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000080), {[{{@arp={@multicast2=0xe0000002, @empty, 0xff000000, 0xffffff00, @empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x20cf5b4d9701f1b2, 0xff]}, 0x40, 0x3ff, 0x2, 0x1, 0x4, 0x1, 'bridge_slave_1\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=0xffffffff, @empty, 0x4, 0xffffffff}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffffffffffff8001, 0x84d4, 0x1f, 0x1, 0x0, "9e19aeed2e3db7b94cf0828e1c2bcc0b0c25f12774d5f3089d580f445ffe83fa66e2a1460368dba6e07a00525650ebca5acbe6b52b1aa1bbe6f2ad2d2ffba693"}}}, {{@arp={@multicast2=0xe0000002, @multicast1=0xe0000001, 0xffffffff, 0xffffffff, @empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @mac=@random="aed9164ee731", {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0x3ff, 0x2, 0x8, 0x2, 0x0, 0x3, 'vcan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @mac=@random="9dc2f5b8ad2f", @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x400, 0xe}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x518) mkdir(&(0x7f0000000180)='./control\x00', 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000800)={0xffffffffffffffff}) accept4(r3, &(0x7f0000000840)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000008c0)=0x80, 0x800) r4 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x8, 0xffffffffffffffc1, 0xec2}) 23:06:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x2, 0x0, 0x10000, 0x6}, &(0x7f0000000140)=0x18) [ 2573.066823] binder: 21553:21563 BC_INCREFS_DONE u0000000000000000 node 1548 cookie mismatch 0000000000000003 != 0000000000000000 [ 2573.078826] binder: 21553:21563 got reply transaction with no transaction stack [ 2573.086401] binder: 21553:21563 transaction failed 29201/-71, size 0-0 line 2759 23:06:51 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) [ 2573.127452] binder: BINDER_SET_CONTEXT_MGR already set [ 2573.128413] binder: 21553:21576 BC_INCREFS_DONE u0000000000000000 no match [ 2573.140420] binder: 21553:21576 got reply transaction with no transaction stack [ 2573.147984] binder: 21553:21576 transaction failed 29201/-71, size 0-0 line 2759 23:06:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x20000004}, 0x7) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="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") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2573.173890] binder: 21553:21563 ioctl 40046207 0 returned -16 23:06:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0001c0]}) 23:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x801004000000000], [0xc0010058, 0x4b564d02]}) [ 2573.274706] binder: undelivered TRANSACTION_ERROR: 29201 23:06:51 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) 23:06:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2802, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xffff) 23:06:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x28000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2573.355684] binder: undelivered TRANSACTION_ERROR: 29201 23:06:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2573.527734] binder: 21609:21618 BC_INCREFS_DONE u0000000000000000 node 1551 cookie mismatch 0000000000000003 != 0000000000000000 [ 2573.539742] binder: 21609:21618 got reply transaction with no transaction stack [ 2573.547294] binder: 21609:21618 transaction failed 29201/-71, size 0-0 line 2759 [ 2573.556965] binder: BINDER_SET_CONTEXT_MGR already set [ 2573.562610] binder: 21609:21621 BC_INCREFS_DONE u0000000000000000 no match [ 2573.564970] binder: 21609:21618 ioctl 40046207 0 returned -16 [ 2573.569847] binder: 21609:21621 got reply transaction with no transaction stack [ 2573.583329] binder: 21609:21621 transaction failed 29201/-71, size 0-0 line 2759 [ 2573.591232] binder: undelivered TRANSACTION_ERROR: 29201 [ 2573.596769] binder: undelivered TRANSACTION_ERROR: 29201 23:06:52 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 23:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x3b00000000000000], [0xc0010058, 0x4b564d02]}) 23:06:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000080]}) 23:06:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") semget(0x2, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:06:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x3c00}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x7ff3) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000480)={@empty, 0x0}, &(0x7f00000004c0)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000500)={@broadcast, @dev, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @multicast1}, &(0x7f0000000980)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'bcsh0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000b40)={@empty, @loopback, 0x0}, &(0x7f0000000b80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000d00)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000d40)={0x0, @loopback, @multicast2}, &(0x7f0000000d80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000f00)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000001000)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001040)={0x0, @loopback, @multicast1}, &(0x7f0000001080)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000011c0)=0xe8) accept4$packet(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000015c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000016c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001700)={0x0, @broadcast, @loopback}, &(0x7f0000001740)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001780)={@broadcast, @multicast2, 0x0}, &(0x7f00000017c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_to_team\x00', 0x0}) getpeername$packet(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000019c0)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002c00)={0x0, @local, @rand_addr}, &(0x7f0000002c40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002c80)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000002d80)=0xe8) accept4$packet(r2, &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004c40)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000055c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000005580)={&(0x7f0000001a00)=ANY=[@ANYBLOB="00487541d8a353164b0dd16400634fcf7d5f1f66475b8cf0634ccbe178dde967651d6ada5983bfd7a4032f94cf852a5c4aaef7656a42ccad2b8669e40278d9f85379c2677c0927e309dbdb9766251efee8392360608bf0e232ec99f09fb74fc01356a3892b03a5c0e6c0272d74c5f99f8b7165720142a4c6d4fcfd030e17f4e80e73fcc5a0813c653467b7d153875e5c9a", @ANYRES16=r3, @ANYBLOB="50962abd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="e800020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040000ffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400e9711b4338000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000010000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="4401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400d50400000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000600000008000100", @ANYRES32=r16, @ANYBLOB="180202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ffffffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ffff00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000008000008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004003f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="f001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400ff7f08036f710000e87105030200000002000501000200003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ffffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x900}, 0x1, 0x0, 0x0, 0x80}, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e82bd6664000000006e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="ffa9"]) [ 2574.049536] binder: 21633:21637 BC_INCREFS_DONE u0000000000000000 node 1554 cookie mismatch 0000000000000003 != 0000000000000000 [ 2574.061571] binder: 21633:21637 got reply transaction with no transaction stack [ 2574.069217] binder: 21633:21637 transaction failed 29201/-71, size 0-0 line 2759 23:06:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) prctl$seccomp(0x16, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x401, 0x8, 0x1, 0xfffffffffffffff8}, {0x7, 0x8000, 0xffffffff, 0x1000}, {0x6, 0x5, 0x9, 0x100}, {0x5, 0x196e08dc, 0x7f, 0xffffffff}, {0x7, 0xffffffffffff7fff, 0x4, 0x9}, {0x9ef4, 0x80, 0x6, 0x7}, {0x1ff, 0x10001, 0x1, 0x1}, {0xfff, 0x7, 0x3, 0xc904}]}) [ 2574.105327] binder: BINDER_SET_CONTEXT_MGR already set [ 2574.123428] 9pnet_virtio: no channels available for device (null) [ 2574.133772] binder: 21633:21646 BC_INCREFS_DONE u0000000000000000 no match [ 2574.141095] binder: 21633:21646 got reply transaction with no transaction stack [ 2574.141187] binder: 21633:21637 ioctl 40046207 0 returned -16 23:06:52 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x10) 23:06:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x8}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) [ 2574.148635] binder: 21633:21646 transaction failed 29201/-71, size 0-0 line 2759 23:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7a010000], [0xc0010058, 0x4b564d02]}) [ 2574.213315] 9pnet_virtio: no channels available for device (null) 23:06:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000980)='/dev/dsp#\x00', 0x20, 0x80) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) 23:06:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) r2 = getegid() chown(&(0x7f0000000040)='./control\x00', r1, r2) r3 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r4 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c}) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:52 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) [ 2574.363402] binder: undelivered TRANSACTION_ERROR: 29201 [ 2574.387528] binder: undelivered TRANSACTION_ERROR: 29201 23:06:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2b00000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x4, 0x2}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e23, 0x80000001, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, 0x0, 0x6, 0xfffffffffffffffd, 0x10001, 0x7f}, &(0x7f0000000080)=0x98) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d6664780e00006e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0xc4b0, &(0x7f0000000000)='2=') syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df7023d1630008400fe800000000000000000000000000000fe8000000000000000000000000000aa00000038c4b236fd1e7103ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1aec6a0701547c70344227261821121f2b1624b113cced5cb1c298b82b5fe9"], &(0x7f0000000080)) 23:06:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 23:06:52 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) 23:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8], [0xc0010058, 0x4b564d02]}) [ 2574.630364] binder: 21698:21700 BC_INCREFS_DONE u0000000000000000 node 1557 cookie mismatch 0000000000000003 != 0000000000000000 [ 2574.642547] binder: 21698:21700 got reply transaction with no transaction stack [ 2574.650092] binder: 21698:21700 transaction failed 29201/-71, size 0-0 line 2759 [ 2574.654890] 9pnet: Could not find request transport: fdx 23:06:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x5, 0x7, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:06:53 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) 23:06:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2800}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b00000000000000]}) [ 2574.808970] binder: BINDER_SET_CONTEXT_MGR already set [ 2574.827864] binder: 21698:21700 ioctl 40046207 0 returned -16 [ 2574.840379] binder: 21698:21721 BC_INCREFS_DONE u0000000000000000 no match [ 2574.847648] binder: 21698:21721 got reply transaction with no transaction stack 23:06:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0000081], [0xc0010058, 0x4b564d02]}) 23:06:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) [ 2574.855373] binder: 21698:21721 transaction failed 29201/-71, size 0-0 line 2759 23:06:53 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) [ 2574.925409] Unknown ioctl 21523 [ 2574.976345] binder: undelivered TRANSACTION_ERROR: 29201 [ 2574.982440] Unknown ioctl 21523 [ 2574.982738] 9pnet: Could not find request transport: fdx [ 2575.006386] binder: undelivered TRANSACTION_ERROR: 29201 23:06:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x301074406030f65c) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c2a7766646ed174220f75a8d9931856cf0edb35e2102209fdf9e17d0fc3e60011aa", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2c00}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830000c0]}) 23:06:53 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 23:06:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0x80000, 0x0, 0x0, 0xd04]}) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)) 23:06:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x3f, 0x494}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xce], [0xc0010058, 0x4b564d02]}) [ 2575.387267] binder: 21750:21752 BC_INCREFS_DONE u0000000000000000 node 1560 cookie mismatch 0000000000000003 != 0000000000000000 [ 2575.399147] binder: 21750:21752 got reply transaction with no transaction stack [ 2575.406798] binder: 21750:21752 transaction failed 29201/-71, size 0-0 line 2759 [ 2575.427582] 9pnet: Insufficient options for proto=fd 23:06:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x500, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="d952679788b06c1812896c41c56c8d057d652d", 0x13}], 0x1, &(0x7f0000000440)=[@iv={0x78, 0x117, 0x2, 0x62, "683a6d499fc794dbb92fc0b51a2a101b96005d26ca26115ddf1ad4e7785f4463d76b3de210ec07aab06e452ac1a6e0ea0a00b0dfdd059e5ba1420710a24c8fb39f42e2e559072a065becacef75bbcbbe6631286c97dc4b044d8cda94f1a0287b6cf7"}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x78, 0x117, 0x2, 0x62, "8ec0ee7a6b928303a95748e9fcd937b29bc492a0b22e797108f099d104df0c70e14f3f803604d5c831c5f949a962001bd9272100241b4a0e89cfb9ab55e83741ea1cd3c1a1946339b609875966d1e764fe6b6d2db519c606a8d5694764fa0e358327"}, @iv={0x88, 0x117, 0x2, 0x72, "9d678e98fa611814e7dd4a17f8d1c526a0ecd5e97ad5478e790d86eb1831c5b64c4cb4265588b3a0915e8d9bd67c80e8c5b7e69eb03b336e68f65681caeda6caccf2cc4f1a720a8f70820b54278646787d9b49ac1ef2992414c032938d24bbd14c71936b407437eaf28836eb53dced4efa52"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2}, @iv={0x108, 0x117, 0x2, 0xee, "7a1823a89a6dc1e4d97874a5685c248c2779bdb7650dbd40f3208bb1d3ef9834b56238f736b2f6d465e79df092af74551e7e8491eca2d03238f374e15eaa3f3ce8f6f039f2e41136203b7fd9f46433580ce173baceee7d0b1d973497bfef3896668d0704c9ba7b5ac929b26f8a82fa31ecc71ef04dd1f16691b78139bc38246563e8e7155ad5a95d68a52f751c5e86821300d10e570957fd440c457768c13f39d95280a413af8661bb555117e506084e1c4572e1828b52b8317ac906c6bd59e90acb157ad6416bf49c2efc4a04a6d8c449316fb47362824bf5017a0249bbbe258a4f8820465a856dbea70cc09a5e"}], 0x2f8, 0x4000000}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:53 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) [ 2575.440229] 9pnet: Insufficient options for proto=fd [ 2575.451272] binder: BINDER_SET_CONTEXT_MGR already set 23:06:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2b}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x10000011}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) [ 2575.482973] binder: 21750:21773 BC_INCREFS_DONE u0000000000000000 no match [ 2575.490179] binder: 21750:21773 got reply transaction with no transaction stack [ 2575.497737] binder: 21750:21773 transaction failed 29201/-71, size 0-0 line 2759 23:06:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8004000000000000], [0xc0010058, 0x4b564d02]}) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b010000]}) 23:06:53 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x3500]}, 0x10) 23:06:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x8000, 0xfe40, 0x8, 0x7fffffff, 0x0, 0x7f, 0x4, 0x2, 0x400000000000000, 0xffffffff80000001, 0x1ff, 0x6, 0xffffffffffff7fff, 0xdf58, 0x5, 0x9, 0xb1, 0x7f, 0x5, 0x100000000, 0x1ff, 0x7fffffff, 0x9, 0x8, 0x8, 0x7, 0x7, 0x1f, 0x8000, 0x400, 0x5, 0x100, 0x40, 0x7000, 0x9, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x726, 0x7}, 0x80, 0x6, 0x1, 0x0, 0x0, 0x20, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d93040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) [ 2575.590114] binder: undelivered TRANSACTION_ERROR: 29201 [ 2575.597172] binder: 21750:21752 ioctl 40046207 0 returned -16 [ 2575.609587] binder: undelivered TRANSACTION_ERROR: 29201 23:06:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe0000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f00000000c0)=""/179, &(0x7f0000000180)=0xb3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2575.755093] binder: 21808:21809 BC_INCREFS_DONE u0000000000000000 node 1563 cookie mismatch 0000000000000003 != 0000000000000000 [ 2575.767064] binder: 21808:21809 got reply transaction with no transaction stack [ 2575.774606] binder: 21808:21809 transaction failed 29201/-71, size 0-0 line 2759 23:06:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x4001000000000000], [0xc0010058, 0x4b564d02]}) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91040000]}) 23:06:54 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) [ 2575.801576] binder: BINDER_SET_CONTEXT_MGR already set [ 2575.812427] binder: 21808:21809 ioctl 40046207 0 returned -16 [ 2575.923797] binder: 21808:21813 BC_INCREFS_DONE u0000000000000000 no match [ 2575.931112] binder: 21808:21813 got reply transaction with no transaction stack [ 2575.938643] binder: 21808:21813 transaction failed 29201/-71, size 0-0 line 2759 [ 2575.975357] binder: undelivered TRANSACTION_ERROR: 29201 [ 2575.985153] binder: undelivered TRANSACTION_ERROR: 29201 23:06:54 executing program 7: r0 = socket$inet6(0xa, 0x80806, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tranR=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) syz_emit_ethernet(0x56, &(0x7f0000000000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}, @empty, [], {@canfd={0xd, {{0x6, 0x40, 0x40, 0x3}, 0x3e, 0x1, 0x0, 0x0, "a807180c94f5f5d809ccec2adfe714df55335bbdd82f4d7ea2c9ba40a3b83c1c933c3d481f67ef3af112d573451a0b8469026b951c11d0fd5a27aad68b43f6a8"}}}}, 0x0) 23:06:54 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x10) 23:06:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x120101c0], [0xc0010058, 0x4b564d02]}) [ 2576.523387] 9pnet_virtio: no channels available for device (null) 23:06:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000080)='./control\x00', 0x194) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d]}) 23:06:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101040) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xe3, 0x1) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:54 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 23:06:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2b000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x24d564b], [0xc0010058, 0x4b564d02]}) [ 2576.610703] binder: 21859:21866 BC_INCREFS_DONE u0000000000000000 node 1566 cookie mismatch 0000000000000003 != 0000000000000000 [ 2576.622613] binder: 21859:21866 got reply transaction with no transaction stack [ 2576.630164] binder: 21859:21866 transaction failed 29201/-71, size 0-0 line 2759 [ 2576.679617] binder: BINDER_SET_CONTEXT_MGR already set 23:06:55 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x10) 23:06:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x4, 0x7, 0x3, 0x1ff, 0x3f, 0x1}) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xa4) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)={0xfffffffffffffffe, 0x1, [0x0, 0x0, 0x0, 0xfffffffffffffff8]}) [ 2576.723797] binder: 21859:21876 BC_INCREFS_DONE u0000000000000000 no match [ 2576.731098] binder: 21859:21876 got reply transaction with no transaction stack [ 2576.738644] binder: 21859:21876 transaction failed 29201/-71, size 0-0 line 2759 23:06:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000b7]}) 23:06:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2800000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2576.851628] binder: 21859:21866 ioctl 40046207 0 returned -16 [ 2576.859224] binder: undelivered TRANSACTION_ERROR: 29201 [ 2576.879327] binder: undelivered TRANSACTION_ERROR: 29201 [ 2576.940769] 9pnet_virtio: no channels available for device (null) 23:06:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x8, 0x6, 0x6, 0x3, 'syz1\x00', 0xb802}) 23:06:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x20000], [0xc0010058, 0x4b564d02]}) 23:06:55 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x35]}, 0x10) 23:06:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc0ffffff00000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2577.075134] binder: 21916:21920 BC_INCREFS_DONE u0000000000000000 node 1569 cookie mismatch 0000000000000003 != 0000000000000000 [ 2577.087074] binder: 21916:21920 got reply transaction with no transaction stack [ 2577.094621] binder: 21916:21920 transaction failed 29201/-71, size 0-0 line 2759 [ 2577.124374] binder: BINDER_SET_CONTEXT_MGR already set [ 2577.145879] binder: 21916:21920 ioctl 40046207 0 returned -16 [ 2577.151014] binder: 21916:21926 BC_INCREFS_DONE u0000000000000000 no match [ 2577.158937] binder: 21916:21926 got reply transaction with no transaction stack [ 2577.166491] binder: 21916:21926 transaction failed 29201/-71, size 0-0 line 2759 [ 2577.177576] binder: undelivered TRANSACTION_ERROR: 29201 [ 2577.186278] binder: undelivered TRANSACTION_ERROR: 29201 23:06:55 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 23:06:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 23:06:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000]}) 23:06:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc1], [0xc0010058, 0x4b564d02]}) 23:06:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000140)=0xe8) mount$9p_fd(0x0, &(0x7f0000000400)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,version=9p2000,aname=^\\+md5sum,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,cache=none,access=', @ANYRESDEC=r3, @ANYBLOB="2c616e614905d6136f9574b0"]) getsockname$inet(r2, &(0x7f00000001c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000080)=0x10) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x20, 0x0, 0x2}}, 0xace9314a496a06c0) 23:06:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x400000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e895e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c7757365f10107b2964212bccb26288d42a672c965d40e80d0e1908f04425a46fb5e53378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd2436d044c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78"], &(0x7f0000000080)) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) [ 2577.663484] binder: 21942:21943 BC_INCREFS_DONE u0000000000000000 node 1572 cookie mismatch 0000000000000003 != 0000000000000000 [ 2577.675393] binder: 21942:21943 got reply transaction with no transaction stack [ 2577.682945] binder: 21942:21943 transaction failed 29201/-71, size 0-0 line 2759 23:06:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1400}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) 23:06:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x100c000000000], [0xc0010058, 0x4b564d02]}) [ 2577.762820] binder: BINDER_SET_CONTEXT_MGR already set [ 2577.779877] binder: 21942:21943 ioctl 40046207 0 returned -16 [ 2577.789507] binder: 21942:21955 BC_INCREFS_DONE u0000000000000000 no match [ 2577.796688] binder: 21942:21955 got reply transaction with no transaction stack [ 2577.804236] binder: 21942:21955 transaction failed 29201/-71, size 0-0 line 2759 [ 2577.817633] binder: undelivered TRANSACTION_ERROR: 29201 [ 2577.833914] binder: undelivered TRANSACTION_ERROR: 29201 23:06:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="a1fe"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) unlinkat(r2, &(0x7f0000000040)='./control\x00', 0x0) 23:06:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x2, 0x4, [0x0, 0x0, 0x0, 0x64e]}) 23:06:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9901]}) 23:06:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) 23:06:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1400000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7901], [0xc0010058, 0x4b564d02]}) [ 2578.155519] binder: 21980:21981 BC_INCREFS_DONE u0000000000000000 node 1575 cookie mismatch 0000000000000003 != 0000000000000000 [ 2578.167433] binder: 21980:21981 got reply transaction with no transaction stack [ 2578.175208] binder: 21980:21981 transaction failed 29201/-71, size 0-0 line 2759 [ 2578.191313] binder: BINDER_SET_CONTEXT_MGR already set 23:06:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x40000008912, &(0x7f00000001c0)="025cc83dc3d3e4aa9dd79da96bfa416d345f8f762070") finit_module(r0, &(0x7f0000000000)='[trusted\x00', 0x0) syz_emit_ethernet(0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x202, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000140)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) 23:06:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) [ 2578.210512] binder: 21980:21993 BC_INCREFS_DONE u0000000000000000 no match [ 2578.217699] binder: 21980:21993 got reply transaction with no transaction stack [ 2578.225340] binder: 21980:21993 transaction failed 29201/-71, size 0-0 line 2759 [ 2578.238508] 9pnet: Insufficient options for proto=fd [ 2578.245826] binder: 21980:21981 ioctl 40046207 0 returned -16 [ 2578.254793] binder: undelivered TRANSACTION_ERROR: 29201 [ 2578.263336] binder: undelivered TRANSACTION_ERROR: 29201 23:06:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x100002000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2578.508810] 9pnet: Insufficient options for proto=fd 23:06:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 23:06:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff]}) 23:06:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x82000, 0x0) r1 = memfd_create(&(0x7f0000000000)='!d&)\x00', 0x1) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010000], [0xc0010058, 0x4b564d02]}) 23:06:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x3}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4201, r2, 0x1ff, &(0x7f0000000080)) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfeno=', @ANYRESHEX=r1, @ANYBLOB="2c0080d16917782c8389b9520d6e0a05891d73330fa2974c2c22f38948365cb84478342662b0140078d4c38c77b766e4a6afd00852f2ab154c13c091562dcd744b4b346f821fd1c05c562dbf7fa4b211577e47e1a3b7a738a5136403f1da365fbc8b4e19e128c85b40b62f"]) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x6, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000b40)=@broute={'broute\x00', 0x20, 0x4, 0x928, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000080), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xb, 0x24, 0x89ff, 'team_slave_0\x00', 'bridge_slave_1\x00', 'bridge_slave_0\x00', 'teql0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x70, 0xa0, 0x1d0}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffffff}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:ipmi_device_t:s0\x00'}}}}, {{{0x13, 0x1, 0x88f8, 'eql\x00', 'rose0\x00', 'bcsf0\x00', 'syzkaller1\x00', @empty, [0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x2d8, 0x2d8, 0x310, [@bpf0={'bpf\x00', 0x210, {{0x3c, [{0x7, 0xff, 0x8001, 0x9}, {0x7ff, 0x1, 0x7fffffff, 0x5}, {0x81, 0x80000001, 0xf36, 0x80}, {0xa80f, 0x0, 0x101, 0x7f}, {0x6, 0x8, 0x4, 0x4}, {0x5, 0x3, 0x2967, 0x2}, {0x1, 0x1, 0x7}, {0x7e, 0x5, 0x0, 0x400}, {0x1bac, 0x100000001, 0x7f, 0x2}, {0x7, 0x4, 0x9}, {0x7f, 0x1f, 0x4, 0x9}, {0x80, 0xb0c, 0x9, 0x3}, {0x1, 0x3, 0x1, 0x1}, {0x7, 0x8, 0x8, 0xfc}, {0xfffffffffffffeff, 0x1}, {0x81, 0x6717, 0x6, 0x5}, {0x4e, 0x7, 0x4}, {0x7, 0x3, 0xffffffff, 0x10000}, {0x7fffffff, 0xa3, 0x10001, 0x7fffffff}, {0x190, 0x401, 0x3, 0x6}, {0x4, 0x2, 0x0, 0xffff}, {0x15f, 0x6, 0x1f, 0x2}, {0x1, 0x28d, 0x80000000, 0x8000}, {0x3, 0xc1, 0x10000, 0xfffffffffffffff7}, {0x3, 0x4, 0x0, 0x6}, {0x0, 0x0, 0x7f, 0x5d}, {0x9, 0x120000, 0x4, 0xec}, {0x9, 0x80000000, 0x4, 0x3}, {0x59f, 0x8029, 0x800, 0x1}, {0x0, 0x0, 0x40, 0x1}, {0x7b2c, 0x3099, 0x1, 0x5}, {0x9, 0xe0000000, 0x6, 0x7}, {0x3, 0x1000, 0x6, 0x8}, {0x80000001, 0x6, 0xffffffffffffffe1, 0xfff}, {0x6, 0x81, 0x2, 0x8}, {0x10001, 0x6, 0x8, 0xffffffff}, {0x9, 0x262, 0x4, 0x9}, {0xe701, 0x52c, 0x400, 0x1f}, {0x69d8, 0x0, 0x8001, 0x9}, {0x2, 0x3f, 0x2, 0x1}, {0x4, 0x0, 0x8, 0x2cd}, {0x401, 0x3, 0x8, 0x89}, {0x10000, 0x2, 0x80000, 0xaba}, {0x5, 0x800, 0x6, 0x5}, {0x7fff, 0x3, 0x0, 0x80000001}, {0x2, 0x100000000, 0x5, 0x8}, {0x3, 0x1, 0x2, 0x2}, {0x3, 0xbd3c, 0x7, 0x1f}, {0xfffffffffffffff7, 0x80000000, 0x1, 0x8}, {0x40000, 0x1, 0x65, 0x9e3}, {0x2, 0xffffffffffffffff, 0x0, 0x2}, {0x1000, 0x7fff, 0xe98, 0x6}, {0x4, 0x1400000, 0x11e, 0x400}, {0xffffffff, 0x101, 0x1, 0x4}, {0x3, 0x5, 0x5, 0x7}, {0x5, 0x9, 0x40, 0x400}, {0xa1, 0x0, 0x0, 0x8000}, {0x7b, 0x7, 0x8f, 0x8}, {0x0, 0x8, 0x9, 0x2}, {0x80000000, 0x40, 0xfff, 0x7f}, {0x200, 0x6, 0x9, 0x1}, {0x5, 0xfffffffffffffffd, 0x38ae8e4b0000, 0x9}, {0xff, 0x8, 0x7, 0x3f}, {0x0, 0x8001, 0x3, 0x5}], 0x8000}}}, @connlabel={'connlabel\x00', 0x8, {{0x7ff, 0x2}}}]}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x11, 'bpq0\x00', 'ifb0\x00', 'nr0\x00', 'bond0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0xff], 0x130, 0x1b0, 0x1f8, [@stp={'stp\x00', 0x48, {{0x7, {0x0, 0x80, 0x1, @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x401, 0x80, 0x3, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x4e20, 0x4e21, 0x40, 0x8000, 0x1c0000000000, 0x1f, 0x100000000, 0x2, 0x6, 0xd304}, 0x413, 0x944}}}, @helper={'helper\x00', 0x28, {{0x1, 'irc-20000\x00'}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xffff, 0x873}}}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@ERROR={'ERROR\x00', 0x20, {"1e8c202e7efd5dda7a92a10cfc434e3f1db396e0c9a181a9ee085c6f7d9d"}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x17, 0x22, 0x88bf, 'veth1_to_team\x00', 'veth1_to_bridge\x00', 'ip6_vti0\x00', 'nr0\x00', @random="7db68d878d78", [0x0, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0xff], 0x118, 0x190, 0x1c0, [@ip6={'ip6\x00', 0x50, {{@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, [0xffffffff, 0x0, 0x13da819b476d62e7], [0xff], 0xfffffffffffffffb, 0x7b, 0x10, 0x5, 0x4e22, 0x5, 0x4e20, 0x4e22}}}, @m802_3={'802_3\x00', 0x8, {{0x0, 0x6b, 0x2, 0x2}}}]}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5, 0x8, 0x6}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x9a0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000040)) [ 2578.650802] binder: 22023:22027 BC_INCREFS_DONE u0000000000000000 node 1578 cookie mismatch 0000000000000003 != 0000000000000000 [ 2578.662879] binder: 22023:22027 got reply transaction with no transaction stack [ 2578.670561] binder: 22023:22027 transaction failed 29201/-71, size 0-0 line 2759 [ 2578.694211] 9pnet: Insufficient options for proto=fd [ 2578.710200] 9pnet: Insufficient options for proto=fd [ 2578.730252] binder: BINDER_SET_CONTEXT_MGR already set [ 2578.743522] binder: 22023:22044 BC_INCREFS_DONE u0000000000000000 no match [ 2578.750670] binder: 22023:22044 got reply transaction with no transaction stack 23:06:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="2ba76978d9e067eed455fb1e0c04b6d439361b8d3441085a9594925e247cc361fb5bdf77305f8063dec49032b44a03769d2e0407eb55b070a651797c7ea1171aa70a7289770a21eabb1b14ba", 0x4c}, {&(0x7f00000000c0)="90da87900d62985e7792e0e715aa1b0586015593dec16961d0", 0x19}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000100)="d3199f38b34cd513f2cccc1ad5efd5dbf82cf0d050f65b0fffeb75dc790e7018323b", 0x22}], 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = msgget(0x3, 0x80) msgctl$IPC_RMID(r1, 0x0) 23:06:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20327f]}, 0x10) 23:06:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x700000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2578.758241] binder: 22023:22044 transaction failed 29201/-71, size 0-0 line 2759 [ 2578.772858] binder: 22023:22027 ioctl 40046207 0 returned -16 [ 2578.778239] 9pnet: Insufficient options for proto=fd [ 2578.815452] binder: undelivered TRANSACTION_ERROR: 29201 [ 2578.823932] binder: undelivered TRANSACTION_ERROR: 29201 23:06:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88f8}, @val={0x1, 0x87, 0x81, 0x5, 0x8, 0x1}, @llc={@snap={0xab, 0x1, "c5", "04c4e9", 0x883e, "d3904795b97fdceaca2a1d3608687537e03ae07c791d8e5071c591db04117aaaf2ea4ce5fadfd5a04561043e3e23df1511b89cff3a1ee33f46e6bf16b502579fef63d8bd94dbe1a3f8bbd53197d13ae1c5cfe89633aa9e49c48e79564eec942f30001426bd2be35b455f70b76edfd54d68e8bcf6f59c9fdb807a981d895e0d3c3b71d7d16b798f2e4653fd54ec041ed95b34688743d971067d6867a88c5bd37b1e35d2cceb65b0934f0f799c4248addf77f95ea3cfecc52eb3e5c4b72c4370557b9f57"}}}, 0xd9) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) syz_emit_ethernet(0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000200)={0x7}) 23:06:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x400000b0], [0xc0010058, 0x4b564d02]}) 23:06:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="97437cefa4c159c07fc3ee28cb7c69007885fd95ebb77a4ed65557256a714c405f3ffafaaf0f4eb74cbc2372ea6c6840aa9770cb03a08b7c8abfa056f1515350a3a7e6d61919", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/152) 23:06:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}) [ 2578.996057] 9pnet_virtio: no channels available for device (null) [ 2579.009283] binder: 22070:22072 BC_INCREFS_DONE u0000000000000000 node 1581 cookie mismatch 0000000000000003 != 0000000000000000 [ 2579.021158] binder: 22070:22072 got reply transaction with no transaction stack [ 2579.028730] binder: 22070:22072 transaction failed 29201/-71, size 0-0 line 2759 23:06:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x800000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:57 executing program 0: r0 = socket$inet6(0xa, 0x1100000000002, 0x80000000000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x81, @local={0xfe, 0x80, [], 0xaa}, 0x10001}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x1b, 0x7, 0x1, {{0xe, 'mime_typeeth1-'}, 0x3ff}}, 0x1b) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2579.050485] 9pnet_virtio: no channels available for device (null) 23:06:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1e01000000000000], [0xc0010058, 0x4b564d02]}) 23:06:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) [ 2579.132549] 9pnet: Insufficient options for proto=fd 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d01]}) [ 2579.209765] binder: BINDER_SET_CONTEXT_MGR already set 23:06:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000004, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r1, 0x4, r0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffff000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x202000) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r2 = dup3(r0, r0, 0x80000) write$P9_RAUTH(r2, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x1, 0x3}}, 0x14) 23:06:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) 23:06:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000440)={0x7, {{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x14}, 0x4575}}, {{0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x101}}}, 0x108) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400082, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/165) 23:06:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0]}) [ 2579.253237] binder: 22070:22096 BC_INCREFS_DONE u0000000000000000 no match [ 2579.260537] binder: 22070:22096 got reply transaction with no transaction stack [ 2579.268088] binder: 22070:22096 transaction failed 29201/-71, size 0-0 line 2759 [ 2579.288232] binder: 22070:22072 ioctl 40046207 0 returned -16 [ 2579.328288] binder: undelivered TRANSACTION_ERROR: 29201 [ 2579.337336] binder: undelivered TRANSACTION_ERROR: 29201 23:06:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2579.427530] 9pnet: Insufficient options for proto=fd 23:06:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1700], [0xc0010058, 0x4b564d02]}) [ 2579.470275] binder: 22128:22131 BC_INCREFS_DONE u0000000000000000 node 1584 cookie mismatch 0000000000000003 != 0000000000000000 [ 2579.482259] binder: 22128:22131 got reply transaction with no transaction stack [ 2579.489916] binder: 22128:22131 transaction failed 29201/-71, size 0-0 line 2759 [ 2579.500662] 9pnet: Insufficient options for proto=fd 23:06:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) [ 2579.590143] binder: BINDER_SET_CONTEXT_MGR already set 23:06:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x401, 0x3, 'client0\x00', 0xffffffff80000000, "10bdcd4ee790c937", "f6634c8665e454852c49c03300a1ef63e85ac325e2d50cbf5ca1d08d24e06937", 0x6, 0x2}) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e723d66642c7266646e6f3d1b45164d623c6d15c73ab3b46ad3000e7dbbe3772b6a72b8c82d10d1697c9dfae0af46f12f2240e107815c2f81c84b77359979d5837e0ef9fbd5696d6e9dab36592b2f144a17e121ca32c2465c8a97c2d25f61ee232667f5de6121ace5f73a4bfe", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='<\x00']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:06:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) r2 = getpid() r3 = geteuid() fstat(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() fstat(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003840)={0x0, 0x0, 0x0}, &(0x7f0000003880)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000004100)={0x0, 0x0}) fstat(r0, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000054c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005500)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000005600)=0xe8) r13 = getegid() r14 = getpid() r15 = geteuid() r16 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000005940)={0x0, 0x0}) r18 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005980)={0x0, 0x0, 0x0}, &(0x7f00000059c0)=0xc) r20 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005a00)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000005b00)=0xe8) fstat(r0, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005bc0)={0x0}, &(0x7f0000005c00)=0xc) r24 = geteuid() fstat(r0, &(0x7f0000005c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000005cc0)={0x0, 0x0}) r27 = geteuid() getresgid(&(0x7f0000005d00), &(0x7f0000005d40), &(0x7f0000005d80)=0x0) sendmmsg$unix(r1, &(0x7f0000005ec0)=[{&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000002500)="e79a712d292f7c68cbf796017060edb57233c7098f9542b385cac39c289996d2d20670d89aa857919d0f9a09a86b02eb3df2f412c52dd14ded10bf0e8f28b5d7ab0d89a10531617046f479fbacd3dfbdd5118ddc2378fee055e8e0ce85d8bd80eb0c00642eb36d6c123ab23a7e8cef3bd6ab4e2afe672eb28b3a360ef328d89cbf1a9b9c960e46769356391d82a573e713e932a48fd37abcbb303906687fd654070860646cf388e08b9aad610baa71cffb145008e304d2cd5312b6", 0xbb}, {&(0x7f00000025c0)="0493590e5a11dd5da0055e11c8ce3e51d73cd456c60a9f01c6eba27bebec11a7c64c", 0x22}, {&(0x7f0000002600)="5d09460e0b0256e41071", 0xa}, {&(0x7f0000002640)="d8e873dba3ed38a6936bc951581ac0a059770defbf1e21aeea28bf72d13d84f0851d7699a073d99f14493f242d43bc73c8e84cbd763cbcf9b6c03e225b6d6f788777c127aa20712f2fa99347ded145fcc511e3372cc5f9e4925522c9515e36dad01a4a70aee259da8e85d80bf24359f1d079ebc9cff77041f77796bca88e9f4b", 0x80}, {&(0x7f00000026c0)="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", 0x1000}], 0x5, &(0x7f00000038c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x98, 0x40040}, {&(0x7f0000003980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003a00)="d6e42827154c2acf2671e1cfb71b218c7adc5b4755f1025a272b31eb4429dc798beb5f2e634788e336629790df6fc9ced0a3ce03c98d825f0bb5d0bedb62b6031a9e4e3f6cf138d7d8a73b1382434b5d2ca80342b09df48c4e7a7ffde3b6e0a0aa41e65c14a9a96db70055b2c22dbfe572333f5824a28454f57887dc9ed55451d5fc62bafecf13afd78faa07869d2892de77ecd898837b5a62c382fdde3db8689936c05854bc98ba47d6a86f120985c887f0f0d35247f332865159e551d0aafb55e2a9fbf601219374678548de17b7cbd4727a4c85482bf45fb5715d9a6ca2ef", 0xe0}, {&(0x7f0000003b00)="1e09cd9183403ea762e3bc3c8b1d410687d3a74208d991b92829cfde21c26fd3ff04bfc50137491444e95d9a056e90718d58c9ec55edad12ab14e3036496e8a9e8adb28077c23478dba427261050d43c552e7f2208779db6", 0x58}, {&(0x7f0000003b80)="f645c632be9708ccc57560c8f08d8bd2de9c19b6d7df474ce542a42bc1a2ab1795ea04e6f37a40832b46a09beced45ee5c53ca18bd93f36ac007a7b2b1ad37e5c89f9248718b1414924830cfa09a5726ae0fb1ebd40eb5994074d8e15cb64f519864b796129d08ca21d1ddab481d00d4c1c4c83830fcbb54af5766f24bd9df5511c7f3c62e46441eb16d457aa59b67ad8758083c29c3d98a142f3799c783025b0bc915489504b37182cecb2ff6e1fedc2284eaebe3248215532f5e751688756eee79b678aa3228ca2971e273c457c7e6b7a7050eebcf1cb75118023b073a4ec9aecbeb2da4d4e70d2d61e42781", 0xed}, {&(0x7f0000003c80)="4fde57c9ff0529fc4351b357cabab2989ded4ec1d9231b89d6cb6021a8dc15529d3927e9f505d5f54830f5f0d90f2a4f4403", 0x32}, {&(0x7f0000003cc0)="ef9a00065c990f11ca9ca3726233b7777fc34fc295752da0c8c61dd98a1738cc55041cc256b148ebde15483e1755926d62eb408fdda114a73c84705833896413cc8a224e218a794bb18997cad194e4c2e43f15dfb968155d2c25c71be48aa164737a1659d0fe59c41df3a18ba182d0ac65f96e9e69c036c13bf32d78", 0x7c}, {&(0x7f0000003d40)="dba9dd388c7dd85a28df0e28728a88f9335cf3bf81dd4bf5fe292df278dfdc1adbec8322a47cd6d1eceaa54cbff7877773413e699a067b111da368c51d3c18b762a25af195ca13b972ac77a38c822ce16597bf9f1f216c56585644dcf3c4cdbb804691572333c9d5d5f496711d9655d9796b02e0aaee3118d33ab262053f227b5bea", 0x82}, {&(0x7f0000003e00)="04d9b40e322c39ed5414addf09340d612858d049eefdbedd48b85666974d5f28abfd7516ecefd541a2c200b02889a191594b4179bac089947a36345c1bc42cfaf40d545202dd97c9104237d0a21aeaacd26f33642fa40d5334af5fbc99cbb55e7f990bff09b049196bb5773755b922066d801ad7a60b75cb2a87544115191ef10d8231b1f10561d54b53261534c77eeced25be4c330a3cc478c323ecb0ca6f91c84cfe1cd3aa724bf24ca0a1e2141d80def82b2e38de367f2c14094e6b3a7084adb8b8e857984904", 0xc8}, {&(0x7f0000003f00)="c370bf9ecc1eca1fdf43f00b74faa5e88ef6f6ae2dc45290a43b22874c25dbd0e652a66c2ab6d93986f9334a0b1fe68c84ce8ff11535087418a2fb46fe0a29ecf6c9816ad628e4bc2acd106d34733c1dc279cb37d9e2483586312e157e25109796ae2f96528924ef4e296eb6aa88da3faf4e7102acbc1b3016a19b629d9ee717705c4511ca01ef3d3d4a43dbecc2195446fd4c91b4eab22f084375f941b0c697e21633198e0421150e38a0d17766f2f6cdaf04aabd3fc9c43263c28421be0941dce6ae78055f81eb2445", 0xca}, {&(0x7f0000004000)="8ad22d7fdc8a290151a13a0fb03897e493d38e4a5808af9409857181b4147a00cf3966d6d74106568e33daaef7", 0x2d}], 0x9, &(0x7f00000041c0)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x90, 0x48000}, {&(0x7f0000004280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005480)=[{&(0x7f0000004300)="3546640c1b4641a3586bdb5b6bf3f8759c7a8711c1f669ff28108bd6f803b58cde8872f272e9dd5316f4c1ee76bceec5231d0428c81f2f1928b974e257ab4c49eadc4ec5a2dd0993cb479ed9cedaa44b70777cc840d7c6344f325af2dc438378f64034d789681dfd7a6493413a01962bfb2876131929f3a6f638a63c178b0a3eec244c199bf4", 0x86}, {&(0x7f00000043c0)="f8abdb72f96cd63e2623f0f79a15644f7ea514ad24106e73dfdca538c783ee06f1d364f3891e7c81bdc5c3193befde0e2cfb285cfbb3f5869d906921fc5e600facf31ac2416154c86af40c67d7caa34982669989c37e5befad115ec3acaaa81a928cc27b36faa0bb594cd79b6c11a558cdd65bab6dc85edf43511958c3df20bc6f3280520868f36dddce8f6939e60ab263f638f9268bd23b66a8ee82b6a9", 0x9e}, {&(0x7f0000004480)="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", 0x1000}], 0x3, &(0x7f0000005640)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x20, 0x20000000}, {&(0x7f0000005680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005900)=[{&(0x7f0000005700)="abf0e0183a4bd0332c4b50ae421aa4b8b2137cc5b3d0d0ea9ede3ee2dfe09c3b862f63346c43402279294c909030e014a8d0af1a66f0c369c3d96eb6af4366a9cc9a04b542bb8fdea680f402b7e833cf60b98e75a60cf96e36e355ded23a2c0e4d8cedbf142c00c5c00b07a7d9933c87fe704b0b2fd6b571a8cb8127b225666a3ac7b2f0e2ab26434f6a6cd810cafb832dd5a111e0d1f07e75d84500", 0x9c}, {&(0x7f00000057c0)="a2a405f9490b07c6354eaf446c16c6e8b205d7c3a63b314dc3b8b07168a9483392fc9ea1b95875f54eda5cb30ee16b4ba92fd9cd1d5a58682ce65808542223ad2a92fe7ae980467885904e8c6f93b82fff0867b1fc21446db94ef2415259097047cd1107a315c8d485cc0ff4129b0e9dc1df362f7d76755db920be2f575472a1f196dead551f04b42a38ac733a880bbc00b397e9c7d5a4e6c006a058c4ca9f03058bf4e0a2130e9e97e0fc713b3a9eac01ba21b17d421e51061246969b91ab9cd549a5bc2540c713af3ee7dcd47e0d3d556d1a337b0cbd01ec4522ffd4d1", 0xde}, {&(0x7f00000058c0)="ad8a4e", 0x3}], 0x3, &(0x7f0000005dc0)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0xd8, 0x4000000}], 0x4, 0x4000001) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r29 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3ff, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r29, 0xc0a85322, &(0x7f00000000c0)) [ 2579.620308] binder: 22128:22151 BC_INCREFS_DONE u0000000000000000 no match [ 2579.627524] binder: 22128:22151 got reply transaction with no transaction stack [ 2579.627658] binder: 22128:22131 ioctl 40046207 0 returned -16 [ 2579.635088] binder: 22128:22151 transaction failed 29201/-71, size 0-0 line 2759 [ 2579.680140] QAT: Invalid ioctl 23:06:58 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) [ 2579.712092] 9pnet_virtio: no channels available for device (null) [ 2579.721639] binder: undelivered TRANSACTION_ERROR: 29201 [ 2579.735550] binder: undelivered TRANSACTION_ERROR: 29201 23:06:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x170101c000000000]}) 23:06:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x100c0], [0xc0010058, 0x4b564d02]}) [ 2579.986111] QAT: Invalid ioctl [ 2579.993926] 9pnet_virtio: no channels available for device (null) 23:06:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766e440763d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0xfffffec4, 0x69}, 0x14) 23:06:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x200000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ustat(0x6, &(0x7f0000000000)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:58 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x10) 23:06:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201c0]}) 23:06:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x3400], [0xc0010058, 0x4b564d02]}) 23:06:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x100000001) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="000000010000003a96a07a1ba5e0d513f2f10483b50ee9b49a04b634f3a31fe8e7f9b4e155354c1e8b7e51cf21fb20d3e32329b90a0486c2d5870a188cf261c5e405e78f21c53d64dbe349f39848275eccd09d7eef16c607b1e6ad34a19789cec24ea1d66992699817499ab99a4c1be6ac98159f843ecd817d3ecae4caff611ef9077344659dafb671f82f511b6ac075b67bb6a5e06156360dc5d4cabd09595dd868f426ee2a7738888b94291f0819f3839540456a48ecd78a000000", @ANYRESHEX=r1, @ANYBLOB="2c02"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) write$P9_RRENAME(r2, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080)) statx(r2, &(0x7f0000000040)='./control\x00', 0x100, 0x200, &(0x7f0000000200)) [ 2580.350401] binder: 22199:22201 BC_INCREFS_DONE u0000000000000000 node 1587 cookie mismatch 0000000000000003 != 0000000000000000 [ 2580.362438] binder: 22199:22201 got reply transaction with no transaction stack [ 2580.369990] binder: 22199:22201 transaction failed 29201/-71, size 0-0 line 2759 23:06:58 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) [ 2580.397849] 9pnet: Insufficient options for proto=fd [ 2580.413055] 9pnet: Insufficient options for proto=fd 23:06:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) [ 2580.448126] 9pnet: Insufficient options for proto=fd [ 2580.464393] 9pnet: Insufficient options for proto=fd 23:06:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x89ffffff00000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d00]}) 23:06:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x186], [0xc0010058, 0x4b564d02]}) [ 2580.520605] binder: BINDER_SET_CONTEXT_MGR already set 23:06:58 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = inotify_init() mkdir(&(0x7f0000000200)='./control\x00', 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r1, 0x4004556b, &(0x7f0000000380)) r2 = fcntl$dupfd(r1, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c6c66646e6f3d0000000000000400", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) finit_module(r0, &(0x7f0000000040)="776c616e3176626f786e65743065746831932b00", 0x2) 23:06:58 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) 23:06:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xac100, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000140)={0x6, 0xfff}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00a294c0ce8382f1bf23aeb28529f9637f7f042c0f014392a362e6c531053af4fb2e518930138f758000c3b8e20c6583f834c42bde742a1b009fe0de2ce60b32f53f801bb359717cff5dbea8239e1203e3b41de635f21e2c9a4751ce1e10eced34983aa57a8f96227638247d5db7bec4f6fd802bcd6b5529163abe1be118f2cb92351d0f3bb79d856ed5925bec9aed0a4995f3d92c621177f8914ce2990e93dd4f3eaa30da2181545406eaab"]) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2580.572204] binder: 22199:22223 BC_INCREFS_DONE u0000000000000000 no match [ 2580.574843] binder: 22199:22201 ioctl 40046207 0 returned -16 [ 2580.579372] binder: 22199:22223 got reply transaction with no transaction stack [ 2580.592907] binder: 22199:22223 transaction failed 29201/-71, size 0-0 line 2759 23:06:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x7, 0x10001, 0xfffffffffffffffa}) write(r0, &(0x7f00000000c0)="54875c2182d81097fd4e1c25bfb35ea978dc9d7d68e750fd23666f6f8f65017217555afe03026e573a975eaa1bbceb1c51f773a21f7386f9796322bb886f2d846549144d2be0739adf58fd126f06275d", 0x50) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x29000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2580.671772] 9pnet_virtio: no channels available for device (null) 23:06:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000c000000000]}) 23:06:59 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) [ 2580.735414] 9pnet_virtio: no channels available for device (null) [ 2580.810924] binder: undelivered TRANSACTION_ERROR: 29201 [ 2580.817160] binder: undelivered TRANSACTION_ERROR: 29201 23:06:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:06:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x10], [0xc0010058, 0x4b564d02]}) 23:06:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x7000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:06:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f0000000280)="025cc83de3d25f8f762070") modify_ldt$read(0x0, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:06:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) pread64(r0, &(0x7f0000000200)=""/228, 0xe4, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:06:59 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) 23:06:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000]}) 23:06:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x1, 0x0, 0x4}, 0x8}}, 0x18) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x10000000000, [0x0, 0xc54]}) 23:06:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x6000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2581.005862] binder: 22283:22288 BC_INCREFS_DONE u0000000000000000 node 1590 cookie mismatch 0000000000000003 != 0000000000000000 [ 2581.017990] binder: 22283:22288 got reply transaction with no transaction stack [ 2581.025605] binder: 22283:22288 transaction failed 29201/-71, size 0-0 line 2759 23:06:59 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) [ 2581.097976] binder: BINDER_SET_CONTEXT_MGR already set [ 2581.103761] binder: 22283:22300 BC_INCREFS_DONE u0000000000000000 no match [ 2581.111085] binder: 22283:22300 got reply transaction with no transaction stack [ 2581.118608] binder: 22283:22300 transaction failed 29201/-71, size 0-0 line 2759 [ 2581.141804] binder: 22283:22288 ioctl 40046207 0 returned -16 23:06:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x450000) ioctl(r0, 0x8912, &(0x7f0000000280)='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2581.150488] binder: undelivered TRANSACTION_ERROR: 29201 [ 2581.158627] binder: undelivered TRANSACTION_ERROR: 29201 23:07:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x1000000000000, 0x0) 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 23:07:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x3000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xcd], [0xc0010058, 0x4b564d02]}) 23:07:00 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x10) 23:07:00 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x1a5402) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDSKBLED(r0, 0x4b65, 0xffff) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2581.799527] binder: 22326:22327 BC_INCREFS_DONE u0000000000000000 node 1593 cookie mismatch 0000000000000003 != 0000000000000000 [ 2581.811397] binder: 22326:22327 got reply transaction with no transaction stack [ 2581.818932] binder: 22326:22327 transaction failed 29201/-71, size 0-0 line 2759 23:07:00 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x7) ioctl(r0, 0x8912, &(0x7f0000000180)="020300ba1b420f2b362800a3b2b6725d4b48456f") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @loopback={0x0, 0x1}, 0x2}}, 0x8001, 0x4540e369, 0x6, 0x3, 0x5}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={r2, @in={{0x2, 0x4e20}}}, 0x84) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x10042, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000500)=0x5, 0x8) 23:07:00 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x10) [ 2581.899820] binder: BINDER_SET_CONTEXT_MGR already set [ 2581.905807] binder: 22326:22343 BC_INCREFS_DONE u0000000000000000 no match [ 2581.913082] binder: 22326:22343 got reply transaction with no transaction stack [ 2581.919232] binder: 22326:22327 ioctl 40046207 0 returned -16 [ 2581.920617] binder: 22326:22343 transaction failed 29201/-71, size 0-0 line 2759 23:07:00 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff09616e733d6664667a66646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffff89}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1de], [0xc0010058, 0x4b564d02]}) 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b000000]}) 23:07:00 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) [ 2582.021681] binder: undelivered TRANSACTION_ERROR: 29201 [ 2582.027557] binder: undelivered TRANSACTION_ERROR: 29201 [ 2582.075228] 9pnet_virtio: no channels available for device (null) 23:07:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe000000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2582.135871] 9pnet_virtio: no channels available for device (null) [ 2582.202662] binder: 22379:22380 BC_INCREFS_DONE u0000000000000000 node 1596 cookie mismatch 0000000000000003 != 0000000000000000 [ 2582.214542] binder: 22379:22380 got reply transaction with no transaction stack [ 2582.222088] binder: 22379:22380 transaction failed 29201/-71, size 0-0 line 2759 [ 2582.256635] binder: BINDER_SET_CONTEXT_MGR already set [ 2582.268786] binder: 22379:22388 BC_INCREFS_DONE u0000000000000000 no match [ 2582.275961] binder: 22379:22388 got reply transaction with no transaction stack [ 2582.283515] binder: 22379:22388 transaction failed 29201/-71, size 0-0 line 2759 [ 2582.288207] binder: 22379:22380 ioctl 40046207 0 returned -16 [ 2582.307609] binder: undelivered TRANSACTION_ERROR: 29201 [ 2582.319187] binder: undelivered TRANSACTION_ERROR: 29201 23:07:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = open(&(0x7f0000000140)='./control\x00', 0x2800c0, 0x41) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472090000000000000066646e6f3d567c0d15f14d0936a94f9c99fd7229b1cfb77514c19c0cb6d9340e0360a365277fb097c4676a719b87d1f75cba", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x19, r3, 0x2, 0x70bd2b, 0x25dfdbff, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc4}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x815) eventfd2(0xffff, 0x801) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69}, 0x14) inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x20000008}) 23:07:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000004, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01]}) 23:07:01 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) 23:07:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xd004000000000000], [0xc0010058, 0x4b564d02]}) 23:07:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x4000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x802) [ 2582.930983] binder: 22401:22408 BC_INCREFS_DONE u0000000000000000 node 1599 cookie mismatch 0000000000000003 != 0000000000000000 [ 2582.943095] binder: 22401:22408 got reply transaction with no transaction stack [ 2582.950649] binder: 22401:22408 transaction failed 29201/-71, size 0-0 line 2759 [ 2582.963894] 9pnet_virtio: no channels available for device (null) 23:07:01 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) 23:07:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x30100c000000000], [0xc0010058, 0x4b564d02]}) [ 2582.988575] 9pnet_virtio: no channels available for device (null) [ 2583.041619] binder: BINDER_SET_CONTEXT_MGR already set 23:07:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2f000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x174]}) [ 2583.084185] binder: 22401:22424 BC_INCREFS_DONE u0000000000000000 no match [ 2583.091384] binder: 22401:22424 got reply transaction with no transaction stack [ 2583.092323] binder: 22401:22408 ioctl 40046207 0 returned -16 [ 2583.098942] binder: 22401:22424 transaction failed 29201/-71, size 0-0 line 2759 23:07:01 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 23:07:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xe, r1, 0xeee5, &(0x7f0000000000)=""/71) [ 2583.190664] binder: undelivered TRANSACTION_ERROR: 29201 [ 2583.198128] binder: undelivered TRANSACTION_ERROR: 29201 23:07:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc0ffffff}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:01 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) 23:07:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x120101c000000000], [0xc0010058, 0x4b564d02]}) 23:07:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment={0x6, 0x0, 0x9, 0x2b5, 0x0, 0x1, 0x66}, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:07:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}) [ 2583.355527] binder: 22458:22462 BC_INCREFS_DONE u0000000000000000 node 1602 cookie mismatch 0000000000000003 != 0000000000000000 [ 2583.367432] binder: 22458:22462 got reply transaction with no transaction stack [ 2583.374980] binder: 22458:22462 transaction failed 29201/-71, size 0-0 line 2759 [ 2583.438502] binder: BINDER_SET_CONTEXT_MGR already set [ 2583.438544] binder: 22458:22476 BC_INCREFS_DONE u0000000000000000 no match [ 2583.451804] binder: 22458:22476 got reply transaction with no transaction stack [ 2583.459488] binder: 22458:22476 transaction failed 29201/-71, size 0-0 line 2759 23:07:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2f}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000000)='},/\x00', 0x2) r2 = gettid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) r10 = getegid() sendmsg$unix(r1, &(0x7f0000000940)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="6a94c0dc6e0ea0d85a9b334c98bdf64f84cc1fce6d72b06694515fc8654b16c21fbe8792d84224e5c6e152b1c3e72e352845564472f437398c2e3fef14eebf92948fc5d402f1b284b4359cb4740d421417605887481ecfb7c6d299c4d7b6a3510b624a866d87acffd88011441124982ad50047c4856586fdb3f8dfd49ead332d2cec589fb3de59b11a27c34a3f134ad338d51877f8983d", 0x97}], 0x1, &(0x7f00000008c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x78, 0x80}, 0x8000) [ 2583.488141] binder: 22458:22462 ioctl 40046207 0 returned -16 [ 2583.511328] binder: undelivered TRANSACTION_ERROR: 29201 [ 2583.520295] binder: undelivered TRANSACTION_ERROR: 29201 23:07:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, r3, 0x9eca, 0x1000000) getresgid(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000140)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000001c0)={0x8000, 0x6, 0x3f78}) 23:07:02 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x10) 23:07:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe006000000000000]}) 23:07:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x810000c000000000], [0xc0010058, 0x4b564d02]}) [ 2584.067155] 9pnet_virtio: no channels available for device (null) 23:07:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000fb9fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000fe8000)={&(0x7f0000c06d10)=@updsa={0x120, 0x1a, 0xa09, 0x0, 0x0, {{@in=@dev={0xac, 0x14}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c, 0x17}, @coaddr={0x14, 0xe, @in=@loopback=0x7f000001}]}, 0x120}, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:02 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x10) 23:07:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x7f, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0x4, 'none\x00', 0xd, 0x0, 0x13}, 0x2c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20000001}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f040000]}) 23:07:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x2a00000000000000], [0xc0010058, 0x4b564d02]}) [ 2584.184493] binder: 22517:22519 BC_INCREFS_DONE u0000000000000000 node 1605 cookie mismatch 0000000000000003 != 0000000000000000 [ 2584.196473] binder: 22517:22519 got reply transaction with no transaction stack [ 2584.204064] binder: 22517:22519 transaction failed 29201/-71, size 0-0 line 2759 23:07:02 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x101000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x80000001, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x2}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x100000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:02 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) [ 2584.338606] binder: BINDER_SET_CONTEXT_MGR already set 23:07:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0xc000000b, 0x3, 0x6, 0x81, 0x0, 0x3ff}, {0x80000000, 0x7, 0x7, 0x4, 0x5, 0x830, 0x8}, {0xc000000f, 0x5, 0x5, 0x40, 0x0, 0x3, 0x40}, {0x7, 0x10001, 0x1, 0x40, 0x8000, 0x6, 0xffffffff7fffffff}]}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ff, 0x841) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x2, 0x1, 0x6, 0x100000000, 'syz1\x00', 0x5}) ioctl(r1, 0x8912, &(0x7f0000000100)="cfe8047c720791c1f1973d2085a203248baa22cad4afd4a2da6a79c001b5ede509cec78988e0a1de7971c9067ccca0") syz_emit_ethernet(0x0, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)={0x1, 0x1, [0xdde, 0x2000000000000000, 0xd88, 0xffffffffffffffff]}) 23:07:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9104]}) [ 2584.380302] binder: 22517:22537 BC_INCREFS_DONE u0000000000000000 no match [ 2584.387536] binder: 22517:22537 got reply transaction with no transaction stack [ 2584.395115] binder: 22517:22537 transaction failed 29201/-71, size 0-0 line 2759 [ 2584.397275] 9pnet_virtio: no channels available for device (null) [ 2584.413066] binder: 22517:22519 ioctl 40046207 0 returned -16 [ 2584.470320] binder: undelivered TRANSACTION_ERROR: 29201 [ 2584.477265] binder: undelivered TRANSACTION_ERROR: 29201 23:07:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x10) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x5a8, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff}, {0xa, 0x4e20, 0x1000, @ipv4={[], [0xff, 0xff], @rand_addr=0x4}, 0x1000}, 0x3f, [0x1, 0x0, 0x100000000, 0x4, 0xba, 0x100000000, 0x80000000, 0x80000001]}, 0x5c) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000200)="8a32638d8bbbc82aeed1cf54984aa84ab4d8bf2f488368104f2e4c7cc291e221c8034bb691fee0b0d74da1f36bcd8a255ad6edd9e58ade044e96a5fc7f58ee4853da3d36d3b060ae64c3b61a32c9942586b9c036484825615a49f119a6c4389826eec5ba43ef4f451ed3") r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) 23:07:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x410101c000000000], [0xc0010058, 0x4b564d02]}) 23:07:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffff0000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:02 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x10) [ 2584.683190] 9pnet_virtio: no channels available for device (null) [ 2584.801317] 9pnet_virtio: no channels available for device (null) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de]}) 23:07:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = getgid() r4 = getuid() write$P9_RSTATu(r1, &(0x7f0000000440)={0xa5, 0x7d, 0x2, {{0x0, 0x83, 0x401, 0xe775, {0x20, 0x4, 0x3}, 0x4000000, 0x20f2, 0xfffffffffffffffd, 0x9, 0x16, '-}wlan0vmnet0keyring.&', 0x0, "", 0x1d, 'GPLselinuxwlan1cpusetvboxnet1', 0x1d, 'eth1\'[wlan1selfcgroup/.vmnet0'}, 0xd, '/dev/usbmon#\x00', r2, r3, r4}}, 0xa5) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2, 0xad00) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x86, 0x200000) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000040)={0xd000, 0x1f000, 0xfffffffffffff800, 0x2, 0x8}) 23:07:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x41c7, 0x0, 0x6, 0xf062, 0x1ff, 0x4}, 0x50fae2}, 0xa) 23:07:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x800000c0], [0xc0010058, 0x4b564d02]}) 23:07:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x3c000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:03 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x10) [ 2585.207539] binder: 22597:22599 BC_INCREFS_DONE u0000000000000000 node 1608 cookie mismatch 0000000000000003 != 0000000000000000 [ 2585.219499] binder: 22597:22599 got reply transaction with no transaction stack [ 2585.227187] binder: 22597:22599 transaction failed 29201/-71, size 0-0 line 2759 23:07:03 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0000040]}) [ 2585.254404] binder: BINDER_SET_CONTEXT_MGR already set [ 2585.254448] binder: 22597:22607 BC_INCREFS_DONE u0000000000000000 no match [ 2585.267236] binder: 22597:22607 got reply transaction with no transaction stack [ 2585.274783] binder: 22597:22607 transaction failed 29201/-71, size 0-0 line 2759 [ 2585.280388] binder: 22597:22599 ioctl 40046207 0 returned -16 23:07:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x4}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:03 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) [ 2585.337284] binder: undelivered TRANSACTION_ERROR: 29201 [ 2585.344683] binder: undelivered TRANSACTION_ERROR: 29201 23:07:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xff02], [0xc0010058, 0x4b564d02]}) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7501]}) 23:07:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2f00000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:03 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 23:07:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x8000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2585.560701] binder: 22638:22641 BC_INCREFS_DONE u0000000000000000 node 1611 cookie mismatch 0000000000000003 != 0000000000000000 [ 2585.573162] binder: 22638:22641 got reply transaction with no transaction stack [ 2585.580726] binder: 22638:22641 transaction failed 29201/-71, size 0-0 line 2759 [ 2585.640584] binder: BINDER_SET_CONTEXT_MGR already set [ 2585.665919] binder: 22638:22646 BC_INCREFS_DONE u0000000000000000 no match [ 2585.673091] binder: 22638:22646 got reply transaction with no transaction stack [ 2585.680650] binder: 22638:22646 transaction failed 29201/-71, size 0-0 line 2759 [ 2585.697127] binder: 22638:22641 ioctl 40046207 0 returned -16 [ 2585.710456] binder: undelivered TRANSACTION_ERROR: 29201 [ 2585.721421] binder: undelivered TRANSACTION_ERROR: 29201 23:07:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='@*\x00'}, 0x10) write$P9_RSTAT(r1, &(0x7f0000000100)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x100, 0x1, {0x4, 0x1, 0x8}, 0x10180000, 0x0, 0x6, 0xa6, 0x8, 'gretap0\x00', 0x8, 'gretap0\x00', 0xd, "212d2e6367726f75702f5b4005", 0x8, 'vboxnet1'}}, 0x5f) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'gretap0\x00', 0x1}) 23:07:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x2ff], [0xc0010058, 0x4b564d02]}) 23:07:04 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) 23:07:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000c000000000]}) 23:07:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2c000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:04 executing program 7: r0 = inotify_init() getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) mkdir(&(0x7f0000000180)='./control\x00', 0xfffffffffffffffc) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x97e, 0x800) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty]}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1fc31290733dcd951b7ed3ca51938236bf72281b35e99e3cb17e12360160d50f1a6248af85cdf2b1a6bc47ef9198e7a61a71d97e84814a7e90eb7791899c5e", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c66646e6f3d414739ceda053b98e789bad169ad5980d55d14f6bc1252dc600a0bae0c17fecbbd59861c0880b4f35fe7b6810300000000000060892a0a2db52c95bf6a5908247fd53bcb7abb9c567888612ae046b1c1d44a5c59ec2508ef11985d033ce473e0f2826359f5e867fd67503d66845beb5869c565d94fa3181723430a9732ec000000000000000000000000000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./control\x00', r2}, 0x10) [ 2586.356897] binder: 22682:22683 BC_INCREFS_DONE u0000000000000000 node 1614 cookie mismatch 0000000000000003 != 0000000000000000 [ 2586.368906] binder: 22682:22683 got reply transaction with no transaction stack [ 2586.376443] binder: 22682:22683 transaction failed 29201/-71, size 0-0 line 2759 [ 2586.387872] 9pnet: Insufficient options for proto=fd 23:07:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324ee2d84ca977d2c8daefc2679386427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232475e1c490982636b78d1300befab1aa5d653b941584dbce55c45c0a88ad3e1fc84d0e9950f8568cf57864692c48184d7144ae2385b27997eb3613d0c39d167fcfc18021533b37abcf5790efa1a0507925d3a4b2abd5fdbc4ef0415071555f5c982cae4b86e61982dec9a9add69"], &(0x7f0000000080)) 23:07:04 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x10) 23:07:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}) [ 2586.400062] 9pnet_virtio: no channels available for device (null) [ 2586.411513] 9pnet: Insufficient options for proto=fd [ 2586.422306] 9pnet_virtio: no channels available for device (null) 23:07:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c93c52d818d7d3776bdf68f876e79c81b878ff0980c144fa6d0aca004b1919107dc8d58d0d77e6bc80f159d4a7223d793a1d99930226a14d84e532e4155893f734cd14e8e05dbdc84d14b0a6557c49f1eca4923385bfb6b6f3f2b78453bfb8aa6070000000000000059643d8849ccc45c58bc33999ec0570e94efd9f3523ed48dc2a0e09e4a48595698a29eaf7a593c2315f30148608efad7dd19a20e805f35e3f3b605e6860c5810eff81a5b11e755cb6a9519bd77307d12f0088d5feec638b58610b1462e531846ec699ff3d9144933de3fb3091cf5442f298b3fc5ae20fcda57db811cc041a0e80a12f89f70f6ac3ee521a3b22c623374268dba9ed22de4dbc637", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:07:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2b00}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2586.452843] binder: BINDER_SET_CONTEXT_MGR already set [ 2586.453165] binder: 22682:22689 BC_INCREFS_DONE u0000000000000000 no match [ 2586.465497] binder: 22682:22689 got reply transaction with no transaction stack [ 2586.473063] binder: 22682:22689 transaction failed 29201/-71, size 0-0 line 2759 23:07:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x2}, 0x14) 23:07:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x199], [0xc0010058, 0x4b564d02]}) [ 2586.524510] binder: 22682:22683 ioctl 40046207 0 returned -16 [ 2586.560948] 9pnet: Insufficient options for proto=fd 23:07:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9bad58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1398ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x9, 0x3) 23:07:04 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) 23:07:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) [ 2586.626512] binder: undelivered TRANSACTION_ERROR: 29201 [ 2586.637755] 9pnet: Insufficient options for proto=fd [ 2586.643598] binder: undelivered TRANSACTION_ERROR: 29201 23:07:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x28}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='b\x00 \x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c04"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2d27f74af18fbc245cb1a07b7d373be95cb7c592c15ddcb816b8a7f92c00"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000300)=""/215) 23:07:05 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 23:07:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) getgroups(0x6, &(0x7f0000000480)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0]) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x2c29, {0x22, 0x4, 0x5}, 0x20, r2, r3, 0x4, 0x40, 0xef, 0x52, 0xfffffffffffffffd, 0x3, 0x16e5355c, 0x0, 0x0, 0x9, 0x1, 0x2, 0x0, 0x1, 0x8}}, 0xa0) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80100, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000005c0)={0x0, 0x6}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000640)={0x7, 0xffffffff80000000, 0x4, 0x10001, 0x4, 0x200, 0x7, 0x1ff, r6}, 0x20) 23:07:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x11e], [0xc0010058, 0x4b564d02]}) [ 2586.808414] 9pnet_virtio: no channels available for device (null) [ 2586.832257] 9pnet: Insufficient options for proto=fd [ 2586.850911] binder: 22740:22743 BC_INCREFS_DONE u0000000000000000 node 1617 cookie mismatch 0000000000000003 != 0000000000000000 [ 2586.862833] binder: 22740:22743 got reply transaction with no transaction stack [ 2586.870985] binder: 22740:22743 transaction failed 29201/-71, size 0-0 line 2759 [ 2586.901133] 9pnet: Insufficient options for proto=fd 23:07:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1000000]}) [ 2586.972941] binder: BINDER_SET_CONTEXT_MGR already set 23:07:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffc0}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:05 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x35000000]}, 0x10) 23:07:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fdLrfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdnS=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2586.994276] binder: 22740:22761 BC_INCREFS_DONE u0000000000000000 no match [ 2587.001505] binder: 22740:22761 got reply transaction with no transaction stack [ 2587.009130] binder: 22740:22761 transaction failed 29201/-71, size 0-0 line 2759 23:07:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc2], [0xc0010058, 0x4b564d02]}) [ 2587.072157] binder: 22740:22743 ioctl 40046207 0 returned -16 23:07:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}) [ 2587.115335] 9pnet: Could not find request transport: fdLrfdno=0x0000000000000000 [ 2587.136749] binder: undelivered TRANSACTION_ERROR: 29201 [ 2587.144520] binder: undelivered TRANSACTION_ERROR: 29201 23:07:05 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 23:07:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x89ffffff}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) sendfile(r0, r0, 0x0, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffa) futex(&(0x7f00000000c0)=0x2, 0x1, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x2, 0x2) [ 2587.191191] 9pnet_virtio: no channels available for device (null) [ 2587.203102] 9pnet: Could not find request transport: fdLrfdno=0x0000000000000000 23:07:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mkdirat(r2, &(0x7f0000000040)='./control\x00', 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x40d) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xff0b], [0xc0010058, 0x4b564d02]}) 23:07:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0b]}) [ 2587.297440] binder: 22794:22795 BC_INCREFS_DONE u0000000000000000 node 1620 cookie mismatch 0000000000000003 != 0000000000000000 [ 2587.309281] binder: 22794:22795 got reply transaction with no transaction stack [ 2587.316817] binder: 22794:22795 transaction failed 29201/-71, size 0-0 line 2759 23:07:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000001, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:05 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) [ 2587.408474] 9pnet: Insufficient options for proto=fd 23:07:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x3c00000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2587.444956] 9pnet: Insufficient options for proto=fd [ 2587.460942] binder: BINDER_SET_CONTEXT_MGR already set [ 2587.482195] binder: 22794:22819 BC_INCREFS_DONE u0000000000000000 no match 23:07:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000140)='./control\x00', 0x8b9a45e344e9ec47) r2 = fcntl$dupfd(r0, 0x4, r0) ioctl$TIOCNXCL(r2, 0x540d) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'ip6_vti0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) [ 2587.489394] binder: 22794:22819 got reply transaction with no transaction stack [ 2587.496974] binder: 22794:22819 transaction failed 29201/-71, size 0-0 line 2759 23:07:05 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 23:07:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df7f0ff8300fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630c5c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:07:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) [ 2587.605609] binder: undelivered TRANSACTION_ERROR: 29201 [ 2587.614251] binder: 22794:22795 ioctl 40046207 0 returned -16 23:07:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x800000c000000000], [0xc0010058, 0x4b564d02]}) 23:07:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:06 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) [ 2587.649371] binder: undelivered TRANSACTION_ERROR: 29201 23:07:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762041") socket$inet6(0xa, 0x80003, 0x7) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x40) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2587.771647] binder: 22859:22860 BC_INCREFS_DONE u0000000000000000 node 1623 cookie mismatch 0000000000000003 != 0000000000000000 [ 2587.783704] binder: 22859:22860 got reply transaction with no transaction stack [ 2587.791403] binder: 22859:22860 transaction failed 29201/-71, size 0-0 line 2759 [ 2587.846521] binder: BINDER_SET_CONTEXT_MGR already set [ 2587.852526] binder: 22859:22866 BC_INCREFS_DONE u0000000000000000 no match [ 2587.859827] binder: 22859:22866 got reply transaction with no transaction stack [ 2587.867475] binder: 22859:22866 transaction failed 29201/-71, size 0-0 line 2759 [ 2587.871167] binder: 22859:22860 ioctl 40046207 0 returned -16 [ 2587.882932] binder: undelivered TRANSACTION_ERROR: 29201 [ 2587.888985] binder: undelivered TRANSACTION_ERROR: 29201 23:07:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8f761372000000000000") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x3}) 23:07:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b]}) 23:07:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000bc0)={'nat\x00'}, &(0x7f0000000140)=0x54) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffff, 0x9, 0x7fffffff, 0x2, 0x10000, 0x2, 0x6, 0x6, 0x83, 0x38, 0xd5, 0xa7, 0x688, 0x20, 0x1, 0x1, 0x6, 0x8}, [{0x3, 0x6, 0x30, 0x3, 0x3, 0xe4, 0x174, 0xcf}], "e254b2fd7142919a3ccf130da39ef305defb1fdc8ee4bc0027522ff897e2b0c066b8272351efb5b37fe5c8422a34e8bc6aec48ef1348adc92c44ee1d288d695234f10ec164c564d4298f7fc4391110228e3baa98f39b2d67deada94ecae7820a", [[], [], [], [], [], [], [], [], []]}, 0x9b8) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000b80)=""/52) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="76726100733d66642c7266646e5bb87d3b3a59132264d3072a4d69336f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:06 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) 23:07:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x99010000], [0xc0010058, 0x4b564d02]}) 23:07:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x7}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2588.485182] 9pnet_virtio: no channels available for device (null) [ 2588.500650] binder: 22886:22892 BC_INCREFS_DONE u0000000000000000 node 1626 cookie mismatch 0000000000000003 != 0000000000000000 [ 2588.512853] binder: 22886:22892 got reply transaction with no transaction stack [ 2588.520654] binder: 22886:22892 transaction failed 29201/-71, size 0-0 line 2759 23:07:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="3e3b14eb87097b36822331fa1631c2e43b47143894fdb5ee9eb0a4226588086150354a1c3c60e39d9ff400b51e6328ab6b689c"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x101000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000440)={0x0, r2, 0x1}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000001d40)=0xe8) getresuid(&(0x7f0000001d80), &(0x7f0000001dc0)=0x0, &(0x7f0000001e00)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@dev={0xfe, 0x80, [], 0x1f}, @in=@rand_addr=0x7fff, 0x4e24, 0x7, 0x4e21, 0x9, 0xa, 0x0, 0xa0, 0x0, r3, r4}, {0x2, 0x80, 0x0, 0x7fffffff, 0x1, 0xc0, 0xc490}, {0xfffffffffffffffb, 0x9, 0x7, 0x9}, 0x8, 0x6e6bbb, 0x2, 0x0, 0x3, 0x2}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d3, 0x2b}, 0xa, @in=@loopback=0x7f000001, 0x3500, 0x1, 0x0, 0x5, 0x2, 0xfffffffffffffe00, 0x3}}, 0xe8) syz_emit_ethernet(0x0, &(0x7f0000000480)=ANY=[], &(0x7f0000000180)={0x0, 0x1, [0x0, 0x40000000000, 0x54a, 0x794]}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={0x4, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x14, 0x2, 0x2, 0x7ff, 0x8, &(0x7f0000000040)='bridge_slave_1\x00', 0x264f, 0x9, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') 23:07:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x29}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:07 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) [ 2588.582603] binder: BINDER_SET_CONTEXT_MGR already set [ 2588.601883] binder: 22886:22899 BC_INCREFS_DONE u0000000000000000 no match [ 2588.609157] binder: 22886:22899 got reply transaction with no transaction stack [ 2588.616725] binder: 22886:22899 transaction failed 29201/-71, size 0-0 line 2759 23:07:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8701], [0xc0010058, 0x4b564d02]}) 23:07:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130101c000000000]}) [ 2588.672872] 9pnet: Insufficient options for proto=fd 23:07:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000040)=@req) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) [ 2588.741792] binder: 22886:22892 ioctl 40046207 0 returned -16 [ 2588.759917] 9pnet: Insufficient options for proto=fd [ 2588.778288] binder: undelivered TRANSACTION_ERROR: 29201 23:07:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2588.790636] 9pnet_virtio: no channels available for device (null) [ 2588.797884] binder: undelivered TRANSACTION_ERROR: 29201 23:07:07 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 23:07:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x0, 0x1, 0x400000}}, 0x14) 23:07:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x300}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2588.913564] binder: 22930:22931 BC_INCREFS_DONE u0000000000000000 node 1629 cookie mismatch 0000000000000003 != 0000000000000000 [ 2588.922646] 9pnet: Insufficient options for proto=fd [ 2588.925814] binder: 22930:22931 got reply transaction with no transaction stack [ 2588.938389] binder: 22930:22931 transaction failed 29201/-71, size 0-0 line 2759 [ 2588.955550] 9pnet: Insufficient options for proto=fd 23:07:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) setsockopt$inet6_buf(r2, 0x29, 0xcf, &(0x7f0000000200)="ae8a469bf3a3bb87c13a164c728d36098c453fa9e95a4d50419f24b9ccd4a369da389b43f31ab36624aac1f64d649895d6df86c244cf97739b31c6d4beb5c24dafe5dd3168f2628e6934584bb487d05d3e2eff16a5dafa268f0820afa08257072c7be5613317dab70d0998d2b7fc11db089f717aaaa8bc3cbbd3c6d5fead836ead234a87a10b5e8fe454cff6331edc4f04ee8ea6e6fea5e52cda7af44d2698d4ca02d1f3c31a23f172baf8bc45cc6f543473da6fb5a488e1b4228850d897166ca80d63aebb1514", 0xc7) socket$inet6(0xa, 0x3, 0x3) 23:07:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2302, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x1, 0x400, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c192280500c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ffe8e97c5373b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a0f63b05cb49b58d551c449af73e807ea7438480773d7cc80546a86b4e16b03d11a1d"], &(0x7f0000000080)) 23:07:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}) 23:07:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xcd00], [0xc0010058, 0x4b564d02]}) [ 2588.985791] binder: BINDER_SET_CONTEXT_MGR already set 23:07:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) [ 2589.036941] binder: 22930:22942 BC_INCREFS_DONE u0000000000000000 no match [ 2589.044270] binder: 22930:22942 got reply transaction with no transaction stack [ 2589.051825] binder: 22930:22942 transaction failed 29201/-71, size 0-0 line 2759 [ 2589.058377] binder: 22930:22931 ioctl 40046207 0 returned -16 23:07:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x7) ioctl(r0, 0x890f, &(0x7f00000000c0)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x112]}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000100)="eb8b300864a9856ee79aa1d7702d6f47683a58af50fca887e06d4fe814e1544cd381c304049800d792c78effe72308b8704e9ff9a97c63dd806d4b51171f91054d18fb397a02a3babc721d270f0a65896608474c03964d9ae3bfb31c9dd29ecfd1f09083ee7a281948bfbd3327958782ec5ea7c22944ee8f14048dbc9af930399c0676c55fcf02545a7751d6db1a16d068a1b9d8cf06a9f5842417177a4d33fa01ec1891f423eede1da8f38f1ba8badd97250916974c76c8c3bd8bb796453854d9ba3e9a97a76f21331f4842a3d45c") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x8, 0x200, 0x9, 0x4, 0x7}) 23:07:07 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) 23:07:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2900}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010141]}) [ 2589.194231] binder: undelivered TRANSACTION_ERROR: 29201 [ 2589.200945] binder: undelivered TRANSACTION_ERROR: 29201 23:07:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x34], [0xc0010058, 0x4b564d02]}) 23:07:07 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 23:07:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2c00000000000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004000000000000]}) [ 2589.378656] binder: 22990:22993 BC_INCREFS_DONE u0000000000000000 node 1632 cookie mismatch 0000000000000003 != 0000000000000000 [ 2589.390515] binder: 22990:22993 got reply transaction with no transaction stack [ 2589.398069] binder: 22990:22993 transaction failed 29201/-71, size 0-0 line 2759 23:07:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000802, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="f704bf0afffe18f377c2fbfc5ef152249a9eee92ff8644d820ba1292db9e690a661642923d75058364fabb5a310eb7483c769a9d8a70b1990f9150700fca1b55b4a24138cec3a2c9b0adbf09a89fc6c2c2049affd99f169fe69ed6ddb5a1950ef77044fa6af3491bfb714c6166e185e22720ae12a4a0d791e39dd5299324b074982790c445ea04a6fb28dc4719f9499c7ba99e23e3f4346e2eb45c9d050c2c", 0x9f}, {&(0x7f0000000440)="c988e30ec4a81273991526f9b59712aa66cf322737ba086ad61aaac8dfbfa2c42fa48b27820d3885bf1a7941c2d71b4aea6039c9e21e8131c17ec34d4c2d5a6e237d249fdc6ca6929c352cb934bae6fe1b40eb996a326c5b8cd8c5d6e3a645d49398d8eea194c0fbae922317387cbe6e3bc47a6938c9ead624918c4a79e93150b04fda7fb1450d3978ac0eea032e24e57403cc7d39184bee21eca5f1d69e100504468629bb7815439400370bb0a18b8324eaaa732772f2c558359f76f788daa417516e819da41b37e77669a444a17c32ff28b5490aecf2985e4fcccfb1329d02b826fb2aa0d952938657919bb14cc07e", 0xf0}, {&(0x7f0000000540)="f7cc8c36073d48c2bf06cc15e66f1a787014737822e857cea55dc23f53bd774b7541b587d25761282a2a8771320bdba06c399efd19d76d2b75211ab69abdda000d2ce15bdd3f2fb49f9d58d952697de56226e27312a51f9f9b6c40db490329011449a8f304f20965f8e944ec502b37701aa6d804c913caad0ce41e2549193096a89d1ebfb5ce3145b9e37a87b7754c6f6eb03287ab387c13015637620cb678cd87acaa9d9f216773edf89af32f842572", 0xb0}, {&(0x7f0000000000)="0da55116844d3856edf83bc60547741129866111", 0x14}, {&(0x7f0000000600)="cbd3dd509890432ee9a88b1ae9b4c1549390c91c227993a950f5c676c5d54a7a51080e4f08927492662a4e8e50ed54b881db87f96f139c56b06bdb3ae9e4e3f7675cb7060062c0377fba6f55e6b4fc516b5ecc8fd7eb0a1952102b135fc0bf358347f2d137c30272b6688bd18244a4c38f0bb06a9953b9ed450d102fe0b7ad96be99d18f4ec24d9e45f7308757051b77ce98e6f455fb08a1c8565a50a2c601bca5a79868cb128c0c0fd9f2bb669d082f5fae815797b7fb69985160e16ea02d7476eba3c1ea79bebcbd2baa574474e9aa867cba95d2a2d686", 0xd8}], 0x5) [ 2589.454245] binder: BINDER_SET_CONTEXT_MGR already set [ 2589.459861] binder: 22990:23005 BC_INCREFS_DONE u0000000000000000 no match [ 2589.467106] binder: 22990:23005 got reply transaction with no transaction stack [ 2589.474618] binder: 22990:23005 transaction failed 29201/-71, size 0-0 line 2759 [ 2589.506701] binder: 22990:22993 ioctl 40046207 0 returned -16 [ 2589.583651] binder: undelivered TRANSACTION_ERROR: 29201 [ 2589.590585] binder: undelivered TRANSACTION_ERROR: 29201 23:07:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x70001c000000000], [0xc0010058, 0x4b564d02]}) 23:07:08 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) 23:07:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$KIOCSOUND(r2, 0x4b2f, 0x40) 23:07:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1000020}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000733d03000000000000006b8c015a7663646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x221001c0]}) 23:07:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000000)=0x9, 0x4) 23:07:08 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 23:07:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x9801000000000000], [0xc0010058, 0x4b564d02]}) 23:07:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x4000000000000000, @local={0xfe, 0x80, [], 0xaa}, 0xce}, @in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x200}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}], 0x68) ioctl(r0, 0x20008912, &(0x7f0000000440)="8863e7a734ee3c789bf0b5464a4736281adac8e96f0437ecb7bbc1557d6ae1937092413e4d6c5179b517e5e763c2664e3e326fe6910e4c73456bd12d38c49fc8da7d9aadcd646f7478b53bcf7c39fa95a71a67e7ec25435e014ec560c412c7c6325ae61fb362735868a33609000100cba29691a13e7ec579cce99f8f879674298947de550cfe508738ac1bc3e159d70b51ada129cc95fb3148e615571d423960b17c710e04ac28bcdfb7e462108ccb8bfb2e4241464cfe66087b55d45bb8b3545dd56a8a07120b44c36ecaaa1dae6e2148") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, [0x0, 0xfffffffffffffff9, 0x3fa]}) [ 2590.196904] binder: 23046:23058 BC_INCREFS_DONE u0000000000000000 node 1635 cookie mismatch 0000000000000003 != 0000000000000000 [ 2590.208810] binder: 23046:23058 got reply transaction with no transaction stack [ 2590.211532] 9pnet_virtio: no channels available for device (null) [ 2590.217599] binder: 23046:23058 transaction failed 29201/-71, size 0-0 line 2759 23:07:08 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) [ 2590.279341] binder: BINDER_SET_CONTEXT_MGR already set 23:07:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2f00}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130101c0]}) 23:07:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x9901], [0xc0010058, 0x4b564d02]}) [ 2590.299841] binder: 23046:23066 BC_INCREFS_DONE u0000000000000000 no match [ 2590.307113] binder: 23046:23066 got reply transaction with no transaction stack [ 2590.313559] binder: 23046:23058 ioctl 40046207 0 returned -16 [ 2590.314638] binder: 23046:23066 transaction failed 29201/-71, size 0-0 line 2759 [ 2590.328694] 9pnet_virtio: no channels available for device (null) 23:07:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x10, 0x4, 0x5}}, 0x14) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616ec0733d66642c7266646e6f3d70f2b8a741201b77dc10151918b6a354557b5be45417b573f62260b5b19af032a193b8b6aa34a63a85134e14797e7fe217351a014b9f41b244964102c7283d280dd5f20ca7f9d4da6d0557989eb6e1580448e0f26f79ed015e1ad730ea12b1afb7b1420a6e036883d515ac56ecad90447a974c195b6e125c6947d6c6edd1fb88a9356d2148ed238d7f94071e4d4d226ccc812dcc39640a2a0d5d5f05df4efa49cdce719fc6f5dcf0adb3674065e432ff22b314b8ee0a4724", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RRENAMEAT(r3, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000001c0)={0x800000000000000, 0x36}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025c4a0000340600000070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x408000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) [ 2590.415221] binder: undelivered TRANSACTION_ERROR: 29201 [ 2590.468574] 9pnet_virtio: no channels available for device (null) [ 2590.522909] 9pnet_virtio: no channels available for device (null) [ 2590.534686] binder: undelivered TRANSACTION_ERROR: 29201 23:07:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='.wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:09 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x10) 23:07:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x6}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x2000000], [0xc0010058, 0x4b564d02]}) 23:07:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1484) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x4, 0x2}) 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000083]}) 23:07:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x3}, 0x14) [ 2591.199221] binder: 23109:23110 BC_INCREFS_DONE u0000000000000000 node 1638 cookie mismatch 0000000000000003 != 0000000000000000 [ 2591.211445] binder: 23109:23110 got reply transaction with no transaction stack [ 2591.219080] binder: 23109:23110 transaction failed 29201/-71, size 0-0 line 2759 [ 2591.229721] 9pnet: Insufficient options for proto=fd 23:07:09 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) 23:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x4, 0x8001, 0x4}], {0x8100, 0x2, 0x4, 0x4}}], {@canfd={0xd, {{0x2, 0x4, 0x8335, 0x800}, 0x3d, 0x1, 0x0, 0x0, "9a2c3c4353d65cb99620f25e73f5e624b73e27997573210ae0d87c3d579cde71d5bf5702c49c271d987c58bd0a80d178825c17289640a5a4f822f92f3c7311cf"}}}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x111302, 0x40) accept$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) [ 2591.255242] binder: BINDER_SET_CONTEXT_MGR already set [ 2591.269891] binder: 23109:23110 ioctl 40046207 0 returned -16 23:07:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2000000}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100c0]}) [ 2591.348089] binder: 23109:23127 BC_INCREFS_DONE u0000000000000000 no match [ 2591.355265] binder: 23109:23127 got reply transaction with no transaction stack [ 2591.362806] binder: 23109:23127 transaction failed 29201/-71, size 0-0 line 2759 23:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x501040, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, &(0x7f0000000000)=0xfffffffffffffe4a) prctl$intptr(0x18, 0x3) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x5, 0x5, 0x7f0b, 0x80000000, 0x0, 0x3, 0x40004, 0x6, 0xd48, 0x100000001, 0x6df5, 0x6, 0x8001, 0xa03, 0x100000000, 0x6a5d, 0x4, 0x3f, 0x0, 0x0, 0x7, 0x6, 0xb861, 0x8000, 0x45a9, 0x100000000, 0x81, 0x1f, 0x1, 0x0, 0x4, 0xfffffffffffffff8, 0x3, 0x101, 0xffffffffffffffff, 0x7, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0xff}, 0x100, 0x652, 0x4, 0x2, 0x9, 0x9, 0x7}, r3, 0xd, r1, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x8, 0x3}, &(0x7f0000000180)=0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x4000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000240)={0x10000, 0xab23}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)={0x4, 0x4}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r4, 0x8}, 0x8) fcntl$setlease(r5, 0x400, 0x0) 23:07:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8601], [0xc0010058, 0x4b564d02]}) 23:07:09 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7f322000]}, 0x10) [ 2591.412596] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.485366] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.494320] 9pnet: Insufficient options for proto=fd 23:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000440)="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") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:09 executing program 7: r0 = open(&(0x7f00000001c0)='./control\x00', 0x20140, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0xffffffff, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x5d2}], 0x68) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) getitimer(0x0, &(0x7f0000000500)) r3 = fcntl$dupfd(r1, 0x4, r1) execve(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=[&(0x7f0000000080)='{mime_typekeyring\x00'], &(0x7f0000000380)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='wfdno', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='posix_acl_access@+@!proc[wlan1][\x00', &(0x7f0000000300)='trans=fd,', &(0x7f0000000340)='9p\x00']) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000003c0)={0x3, 0x4, 0x7f, 0xfffffffffffffff9, 0x4, 0x5a9, 0x81, 0x5, 0x351e, 0x2, 0x3982, 0x8001}) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472617e733d66642c7253646e6f3d83eb005ed4eda38bede8a2c99cec8fe0480305534000f04a8012b030f546e3", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x2c}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:09 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3500]}, 0x10) 23:07:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400101c0]}) 23:07:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x9104], [0xc0010058, 0x4b564d02]}) 23:07:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x600}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2591.663227] binder: 23168:23172 BC_INCREFS_DONE u0000000000000000 node 1641 cookie mismatch 0000000000000003 != 0000000000000000 [ 2591.675219] binder: 23168:23172 got reply transaction with no transaction stack [ 2591.682769] binder: 23168:23172 transaction failed 29201/-71, size 0-0 line 2759 [ 2591.693433] 9pnet_virtio: no channels available for device (null) [ 2591.893742] binder: BINDER_SET_CONTEXT_MGR already set [ 2591.905539] 9pnet_virtio: no channels available for device (null) [ 2591.921843] binder: 23168:23196 BC_INCREFS_DONE u0000000000000000 no match [ 2591.929117] binder: 23168:23196 got reply transaction with no transaction stack [ 2591.931237] binder: 23168:23172 ioctl 40046207 0 returned -16 [ 2591.936729] binder: 23168:23196 transaction failed 29201/-71, size 0-0 line 2759 [ 2591.970701] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.996848] binder: undelivered TRANSACTION_ERROR: 29201 23:07:10 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x3) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) lseek(r1, 0x0, 0x4) 23:07:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010200], [0xc0010058, 0x4b564d02]}) 23:07:10 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) 23:07:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x829, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d564b]}) 23:07:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @rand_addr=0xff}, @in6={0xa, 0x4e20, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x6, @empty, 0x9}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x68) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)=0x9f3) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c606cbf2fd18b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x10}}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000280)={0x9, {{0xa, 0x4e23, 0x3, @ipv4={[], [0xff, 0xff], @rand_addr=0x9374}, 0x6}}, {{0xa, 0x4e22, 0x400, @loopback={0x0, 0x1}, 0xabf}}}, 0x108) 23:07:10 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x35]}, 0x10) 23:07:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x5) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x4200) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000100)='{\\,bdev\x00') pwritev(r0, &(0x7f0000000140), 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x1001, 0x2400) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) [ 2592.173962] 9pnet: Insufficient options for proto=fd [ 2592.174116] binder: 23206:23212 BC_INCREFS_DONE u0000000000000000 node 1644 cookie mismatch 0000000000000003 != 0000000000000000 [ 2592.191212] binder: 23206:23212 got reply transaction with no transaction stack [ 2592.198850] binder: 23206:23212 transaction failed 29201/-71, size 0-0 line 2759 [ 2592.201514] 9pnet: Insufficient options for proto=fd [ 2592.236319] binder: BINDER_SET_CONTEXT_MGR already set [ 2592.242640] binder: 23206:23212 ioctl 40046207 0 returned -16 23:07:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x808, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) 23:07:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xd90], [0xc0010058, 0x4b564d02]}) [ 2592.335483] binder: 23206:23225 BC_INCREFS_DONE u0000000000000000 no match [ 2592.342684] binder: 23206:23225 got reply transaction with no transaction stack [ 2592.350379] binder: 23206:23225 transaction failed 29201/-71, size 0-0 line 2759 23:07:10 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 23:07:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) [ 2592.391534] 9pnet: Insufficient options for proto=fd 23:07:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2592.446549] 9pnet: Insufficient options for proto=fd [ 2592.451694] binder: undelivered TRANSACTION_ERROR: 29201 [ 2592.458678] binder: undelivered TRANSACTION_ERROR: 29201 23:07:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000040)={0xfffffd7d, 0x69}, 0xa) 23:07:10 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x2, [0x611, 0x991]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x50) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0xa20, 0x70bd2d, 0x25dfdbfc, {0x0, r1, {0xffff, 0xf}, {0xe, 0x8}, {0xa, 0xffff}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x2) 23:07:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:10 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 23:07:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7b01000000000000], [0xc0010058, 0x4b564d02]}) 23:07:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc200]}) [ 2592.611875] binder: 23279:23280 BC_INCREFS_DONE u0000000000000000 node 1647 cookie mismatch 0000000000000003 != 0000000000000000 [ 2592.623938] binder: 23279:23280 got reply transaction with no transaction stack [ 2592.631499] binder: 23279:23280 transaction failed 29201/-71, size 0-0 line 2759 23:07:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x149000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x100020}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x800, 0x10, "acd9cbd34db39914ed1cec4fb2f556fd"}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0xf}}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2592.707558] binder: BINDER_SET_CONTEXT_MGR already set [ 2592.707648] binder: 23279:23289 BC_INCREFS_DONE u0000000000000000 no match [ 2592.720246] binder: 23279:23289 got reply transaction with no transaction stack [ 2592.727778] binder: 23279:23289 transaction failed 29201/-71, size 0-0 line 2759 23:07:11 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x1, {0xa, 0x4e22, 0x9e, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, r1}}, 0x38) r2 = socket(0x0, 0x4, 0x80000000) open_by_handle_at(r2, &(0x7f0000000100)={0xfd, 0x7, "08720a237f00edd3c1e1b1035b4868e3a9c96c5a8922bc720f2062427f600ce0b7172720b347834ca88082f2e71a1e28dc548f6401af48716b03ea5698d5ac57e9176c24581c474cada0dcc3caf350b11744022c02cab7e3a189ba1c1ca9729806e284fc43808eb20476445431831f859d11bfb5f0880d10af3c85c6f6b5eb8ebf79fd93b5d1448118c9cb0eab78e4cac8c0c1c74b82ab41e4d2854478e7f95d3cf208cd0ec9eaa32eedcb9a97183be9e57df6c48ee5cf74fdc5accd9d80d561bc05cd9672d5418170dad4a843672ee9c9ff3b8f93fd6aa26fbac334e6094d9d9e9e6c03ddf80e51b725ca262427ba7321f22e8a82"}, 0x10000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = dup(r3) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0xd0, &(0x7f0000000380)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x18}, 0x1f}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in6={0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}}]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000900)={r5, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) 23:07:11 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 2592.758443] binder: 23279:23280 ioctl 40046207 0 returned -16 23:07:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x600, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2592.810610] binder: undelivered TRANSACTION_ERROR: 29201 [ 2592.829391] binder: undelivered TRANSACTION_ERROR: 29201 23:07:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) statfs(&(0x7f0000000080)='./control\x00', &(0x7f0000000200)=""/4096) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="7472616e733d00002c7262641a80bcf44232cab9a4b22b2954", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xde010000], [0xc0010058, 0x4b564d02]}) 23:07:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1]}) 23:07:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:11 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) [ 2593.487715] binder: 23333:23337 BC_INCREFS_DONE u0000000000000000 node 1650 cookie mismatch 0000000000000003 != 0000000000000000 [ 2593.499575] binder: 23333:23337 got reply transaction with no transaction stack [ 2593.507111] binder: 23333:23337 transaction failed 29201/-71, size 0-0 line 2759 [ 2593.508953] 9pnet_virtio: no channels available for device (null) [ 2593.538143] binder: BINDER_SET_CONTEXT_MGR already set [ 2593.540563] binder: 23333:23344 BC_INCREFS_DONE u0000000000000000 no match [ 2593.550754] binder: 23333:23344 got reply transaction with no transaction stack [ 2593.558275] binder: 23333:23344 transaction failed 29201/-71, size 0-0 line 2759 [ 2593.567048] binder: 23333:23337 ioctl 40046207 0 returned -16 23:07:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000040)) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:11 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x400) readahead(r0, 0x7, 0x9) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0xb04, 0xd3, "fa3f0763cb6ec33faba7aeca922cb0794d5d5cbcdfabad2e0b8f4ff3a25be8572f061e3b4b46d10b867189336ace0b31ba5fbefb6c4bb743ee6dc57425b6259fb52a405e3c18d76a0fec01853feb75a96d2f785712e4e9e8638b48c1486e963f54ae904e3d9b350221d1c86a782f783e91b73bc29674592f9875518cde137668eb5104a5f9277ad273ae9da9e97c5b329e4b2d24838f10c8a0c372d961d51c20fdbe663ec03fd4f1446c976c35660ea50a35a6c0a8042209355e4400d617ad2c8f48e75f4949056933fc7ed42324cd97125579"}) r1 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000500)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000440)=""/154) ioctl(r1, 0x6, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x300, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:11 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3500000000000000]}, 0x10) 23:07:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x4001], [0xc0010058, 0x4b564d02]}) 23:07:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10a]}) [ 2593.668086] binder: undelivered TRANSACTION_ERROR: 29201 [ 2593.681166] binder: undelivered TRANSACTION_ERROR: 29201 23:07:12 executing program 0: r0 = socket$inet6(0xa, 0xa, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x4000) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df702008400fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e86427fc77a327d789591c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a"], &(0x7f0000000080)) 23:07:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:12 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7f32200000000000]}, 0x10) 23:07:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x8004], [0xc0010058, 0x4b564d02]}) 23:07:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820000c000000000]}) [ 2593.811072] binder: 23370:23371 BC_INCREFS_DONE u0000000000000000 node 1653 cookie mismatch 0000000000000003 != 0000000000000000 [ 2593.823187] binder: 23370:23371 got reply transaction with no transaction stack [ 2593.830718] binder: 23370:23371 transaction failed 29201/-71, size 0-0 line 2759 [ 2593.899563] binder: BINDER_SET_CONTEXT_MGR already set [ 2593.914978] 9pnet_virtio: no channels available for device (null) 23:07:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="bd45e49cd75c80c4eab96dcf774252cc14776f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x828, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:12 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 23:07:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) wait4(r2, 0x0, 0x20000001, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x72, &(0x7f0000000180), 0x8) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x101}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$VT_ACTIVATE(r3, 0x5606, 0x0) 23:07:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x2a], [0xc0010058, 0x4b564d02]}) [ 2593.966484] binder: 23370:23371 ioctl 40046207 0 returned -16 [ 2594.038206] binder: 23370:23385 BC_INCREFS_DONE u0000000000000000 no match [ 2594.045432] binder: 23370:23385 got reply transaction with no transaction stack [ 2594.053245] binder: 23370:23385 transaction failed 29201/-71, size 0-0 line 2759 [ 2594.068154] binder: undelivered TRANSACTION_ERROR: 29201 [ 2594.097201] 9pnet: Insufficient options for proto=fd [ 2594.098053] binder: undelivered TRANSACTION_ERROR: 29201 [ 2594.278072] 9pnet: Insufficient options for proto=fd 23:07:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) flistxattr(r0, &(0x7f0000000280)=""/236, 0xec) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101400, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x3, [0x7, 0x5, 0x1, 0xfffe000000000000, 0x20, 0x2, 0x0, 0x7fff]}, 0x5c) 23:07:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000]}) 23:07:13 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 23:07:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x82b, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xda0], [0xc0010058, 0x4b564d02]}) 23:07:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="3b9641b5c80754b997d705912aa1ca96", 0x10) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:13 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) 23:07:13 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2594.780480] binder: 23421:23423 BC_INCREFS_DONE u0000000000000000 node 1656 cookie mismatch 0000000000000003 != 0000000000000000 [ 2594.792554] binder: 23421:23423 got reply transaction with no transaction stack [ 2594.800339] binder: 23421:23423 transaction failed 29201/-71, size 0-0 line 2759 23:07:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8e0, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2594.861054] binder: BINDER_SET_CONTEXT_MGR already set [ 2594.871246] binder: 23421:23423 ioctl 40046207 0 returned -16 23:07:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1100000000000000], [0xc0010058, 0x4b564d02]}) 23:07:13 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) 23:07:13 executing program 0: r0 = socket$inet6(0xa, 0x80800800, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000000)='/bdev\x00', 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) [ 2594.942294] binder: 23421:23442 BC_INCREFS_DONE u0000000000000000 no match [ 2594.949559] binder: 23421:23442 got reply transaction with no transaction stack [ 2594.957105] binder: 23421:23442 transaction failed 29201/-71, size 0-0 line 2759 23:07:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 2594.993228] binder: undelivered TRANSACTION_ERROR: 29201 [ 2595.007288] binder: undelivered TRANSACTION_ERROR: 29201 23:07:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2595.114991] binder: 23472:23474 BC_INCREFS_DONE u0000000000000000 node 1659 cookie mismatch 0000000000000003 != 0000000000000000 [ 2595.126879] binder: 23472:23474 got reply transaction with no transaction stack [ 2595.134417] binder: 23472:23474 transaction failed 29201/-71, size 0-0 line 2759 [ 2595.202289] binder: BINDER_SET_CONTEXT_MGR already set [ 2595.209244] binder: 23472:23474 ioctl 40046207 0 returned -16 [ 2595.211227] binder: 23472:23479 BC_INCREFS_DONE u0000000000000000 no match [ 2595.222624] binder: 23472:23479 got reply transaction with no transaction stack [ 2595.230163] binder: 23472:23479 transaction failed 29201/-71, size 0-0 line 2759 [ 2595.238840] binder: undelivered TRANSACTION_ERROR: 29201 [ 2595.244530] binder: undelivered TRANSACTION_ERROR: 29201 23:07:14 executing program 3: fstat(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_fuse_mount(&(0x7f00000000c0)='./control\x00', 0x6000, r0, r1, 0x4, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000580)={'dummy0\x00', 0x1}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) inotify_init() socketpair$inet(0x2, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000700)='scalable\x00', 0x9) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x40, 0x0) write$9p(r5, &(0x7f0000000240)="8962a5dd3bacca0ae48aa3a27f8db61c879d598a58819123c4d81da7e3284243ffffe57092e4ec537e284b54d9115fdb59f3d9657c1980397abcb1d476aa83199940dc3475168e40942591d9c06b1471de5f2ce23fe408a6b7ac5babd87befb6df01d209eaf0cf43540ce61f930b7fbda1a6b5b5fef19e6d20101782c8d7e0652e5acc9df43ac3f59ba5c2a1334727d5f22f57f740da47efe307a4c5f1c94dd6040a1a7a16aa7d53408f83062dbd28da0a39541f3e7fcbc8523473f6f4838fbc8fc25f5343194b04e3904398827d6721e46c589e4712657583f8244de4448ab8", 0xe0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000940)={{0x8, 0x3, 0x2, 0xa8, '\x00', 0xfffffffffffffcd6}, 0x1, [0x7, 0x3, 0x3, 0x8, 0x8, 0x100000000, 0x8, 0x8, 0x9e, 0x3, 0x7, 0x9, 0x8001, 0x0, 0x3a7, 0x8b, 0x6, 0x643f, 0xf6d, 0x7c, 0xf28a, 0x1, 0x0, 0x2, 0x10001, 0x400, 0x8000, 0x1, 0x1000, 0x3f, 0xb279, 0x1, 0x0, 0x0, 0x3, 0x8000, 0x8000, 0x200, 0x7, 0xffff, 0x1, 0x3, 0x7fffffff, 0x0, 0xc75a, 0xfff, 0x100, 0x7, 0x6, 0x6, 0x8, 0x2, 0x100000001, 0x6, 0x4, 0x1, 0x1, 0x7f, 0x4, 0x6, 0xffff, 0x7, 0x1, 0x8, 0xbdb, 0x7f000000000, 0x9c83, 0xe1f6, 0x7, 0x7, 0x7, 0x7, 0xfffffffffffff001, 0x2, 0xfffffffffffffffb, 0x9, 0x0, 0x8, 0x8, 0x4, 0x1ff, 0x5, 0x4d, 0x3ff, 0x2, 0x101, 0x847, 0x100000001, 0xfffffffffffff800, 0x8, 0x40, 0x0, 0x1a7, 0x401, 0x3, 0xfffffffffffeffff, 0x400, 0x4, 0x0, 0x0, 0x7f, 0x6, 0x4, 0x80000000, 0x5, 0x0, 0x7fb, 0xd102, 0x2, 0x100000001, 0x100, 0x1, 0x101, 0x5, 0x40, 0x5, 0x7ff, 0x9, 0x0, 0x8, 0xfffffffffffffffd, 0xc1, 0x46, 0x8, 0x9, 0x9, 0x1, 0x5], {0x0, 0x989680}}) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r6 = fcntl$dupfd(r3, 0x4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$9p_fd(0x0, &(0x7f0000000900)='./control\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d01bdf16b0b33587c4a0120f8029e55ef38fb768bdd689fde3c0fabb9dfe78ab999a20aac5c9d54f74213657990616adee2c16b5d56846d44530aebf386b7fb9b97f3d0a68891a4bc5d72f0d75417adb7a45d9ff6b16c9b535ad1999eafff8577a7dfa28dd58ad9dba32f9af21f137bd1f123c453d9", @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESOCT=r7, @ANYRES32]) write$P9_RATTACH(r6, &(0x7f0000000000)={0x14, 0x69}, 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000640)={@pptp={0x18, 0x2, {0x2, @broadcast=0xffffffff}}, {&(0x7f00000005c0)=""/47, 0x2f}, &(0x7f0000000600), 0x10}, 0xa0) 23:07:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:14 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) 23:07:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, [0xd5c]}) 23:07:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x91040000], [0xc0010058, 0x4b564d02]}) 23:07:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c0]}) 23:07:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x600000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000340)={0x2, 0x1e, 0x2, 0xa, 0x8, 0x8, 0x2, 0x72, 0x1}) inotify_init() r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r2, 0x4, r0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x0) getpeername$unix(r3, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getsa={0x3c, 0x12, 0x0, 0x70bd29, 0x25dfdbff, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d6, 0xa, 0xff}, [@coaddr={0x14, 0xe, @in=@multicast1=0xe0000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) [ 2595.901702] binder: 23498:23505 BC_INCREFS_DONE u0000000000000000 node 1662 cookie mismatch 0000000000000003 != 0000000000000000 [ 2595.913573] binder: 23498:23505 got reply transaction with no transaction stack [ 2595.921142] binder: 23498:23505 transaction failed 29201/-71, size 0-0 line 2759 23:07:14 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) 23:07:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025c0900845f0000000070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x9936e3fa8ce988b2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfd, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x86}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) 23:07:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x4305, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2595.979928] binder: BINDER_SET_CONTEXT_MGR already set [ 2595.997412] 9pnet: Insufficient options for proto=fd [ 2596.007168] binder: 23498:23512 BC_INCREFS_DONE u0000000000000000 no match [ 2596.014371] binder: 23498:23512 got reply transaction with no transaction stack [ 2596.021937] binder: 23498:23512 transaction failed 29201/-71, size 0-0 line 2759 23:07:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x20100c0], [0xc0010058, 0x4b564d02]}) 23:07:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) [ 2596.084552] 9pnet: Insufficient options for proto=fd 23:07:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)) [ 2596.150235] binder: undelivered TRANSACTION_ERROR: 29201 [ 2596.156343] binder: 23498:23505 ioctl 40046207 0 returned -16 23:07:14 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) 23:07:14 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000001580)='/dev/adsp#\x00', 0x1ff, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000015c0)={0x0, 0x46, "0e77bf8023c7f14b4bd13ff544eabda90d3b34b873265563a796a7dfe33c0944649f5933615df0f60b47de493b955564b522c7d02d54134cb83d3b1cbb001a6900297f15aaf2"}, &(0x7f0000001640)=0x4e) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001680)={r1, 0x401}, &(0x7f00000016c0)=0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x480, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x8}, 0x2001) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_extract_tcp_res$synack(&(0x7f0000001340), 0x1, 0x0) r4 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000001300)={0x7fff, 0x100000000}) modify_ldt$write(0x1, &(0x7f0000001500)={0x80, 0x100000, 0x0, 0xef, 0x47b5, 0x6, 0x1, 0x85e, 0x0, 0x7}, 0x10) r5 = fcntl$dupfd(r3, 0x4, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="7a59db714ba5490262d7fe2c7766746e6f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) write$P9_RATTACH(r5, &(0x7f0000000000)={0x14, 0x69}, 0x14) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000001380)={0x0, 0x6, 0x101, 0x8, 0x2, 0x9, 0xa0, 0x200, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x3}}, 0x9, 0x3f, 0x9, 0x3, 0x9}}, &(0x7f0000001440)=0xb0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000001740)={{0xa, 0x404e24, 0xff, @local={0xfe, 0x80, [], 0xaa}, 0x3}, {0xa, 0x4e23, 0x200, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, 0xef6, [0x401, 0x6, 0xfffffffffffffffd, 0x5, 0x4, 0xffff, 0x2ab2eb2f, 0x2]}, 0x37f) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x1f, 0x1, 0x5}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001480)={r6, 0x200, 0x20}, &(0x7f00000014c0)=0xc) write$cgroup_pid(r0, &(0x7f0000001700), 0x12) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f00000001c0)) 23:07:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2596.190901] binder: undelivered TRANSACTION_ERROR: 29201 23:07:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7601], [0xc0010058, 0x4b564d02]}) [ 2596.298813] 9pnet: Insufficient options for proto=fd 23:07:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc83d6d345f8f762070") syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)={0x0, 0x3, [0x0, 0xc30, 0xffffffffffffffff, 0x108]}) 23:07:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010058]}) 23:07:14 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 23:07:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x82f, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2596.379482] binder: 23557:23561 BC_INCREFS_DONE u0000000000000000 node 1665 cookie mismatch 0000000000000003 != 0000000000000000 [ 2596.391604] binder: 23557:23561 got reply transaction with no transaction stack [ 2596.399149] binder: 23557:23561 transaction failed 29201/-71, size 0-0 line 2759 [ 2596.431977] 9pnet: Insufficient options for proto=fd [ 2596.543094] binder: BINDER_SET_CONTEXT_MGR already set [ 2596.565539] binder: 23557:23582 BC_INCREFS_DONE u0000000000000000 no match [ 2596.572753] binder: 23557:23582 got reply transaction with no transaction stack [ 2596.580295] binder: 23557:23582 transaction failed 29201/-71, size 0-0 line 2759 [ 2596.591275] binder: 23557:23561 ioctl 40046207 0 returned -16 [ 2596.602653] binder: undelivered TRANSACTION_ERROR: 29201 [ 2596.610110] binder: undelivered TRANSACTION_ERROR: 29201 23:07:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0000100], [0xc0010058, 0x4b564d02]}) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x175]}) 23:07:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x83c, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x800200000004000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)) 23:07:15 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 23:07:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) mkdir(&(0x7f0000000040)='./control\x00', 0x80) [ 2597.016051] binder: 23593:23597 BC_INCREFS_DONE u0000000000000000 node 1668 cookie mismatch 0000000000000003 != 0000000000000000 [ 2597.027976] binder: 23593:23597 got reply transaction with no transaction stack [ 2597.035507] binder: 23593:23597 transaction failed 29201/-71, size 0-0 line 2759 23:07:15 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) [ 2597.079322] binder: BINDER_SET_CONTEXT_MGR already set [ 2597.098542] binder: 23593:23610 BC_INCREFS_DONE u0000000000000000 no match [ 2597.105763] binder: 23593:23610 got reply transaction with no transaction stack [ 2597.113291] binder: 23593:23610 transaction failed 29201/-71, size 0-0 line 2759 [ 2597.115148] binder: 23593:23597 ioctl 40046207 0 returned -16 [ 2597.153386] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.170584] binder: undelivered TRANSACTION_ERROR: 29201 23:07:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x807, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+30000000}, &(0x7f0000000140)) r3 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r4 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c}) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9801000000000000]}) 23:07:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x34d564b00000000], [0xc0010058, 0x4b564d02]}) 23:07:15 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x10) 23:07:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, r3, 0x9eca, 0x1000000) getresgid(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000140)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000001c0)={0x8000, 0x6, 0x3f78}) 23:07:16 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) [ 2597.645308] 9pnet_virtio: no channels available for device (null) [ 2597.656181] binder: 23631:23634 BC_INCREFS_DONE u0000000000000000 node 1671 cookie mismatch 0000000000000003 != 0000000000000000 [ 2597.668170] binder: 23631:23634 got reply transaction with no transaction stack [ 2597.675762] binder: 23631:23634 transaction failed 29201/-71, size 0-0 line 2759 23:07:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x4d564b00000000], [0xc0010058, 0x4b564d02]}) [ 2597.737105] binder: BINDER_SET_CONTEXT_MGR already set 23:07:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x500, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2597.785196] binder: 23631:23642 BC_INCREFS_DONE u0000000000000000 no match [ 2597.792416] binder: 23631:23642 got reply transaction with no transaction stack [ 2597.800236] binder: 23631:23642 transaction failed 29201/-71, size 0-0 line 2759 23:07:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201c000000000]}) [ 2597.847355] binder: 23631:23634 ioctl 40046207 0 returned -16 [ 2597.892142] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.901989] binder: undelivered TRANSACTION_ERROR: 29201 23:07:16 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20327f]}, 0x10) 23:07:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2598.059783] binder: 23674:23675 BC_INCREFS_DONE u0000000000000000 node 1674 cookie mismatch 0000000000000003 != 0000000000000000 [ 2598.071694] binder: 23674:23675 got reply transaction with no transaction stack [ 2598.079257] binder: 23674:23675 transaction failed 29201/-71, size 0-0 line 2759 [ 2598.108009] binder: BINDER_SET_CONTEXT_MGR already set 23:07:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c8d434e285e00"]) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xd901], [0xc0010058, 0x4b564d02]}) 23:07:16 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 2598.146601] binder: 23674:23676 BC_INCREFS_DONE u0000000000000000 no match [ 2598.153795] binder: 23674:23676 got reply transaction with no transaction stack [ 2598.161348] binder: 23674:23676 transaction failed 29201/-71, size 0-0 line 2759 [ 2598.185394] binder: 23674:23675 ioctl 40046207 0 returned -16 [ 2598.202202] binder: undelivered TRANSACTION_ERROR: 29201 [ 2598.210137] binder: undelivered TRANSACTION_ERROR: 29201 23:07:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x5) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000103]}) 23:07:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, r3, 0x9eca, 0x1000000) getresgid(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000140)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000001c0)={0x8000, 0x6, 0x3f78}) 23:07:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x814, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:17 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 23:07:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x130101c0], [0xc0010058, 0x4b564d02]}) 23:07:17 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3500]}, 0x10) [ 2598.713579] binder: 23703:23704 BC_INCREFS_DONE u0000000000000000 node 1677 cookie mismatch 0000000000000003 != 0000000000000000 [ 2598.725428] binder: 23703:23704 got reply transaction with no transaction stack [ 2598.733092] binder: 23703:23704 transaction failed 29201/-71, size 0-0 line 2759 [ 2598.760331] 9pnet_virtio: no channels available for device (null) 23:07:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x82c, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x176]}) 23:07:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xe0060000], [0xc0010058, 0x4b564d02]}) 23:07:17 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) [ 2598.856789] binder: BINDER_SET_CONTEXT_MGR already set [ 2598.871195] binder: 23703:23722 BC_INCREFS_DONE u0000000000000000 no match [ 2598.878468] binder: 23703:23722 got reply transaction with no transaction stack [ 2598.886051] binder: 23703:23722 transaction failed 29201/-71, size 0-0 line 2759 23:07:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2598.989601] binder: undelivered TRANSACTION_ERROR: 29201 [ 2599.010203] binder: 23703:23704 ioctl 40046207 0 returned -16 [ 2599.024919] binder: undelivered TRANSACTION_ERROR: 29201 23:07:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000140)='./control\x00', 0x990a7dfbe1592c68) r2 = fcntl$dupfd(r0, 0x6, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) socket$inet(0x2, 0x8000000000000003, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x2, 0x80, 0xff, 0x9]}) write$P9_RATTACH(r0, &(0x7f0000000080)={0xfffffffffffffe2a, 0x69, 0x0, {0x0, 0x0, 0x3}}, 0x14) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000200)=""/150, &(0x7f0000000040)=0x96) 23:07:17 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f32200000000000]}, 0x10) 23:07:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d564b00000000]}) [ 2599.275389] 9pnet: Insufficient options for proto=fd [ 2599.295872] 9pnet: Insufficient options for proto=fd 23:07:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 23:07:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x700, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7501], [0xc0010058, 0x4b564d02]}) 23:07:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, r3, 0x9eca, 0x1000000) getresgid(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000140)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000001c0)={0x8000, 0x6, 0x3f78}) 23:07:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f04000000000000]}) 23:07:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2599.762742] binder: 23773:23779 BC_INCREFS_DONE u0000000000000000 node 1680 cookie mismatch 0000000000000003 != 0000000000000000 [ 2599.765656] 9pnet_virtio: no channels available for device (null) [ 2599.774799] binder: 23773:23779 got reply transaction with no transaction stack [ 2599.788778] binder: 23773:23779 transaction failed 29201/-71, size 0-0 line 2759 [ 2599.802948] binder: BINDER_SET_CONTEXT_MGR already set 23:07:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) [ 2599.809983] binder: 23773:23784 BC_INCREFS_DONE u0000000000000000 no match [ 2599.817217] binder: 23773:23784 got reply transaction with no transaction stack [ 2599.824936] binder: 23773:23784 transaction failed 29201/-71, size 0-0 line 2759 [ 2599.836663] binder: 23773:23779 ioctl 40046207 0 returned -16 [ 2599.845407] binder: undelivered TRANSACTION_ERROR: 29201 [ 2599.852434] binder: undelivered TRANSACTION_ERROR: 29201 23:07:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010117], [0xc0010058, 0x4b564d02]}) [ 2599.940593] binder: 23793:23794 BC_INCREFS_DONE u0000000000000000 node 1683 cookie mismatch 0000000000000003 != 0000000000000000 [ 2599.952515] binder: 23793:23794 got reply transaction with no transaction stack [ 2599.960069] binder: 23793:23794 transaction failed 29201/-71, size 0-0 line 2759 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410101c000000000]}) 23:07:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 23:07:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x802, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2600.075930] binder: BINDER_SET_CONTEXT_MGR already set [ 2600.109535] binder: 23793:23808 BC_INCREFS_DONE u0000000000000000 no match [ 2600.116742] binder: 23793:23808 got reply transaction with no transaction stack [ 2600.124290] binder: 23793:23808 transaction failed 29201/-71, size 0-0 line 2759 [ 2600.127067] binder: 23793:23794 ioctl 40046207 0 returned -16 23:07:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0010007], [0xc0010058, 0x4b564d02]}) [ 2600.218756] binder: undelivered TRANSACTION_ERROR: 29201 [ 2600.225878] binder: undelivered TRANSACTION_ERROR: 29201 23:07:19 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x210040, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000400)={0x101fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r1, 0x4, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) clone(0x100, &(0x7f0000000200)="337f75d5d3de41d0e58571d4a5dbcc3f7cc53bc0424af0920d964be54657205a96e8884174810cce7ad792af69bf943e8d1d96056316a4f9d3f1924a70daddc3961f389c4b8c109ac76009293bd5af1e1af361b1bc5d3841f9c4e52ee7b330b81748d5177730bf8eab7faba5dbda062b63e40d1a39a8268c5ddcfc021763851ecbc047e10cef9b9ff439b29102faaa850f835d8c48b00e41db5e2ea28d76e077b2acc0546c9c27a1503498fff17f9b5a7a0ed23070c6a5c7b73bb989fbdcceeb5f66e507bea94f5d59deb2ab873ba304ba968b57d9d7ca7cdd9e8552e71e31f7b0c9001e2a394600280a724dad730b8155ac4588852ac1", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000300)="9c4935ca7fcda48c3ce14f36388e5af34ff08157f43ea09fca2654b810e8853584dea53503cbc24ac4a485fcd89f5548305e1c129a6a6c12d423a4fd749b75cfa357a85a5c8fb7f7dfe593f6a56909c42f67ead41e9aa9f27d4e78e75081cef8f339da1b3cb1b9806e7c1e6f981cf280ee662b2d9c418c80547b1857f720c892525a7c2fa0729360c959ccc78f2a4849af58a72ac843c2146b72492e74ef51eea78dbc1c6dff140fcc7923315724f41da0e8fe1b4d78f6cf67616681e548424c8820be8542795097131ae51d") 23:07:19 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) 23:07:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, r3, 0x9eca, 0x1000000) getresgid(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000140)) 23:07:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b01000000000000]}) 23:07:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x803, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1c000000000], [0xc0010058, 0x4b564d02]}) 23:07:19 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0x531901) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r1, 0x4, r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2600.857672] binder: 23836:23838 BC_INCREFS_DONE u0000000000000000 node 1686 cookie mismatch 0000000000000003 != 0000000000000000 [ 2600.869619] binder: 23836:23838 got reply transaction with no transaction stack [ 2600.877198] binder: 23836:23838 transaction failed 29201/-71, size 0-0 line 2759 [ 2600.896442] 9pnet_virtio: no channels available for device (null) 23:07:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2600.945337] binder: BINDER_SET_CONTEXT_MGR already set [ 2600.945379] binder: 23836:23855 BC_INCREFS_DONE u0000000000000000 no match [ 2600.958075] binder: 23836:23855 got reply transaction with no transaction stack [ 2600.965687] binder: 23836:23855 transaction failed 29201/-71, size 0-0 line 2759 23:07:19 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) [ 2600.992464] binder: 23836:23838 ioctl 40046207 0 returned -16 23:07:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1f0001c0], [0xc0010058, 0x4b564d02]}) 23:07:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 23:07:19 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 23:07:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2601.094818] binder: undelivered TRANSACTION_ERROR: 29201 [ 2601.103933] binder: undelivered TRANSACTION_ERROR: 29201 23:07:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:19 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) [ 2601.241426] binder: 23883:23884 BC_INCREFS_DONE u0000000000000000 node 1689 cookie mismatch 0000000000000003 != 0000000000000000 [ 2601.253329] binder: 23883:23884 got reply transaction with no transaction stack [ 2601.260887] binder: 23883:23884 transaction failed 29201/-71, size 0-0 line 2759 [ 2601.312959] binder: BINDER_SET_CONTEXT_MGR already set [ 2601.334303] binder: 23883:23890 BC_INCREFS_DONE u0000000000000000 no match [ 2601.341568] binder: 23883:23890 got reply transaction with no transaction stack [ 2601.349146] binder: 23883:23890 transaction failed 29201/-71, size 0-0 line 2759 [ 2601.352108] binder: 23883:23884 ioctl 40046207 0 returned -16 [ 2601.391011] binder: undelivered TRANSACTION_ERROR: 29201 [ 2601.396928] binder: undelivered TRANSACTION_ERROR: 29201 23:07:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="0023060058b270", @ANYRESHEX=r1, @ANYBLOB="70a8"]) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x8000000000200001, 0x3, 0x3, 0x1}, 0xc) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0x81, 0x6, 0x100, 0x20}, {0x0, 0x60, 0x9, 0x8}, {0x5, 0x100000000, 0x8, 0xffffffff}, {0x4, 0x3, 0x2, 0x800}, {0x7fff, 0x6, 0x1, 0x3}, {0x6, 0x2, 0x8, 0x5}]}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, r3, 0x20, 0x70bd2a, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d4d}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x626e, 0x9}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x40, 0x6, 0x100000000}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000500)={r4, 0x5, 0x6, [0xa, 0x40, 0x1, 0xfff, 0x8000, 0x2]}, 0x14) 23:07:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, r3, 0x9eca, 0x1000000) 23:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0xc0000103], [0xc0010058, 0x4b564d02]}) 23:07:20 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35]}, 0x10) 23:07:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}) 23:07:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 2601.734914] 9pnet_virtio: no channels available for device (null) [ 2601.753085] binder: 23909:23910 BC_INCREFS_DONE u0000000000000000 node 1692 cookie mismatch 0000000000000003 != 0000000000000000 [ 2601.764999] binder: 23909:23910 got reply transaction with no transaction stack [ 2601.772598] binder: 23909:23910 transaction failed 29201/-71, size 0-0 line 2759 [ 2601.824104] 9pnet: Insufficient options for proto=fd 23:07:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x800204000002, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'team0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) 23:07:20 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) 23:07:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2601.901364] 9pnet: Insufficient options for proto=fd 23:07:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 23:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x48], [0xc0010058, 0x4b564d02]}) 23:07:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7f00646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@rand_addr, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./control\x00', &(0x7f0000000140)='9p\x00', 0x80000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@mmap='mmap', 0x2c}, {@cache_loose='cache=loose', 0x2c}, {@access_uid={'access', 0x3d, r3}, 0x2c}]}}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x81, 0xffffffffffffffff, 0x80000001, 0x0, 0x2, 0x1, 0x7fff, 0x7, 0x800, 0x800}, 0xb) [ 2601.983813] binder: BINDER_SET_CONTEXT_MGR already set 23:07:20 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 23:07:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x6, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2602.006811] binder: 23909:23934 BC_INCREFS_DONE u0000000000000000 no match [ 2602.014010] binder: 23909:23934 got reply transaction with no transaction stack [ 2602.021592] binder: 23909:23934 transaction failed 29201/-71, size 0-0 line 2759 [ 2602.057284] binder: 23909:23910 ioctl 40046207 0 returned -16 [ 2602.087714] 9pnet: Insufficient options for proto=fd 23:07:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x8, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2602.124280] binder: undelivered TRANSACTION_ERROR: 29201 [ 2602.136864] binder: undelivered TRANSACTION_ERROR: 29201 [ 2602.163909] 9pnet: Insufficient options for proto=fd 23:07:20 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) [ 2602.229960] binder: 23957:23959 BC_INCREFS_DONE u0000000000000000 node 1695 cookie mismatch 0000000000000003 != 0000000000000000 [ 2602.241883] binder: 23957:23959 got reply transaction with no transaction stack [ 2602.249442] binder: 23957:23959 transaction failed 29201/-71, size 0-0 line 2759 23:07:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = getuid() syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, r2, 0x0, 0x9eca, 0x1000000) 23:07:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() r2 = dup3(r1, r0, 0x80000) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/4096) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x104, 0x32, 0x611, 0x70bd29, 0x25dfdbfc, {0x0, 0x3, 0x6}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x97}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x887d}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x1b, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x16, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x100000001}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x18, 0x12, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8701]}) 23:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x98010000], [0xc0010058, 0x4b564d02]}) [ 2602.285134] binder: BINDER_SET_CONTEXT_MGR already set [ 2602.290106] binder: 23957:23964 BC_INCREFS_DONE u0000000000000000 no match [ 2602.296233] binder: 23957:23959 ioctl 40046207 0 returned -16 [ 2602.297840] binder: 23957:23964 got reply transaction with no transaction stack [ 2602.311239] binder: 23957:23964 transaction failed 29201/-71, size 0-0 line 2759 23:07:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2602.368837] binder: undelivered TRANSACTION_ERROR: 29201 [ 2602.377111] binder: undelivered TRANSACTION_ERROR: 29201 [ 2602.410751] 9pnet_virtio: no channels available for device (null) 23:07:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x1b0001c000000000], [0xc0010058, 0x4b564d02]}) 23:07:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:21 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0201c000000000]}) 23:07:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x3, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000040)='./control\x00', 0x3) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x17}}, 0x9, 0xc7, 0x8, "a9432b7839d982dffaeedfa389a0ff09a212ca0d86d7c546aca38fd584bd1039021f6bcb400a6b3eace3f63950d7f840c76928767a5b6e8f11df518ff731197e59049389f79c9f51ccd9c13bd8a8e86f"}, 0xd8) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000e, 0x110, r2, 0x0) [ 2603.052301] binder: 24003:24005 BC_INCREFS_DONE u0000000000000000 node 1698 cookie mismatch 0000000000000003 != 0000000000000000 [ 2603.054369] 9pnet_virtio: no channels available for device (null) [ 2603.064311] binder: 24003:24005 got reply transaction with no transaction stack [ 2603.078180] binder: 24003:24005 transaction failed 29201/-71, size 0-0 line 2759 [ 2603.122283] binder: BINDER_SET_CONTEXT_MGR already set 23:07:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:21 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) [ 2603.161976] binder: 24003:24015 BC_INCREFS_DONE u0000000000000000 no match [ 2603.169214] binder: 24003:24015 got reply transaction with no transaction stack [ 2603.176755] binder: 24003:24015 transaction failed 29201/-71, size 0-0 line 2759 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34d564b00000000]}) 23:07:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x76010000], [0xc0010058, 0x4b564d02]}) 23:07:21 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) [ 2603.301742] binder: 24003:24005 ioctl 40046207 0 returned -16 [ 2603.327188] binder: undelivered TRANSACTION_ERROR: 29201 [ 2603.342204] binder: undelivered TRANSACTION_ERROR: 29201 23:07:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) r1 = inotify_init() mount$9p_virtio(&(0x7f0000000040)='9p\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000140)='9p\x00', 0x1009008, &(0x7f00000001c0)={'trans=virtio,', {[{@cache_mmap='cache=mmap', 0x2c}, {@access_user='access=user', 0x2c}, {@msize={'msize', 0x3d, 0x9e}, 0x2c}, {@posixacl='posixacl', 0x2c}, {@mmap='mmap', 0x2c}, {@posixacl='posixacl', 0x2c}, {@version_9p2000='version=9p2000', 0x2c}]}}) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x9, 0x82) write$P9_RLCREATE(r2, &(0x7f0000000280)={0x18, 0xf, 0x2, {{0x40, 0x0, 0x1}, 0x8}}, 0x18) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cff08965121d59e95a168e7fd10c9b738e16e6c98efebacff0600000027a4b4845cc785aa95826fae0c804a65260ae2da01036c22cccfc8159d036b77e53d0f0d8c122f91a0f7a5007d9d51ea684f3aafa2d7b8e367e9d2c39cdb67673142e6a8a31848e78bf07e3f7fc831f53f1ee67ba2a78e7fdce6c20cea0893e60eb257868e8ee755ca72db9f4dd9cafe57de1c664ba6964dda0db579fb426e73848b68d2d03d0746"]) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87010000]}) 23:07:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:21 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) 23:07:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x580001c0], [0xc0010058, 0x4b564d02]}) [ 2603.490903] binder: 24045:24046 BC_INCREFS_DONE u0000000000000000 node 1701 cookie mismatch 0000000000000003 != 0000000000000000 [ 2603.502801] binder: 24045:24046 got reply transaction with no transaction stack [ 2603.510480] binder: 24045:24046 transaction failed 29201/-71, size 0-0 line 2759 [ 2603.525378] 9pnet_virtio: no channels available for device (null) 23:07:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x600000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d04]}) [ 2603.614465] 9pnet: Insufficient options for proto=fd 23:07:22 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x10) [ 2603.654996] binder: BINDER_SET_CONTEXT_MGR already set [ 2603.676651] 9pnet: Insufficient options for proto=fd [ 2603.694232] binder: 24045:24067 BC_INCREFS_DONE u0000000000000000 no match [ 2603.701629] binder: 24045:24067 got reply transaction with no transaction stack [ 2603.709187] binder: 24045:24067 transaction failed 29201/-71, size 0-0 line 2759 [ 2603.712917] binder: 24045:24046 ioctl 40046207 0 returned -16 [ 2603.819844] binder: undelivered TRANSACTION_ERROR: 29201 [ 2603.829943] binder: undelivered TRANSACTION_ERROR: 29201 23:07:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) 23:07:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30100c000000000]}) 23:07:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x200000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7461616e733d66642c7266646e6f3d8eed12dacd8a9b8e27565f9598ca51a922aa93795c6e7ec51724dc6c4a9f4feb753a14587e9cc0e679e6594a74869097eaff814118ce7ca12024183f6c4063afa40e1858840e7785944cd994fefe23c899e93174cd077c4a99a7a6bb366104444dcae8dc7653c7fe107e7d1a7df96ae426b3448edb03fba0ec8b28c337ba0054ea8c3c9153a1544d3cdfcec2ac0705ad80ff10a97e0cc468ae0556216d5718ec3a28a69f4bc94cf88ddc927fd52899bd2d29b4021935107eaee163723be07b4323b2ae21c6ad", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3db73c1ea3397cb6a33a97a3e0e72ee28de9c4b5373a08f3c73ba9cb835d8a86d90f01ae1563e8e8c665ed87c72f11a46a687a3b54e01c3196f3c5c77fc412690a8c8e2fec09465f1b6df04164c68102ca1a8798bf716d73b1e7a0bc0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x3a000000], [0xc0010058, 0x4b564d02]}) 23:07:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\b\x00']) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x14) 23:07:22 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) [ 2604.129858] 9pnet_virtio: no channels available for device (null) [ 2604.132652] 9pnet: Insufficient options for proto=fd [ 2604.142799] binder: 24101:24103 BC_INCREFS_DONE u0000000000000000 node 1704 cookie mismatch 0000000000000003 != 0000000000000000 [ 2604.154742] binder: 24101:24103 got reply transaction with no transaction stack [ 2604.162985] binder: 24101:24103 transaction failed 29201/-71, size 0-0 line 2759 [ 2604.178964] 9pnet: Insufficient options for proto=fd 23:07:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x1000020, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:22 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 23:07:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) fcntl$dupfd(r0, 0x4, r0) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x7, 0x3, 0x3, 0x8, 'syz0\x00'}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x1f5) [ 2604.238565] binder: BINDER_SET_CONTEXT_MGR already set [ 2604.258151] binder: 24101:24117 BC_INCREFS_DONE u0000000000000000 no match [ 2604.265351] binder: 24101:24117 got reply transaction with no transaction stack [ 2604.273052] binder: 24101:24117 transaction failed 29201/-71, size 0-0 line 2759 23:07:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010040]}) 23:07:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7401000000000000], [0xc0010058, 0x4b564d02]}) [ 2604.353447] binder: 24101:24103 ioctl 40046207 0 returned -16 [ 2604.391062] binder: undelivered TRANSACTION_ERROR: 29201 23:07:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x2f, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:22 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) [ 2604.398363] binder: undelivered TRANSACTION_ERROR: 29201 23:07:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x10100c0], [0xc0010058, 0x4b564d02]}) 23:07:23 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x2c, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) 23:07:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a1001c0]}) 23:07:23 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x10) 23:07:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x4, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '*vmnet0bdev'}, 0x2c}, {@fscache='fscache', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@mmap='mmap', 0x2c}]}}) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69}, 0x20000014) [ 2605.315633] binder: 24168:24169 BC_INCREFS_DONE u0000000000000000 node 1707 cookie mismatch 0000000000000003 != 0000000000000000 [ 2605.327615] binder: 24168:24169 got reply transaction with no transaction stack [ 2605.335145] binder: 24168:24169 transaction failed 29201/-71, size 0-0 line 2759 23:07:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000240)=ANY=[], 0xfffffea2) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 23:07:23 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:23 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) [ 2605.377462] binder: BINDER_SET_CONTEXT_MGR already set [ 2605.377980] binder: 24168:24178 BC_INCREFS_DONE u0000000000000000 no match [ 2605.390440] binder: 24168:24178 got reply transaction with no transaction stack [ 2605.397972] binder: 24168:24178 transaction failed 29201/-71, size 0-0 line 2759 23:07:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 23:07:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x28, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2605.432108] binder: 24168:24169 ioctl 40046207 0 returned -16 23:07:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x2a000000], [0xc0010058, 0x4b564d02]}) 23:07:23 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) [ 2605.534389] binder: undelivered TRANSACTION_ERROR: 29201 23:07:23 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) 23:07:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x100000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2605.614779] binder: undelivered TRANSACTION_ERROR: 29201 23:07:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02]}) 23:07:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000480)}) 23:07:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x0, 0x7b01], [0xc0010058, 0x4b564d02]}) 23:07:24 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x838, 0x3d1) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x10) 23:07:24 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) syz_fuse_mount(&(0x7f0000000200)='./control\x00', 0x8000, 0x0, 0x0, 0x9eca, 0x1000000) 23:07:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@mpls_uc={0x8847}}}, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x2900000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000000140)) [ 2605.741855] binder: 24216:24217 BC_INCREFS_DONE u0000000000000000 node 1710 cookie mismatch 0000000000000003 != 0000000000000000 [ 2605.753804] binder: 24216:24217 got reply transaction with no transaction stack [ 2605.761355] binder: 24216:24217 transaction failed 29201/-71, size 0-0 line 2759 [ 2605.920644] binder: BINDER_SET_CONTEXT_MGR already set [ 2605.928903] binder: 24216:24217 ioctl 40046207 0 returned -16 [ 2605.947372] binder: 24216:24235 BC_INCREFS_DONE u0000000000000000 no match [ 2605.954571] binder: 24216:24235 got reply transaction with no transaction stack [ 2605.962114] binder: 24216:24235 transaction failed 29201/-71, size 0-0 line 2759 [ 2606.004361] binder: undelivered TRANSACTION_ERROR: 29201 [ 2606.010194] binder: undelivered TRANSACTION_ERROR: 29201 [ 2606.295486] ================================================================== [ 2606.303179] BUG: KASAN: use-after-free in p9_conn_cancel+0x9de/0xd30 [ 2606.309675] Read of size 4 at addr ffff8801b70f22e8 by task kworker/1:2/1038 [ 2606.316843] [ 2606.318467] CPU: 1 PID: 1038 Comm: kworker/1:2 Not tainted 4.18.0-rc3+ #137 [ 2606.325557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.334914] Workqueue: events p9_poll_workfn [ 2606.339317] Call Trace: [ 2606.341908] dump_stack+0x1c9/0x2b4 [ 2606.345526] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2606.350702] ? printk+0xa7/0xcf [ 2606.353968] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 2606.358716] ? p9_conn_cancel+0x9de/0xd30 [ 2606.362852] print_address_description+0x6c/0x20b [ 2606.367683] ? p9_conn_cancel+0x9de/0xd30 [ 2606.371825] kasan_report.cold.7+0x242/0x2fe [ 2606.376220] __asan_report_load4_noabort+0x14/0x20 [ 2606.381137] p9_conn_cancel+0x9de/0xd30 [ 2606.385113] ? find_held_lock+0x36/0x1c0 [ 2606.389164] ? p9_fd_cancelled+0x2f0/0x2f0 [ 2606.393403] ? lock_downgrade+0x8f0/0x8f0 [ 2606.397548] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2606.401956] ? mark_held_locks+0xc9/0x160 [ 2606.407041] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2606.411633] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 2606.416728] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2606.421738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2606.427300] p9_poll_workfn+0x4b2/0x6d0 [ 2606.431289] ? p9_read_work+0x1060/0x1060 [ 2606.435458] ? graph_lock+0x170/0x170 [ 2606.439265] ? lock_acquire+0x1e4/0x540 [ 2606.443228] ? process_one_work+0xb9b/0x1ba0 [ 2606.447634] ? kasan_check_read+0x11/0x20 [ 2606.451789] ? __lock_is_held+0xb5/0x140 [ 2606.455841] process_one_work+0xc73/0x1ba0 [ 2606.460151] ? trace_hardirqs_on+0x10/0x10 [ 2606.464390] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 2606.469052] ? lock_repin_lock+0x430/0x430 [ 2606.473296] ? __sched_text_start+0x8/0x8 [ 2606.477450] ? lock_downgrade+0x8f0/0x8f0 [ 2606.481585] ? retint_kernel+0x10/0x10 [ 2606.485459] ? graph_lock+0x170/0x170 [ 2606.489252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2606.494004] ? lock_acquire+0x1e4/0x540 [ 2606.497968] ? worker_thread+0x3dc/0x13c0 [ 2606.502114] ? lock_downgrade+0x8f0/0x8f0 [ 2606.506256] ? lock_release+0xa30/0xa30 [ 2606.510224] ? kasan_check_read+0x11/0x20 [ 2606.514363] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2606.518778] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2606.523372] ? kasan_check_write+0x14/0x20 [ 2606.527613] ? do_raw_spin_lock+0xc1/0x200 [ 2606.531841] worker_thread+0x189/0x13c0 [ 2606.535903] ? process_one_work+0x1ba0/0x1ba0 [ 2606.540387] ? graph_lock+0x170/0x170 [ 2606.544174] ? graph_lock+0x170/0x170 [ 2606.548134] ? find_held_lock+0x36/0x1c0 [ 2606.552197] ? find_held_lock+0x36/0x1c0 [ 2606.556257] ? kasan_check_read+0x11/0x20 [ 2606.560400] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2606.564797] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 2606.569905] ? __kthread_parkme+0x58/0x1b0 [ 2606.574152] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2606.579163] ? trace_hardirqs_on+0xd/0x10 [ 2606.583306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2606.588838] ? __kthread_parkme+0x106/0x1b0 [ 2606.593151] kthread+0x345/0x410 [ 2606.596533] ? process_one_work+0x1ba0/0x1ba0 [ 2606.601028] ? kthread_bind+0x40/0x40 [ 2606.604843] ret_from_fork+0x3a/0x50 [ 2606.608569] [ 2606.610196] Allocated by task 24174: [ 2606.613917] save_stack+0x43/0xd0 [ 2606.617372] kasan_kmalloc+0xc4/0xe0 [ 2606.621088] kmem_cache_alloc_trace+0x152/0x780 [ 2606.625789] p9_fd_create+0x1a7/0x3f0 [ 2606.629595] p9_client_create+0x915/0x16c9 [ 2606.633824] v9fs_session_init+0x21a/0x1a80 [ 2606.638139] v9fs_mount+0x7c/0x900 [ 2606.641677] mount_fs+0xae/0x328 [ 2606.645040] vfs_kern_mount.part.34+0xdc/0x4e0 [ 2606.649614] do_mount+0x581/0x30e0 [ 2606.653154] ksys_mount+0x12d/0x140 [ 2606.656774] __x64_sys_mount+0xbe/0x150 [ 2606.660738] do_syscall_64+0x1b9/0x820 [ 2606.664616] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2606.669788] [ 2606.671400] Freed by task 24174: [ 2606.674766] save_stack+0x43/0xd0 [ 2606.678209] __kasan_slab_free+0x11a/0x170 [ 2606.682438] kasan_slab_free+0xe/0x10 [ 2606.686226] kfree+0xd9/0x260 [ 2606.689333] p9_fd_close+0x416/0x5b0 [ 2606.693047] p9_client_create+0xac2/0x16c9 [ 2606.697363] v9fs_session_init+0x21a/0x1a80 [ 2606.701676] v9fs_mount+0x7c/0x900 [ 2606.705210] mount_fs+0xae/0x328 [ 2606.708575] vfs_kern_mount.part.34+0xdc/0x4e0 [ 2606.713168] do_mount+0x581/0x30e0 [ 2606.716704] ksys_mount+0x12d/0x140 [ 2606.720331] __x64_sys_mount+0xbe/0x150 [ 2606.724304] do_syscall_64+0x1b9/0x820 [ 2606.728186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2606.733363] [ 2606.735074] The buggy address belongs to the object at ffff8801b70f22c0 [ 2606.735074] which belongs to the cache kmalloc-512 of size 512 [ 2606.747729] The buggy address is located 40 bytes inside of [ 2606.747729] 512-byte region [ffff8801b70f22c0, ffff8801b70f24c0) [ 2606.759515] The buggy address belongs to the page: [ 2606.764443] page:ffffea0006dc3c80 count:1 mapcount:0 mapping:ffff8801da800940 index:0xffff8801b70f2a40 [ 2606.773898] flags: 0x2fffc0000000100(slab) [ 2606.778137] raw: 02fffc0000000100 ffffea00071fb6c8 ffffea0006b2c488 ffff8801da800940 [ 2606.786032] raw: ffff8801b70f2a40 ffff8801b70f2040 0000000100000005 0000000000000000 [ 2606.793908] page dumped because: kasan: bad access detected [ 2606.799608] [ 2606.801220] Memory state around the buggy address: [ 2606.806152] ffff8801b70f2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2606.813524] ffff8801b70f2200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2606.820891] >ffff8801b70f2280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2606.828248] ^ [ 2606.834999] ffff8801b70f2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2606.842353] ffff8801b70f2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2606.849700] ================================================================== [ 2606.857048] Disabling lock debugging due to kernel taint [ 2606.862488] Kernel panic - not syncing: panic_on_warn set ... [ 2606.862488] [ 2606.869852] CPU: 1 PID: 1038 Comm: kworker/1:2 Tainted: G B 4.18.0-rc3+ #137 [ 2606.878600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.888306] Workqueue: events p9_poll_workfn [ 2606.892708] Call Trace: [ 2606.895294] dump_stack+0x1c9/0x2b4 [ 2606.898933] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2606.904128] ? lock_downgrade+0x8f0/0x8f0 [ 2606.909316] panic+0x238/0x4e7 [ 2606.912545] ? add_taint.cold.5+0x16/0x16 [ 2606.916700] ? add_taint.cold.5+0x5/0x16 [ 2606.920772] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2606.925189] ? p9_conn_cancel+0x9de/0xd30 [ 2606.929338] kasan_end_report+0x47/0x4f [ 2606.933326] kasan_report.cold.7+0x76/0x2fe [ 2606.937642] __asan_report_load4_noabort+0x14/0x20 [ 2606.942566] p9_conn_cancel+0x9de/0xd30 [ 2606.946539] ? find_held_lock+0x36/0x1c0 [ 2606.950607] ? p9_fd_cancelled+0x2f0/0x2f0 [ 2606.954837] ? lock_downgrade+0x8f0/0x8f0 [ 2606.958990] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2606.963410] ? mark_held_locks+0xc9/0x160 [ 2606.967559] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2606.972139] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 2606.977231] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2606.982238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2606.987855] p9_poll_workfn+0x4b2/0x6d0 [ 2606.991823] ? p9_read_work+0x1060/0x1060 [ 2606.995961] ? graph_lock+0x170/0x170 [ 2606.999749] ? lock_acquire+0x1e4/0x540 [ 2607.003795] ? process_one_work+0xb9b/0x1ba0 [ 2607.008191] ? kasan_check_read+0x11/0x20 [ 2607.012332] ? __lock_is_held+0xb5/0x140 [ 2607.016397] process_one_work+0xc73/0x1ba0 [ 2607.020631] ? trace_hardirqs_on+0x10/0x10 [ 2607.025117] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 2607.029782] ? lock_repin_lock+0x430/0x430 [ 2607.034024] ? __sched_text_start+0x8/0x8 [ 2607.038171] ? lock_downgrade+0x8f0/0x8f0 [ 2607.042408] ? retint_kernel+0x10/0x10 [ 2607.046288] ? graph_lock+0x170/0x170 [ 2607.050083] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2607.054847] ? lock_acquire+0x1e4/0x540 [ 2607.058824] ? worker_thread+0x3dc/0x13c0 [ 2607.062964] ? lock_downgrade+0x8f0/0x8f0 [ 2607.067106] ? lock_release+0xa30/0xa30 [ 2607.071070] ? kasan_check_read+0x11/0x20 [ 2607.075246] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2607.079655] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2607.084241] ? kasan_check_write+0x14/0x20 [ 2607.088471] ? do_raw_spin_lock+0xc1/0x200 [ 2607.092695] worker_thread+0x189/0x13c0 [ 2607.096670] ? process_one_work+0x1ba0/0x1ba0 [ 2607.101154] ? graph_lock+0x170/0x170 [ 2607.104944] ? graph_lock+0x170/0x170 [ 2607.108746] ? find_held_lock+0x36/0x1c0 [ 2607.112828] ? find_held_lock+0x36/0x1c0 [ 2607.116900] ? kasan_check_read+0x11/0x20 [ 2607.121048] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2607.125458] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 2607.130555] ? __kthread_parkme+0x58/0x1b0 [ 2607.134782] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2607.139794] ? trace_hardirqs_on+0xd/0x10 [ 2607.143943] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2607.149493] ? __kthread_parkme+0x106/0x1b0 [ 2607.153812] kthread+0x345/0x410 [ 2607.157183] ? process_one_work+0x1ba0/0x1ba0 [ 2607.161694] ? kthread_bind+0x40/0x40 [ 2607.165497] ret_from_fork+0x3a/0x50 [ 2607.169794] Dumping ftrace buffer: [ 2607.173367] (ftrace buffer empty) [ 2607.177067] Kernel Offset: disabled [ 2607.180681] Rebooting in 86400 seconds..