ROR: 29189 [ 751.743689] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.750298] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.758380] device bridge_slave_0 entered promiscuous mode [ 751.796069] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.802491] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.810303] device bridge_slave_1 entered promiscuous mode [ 751.847328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 751.885755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 751.996237] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 752.037555] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 752.216952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 752.225220] team0: Port device team_slave_0 added [ 752.263826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 752.271193] team0: Port device team_slave_1 added [ 752.301908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.342211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 752.383473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.416351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.678997] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.685414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.692115] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.698499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.705782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 753.568172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 753.600494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.692138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 753.781393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 753.787662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 753.795247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 753.877200] 8021q: adding VLAN 0 to HW filter on device team0 2033/05/18 03:44:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf807]}, 0x10) 2033/05/18 03:44:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xfc00}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:08 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:08 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffdef, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:08 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000001480)='./file1\x00', &(0x7f0000001400), 0x24f) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x5, &(0x7f00000012c0)=[{&(0x7f0000000180)="5a939b0e0087aab5f87018a47d533c9069762b41fc73bab7e1d028f462fbd8041d693f4ae952", 0x26}, {&(0x7f00000001c0)="865baa4d27fffdc4e62106a92bf25fd683df8586516e147a718d830c9297495b17443451e591caccc18327c3cda03ef9930fb2fc479d3a9342a52292a78dc23d1f09e88f02c02a5aa1602a996985604a36f028f30339097114a3000a9a327b777f63982c7726534bcb3f5a18e5f37141", 0x70, 0x2}, {&(0x7f0000000240)="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", 0x1000, 0x20000000}, {&(0x7f0000001240)="01b785e9bc3134d5083d28d2968e05fe3a78991d92", 0x15, 0x3f}, {&(0x7f0000001280)="bd8fdb261ebee26f49655bfc7e69d4efe9d9be872463be7bb116a822968a8cd083f3", 0x22, 0x200}], 0x20, &(0x7f0000001380)=ANY=[@ANYBLOB="7573b0455ff073753bf0a290efb321f562766f9ecd94ceccc26c5f726d5f"]) lremovexattr(&(0x7f0000001440)='./file0\x00', &(0x7f0000001500)=@random={'os2.', 'em1-)(-^\x00'}) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:44:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00ef000000000000378e2864cd10ac34b9fdb39e2b69e2ef9d544fc2e33282b6467c85cbdec09ee8e53d679e9597eed93850b856847b520f3d1475b09146ab09f64bc305b4a77910c11e834f6263360eee6e553d1e8e1061cf30f85202414bdcd41bb373d3c5c5a0352cd30aa2f6aeac6270635d3ab09e759d92996911a415eed2914b464a4bf9d248182497fe4045fbce982569ea769cb97a"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0babb6fe01a944aaaf7cf2bf13d1ef5802b75269e0"], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000440)={0x5, 0x70, 0x2, 0x1, 0x27, 0x6, 0x0, 0x3, 0x30224, 0x2, 0x3bd4a674, 0x6, 0x9, 0x1, 0x9, 0x8, 0x2, 0xe, 0x239, 0xfffffffffffffffd, 0x8, 0x52fc, 0x5, 0x5, 0x80000001, 0x7fff, 0xffffffffffffffff, 0x7f, 0xd59, 0x7fff, 0x800, 0x2, 0x2, 0xfffffffffffffffa, 0x9, 0x2, 0x7, 0x4d, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x100, 0x20, 0xfffffffffffffffb, 0x6, 0xead4, 0x101, 0xe5b}, 0xffffffffffffffff, 0xa, 0xffffffffffffff9c, 0x2) r4 = accept(r0, &(0x7f00000004c0)=@rc, &(0x7f0000000200)=0x80) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000540)="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", 0x1000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)}) 2033/05/18 03:44:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 755.282398] binder: 19702:19704 transaction failed 29201/-22, size -5295614258035338083--1684697147460191162 line 2971 2033/05/18 03:44:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:09 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 755.338891] binder: 19702:19704 unknown command -21583093 [ 755.369443] binder: 19702:19704 ioctl c0306201 200000c0 returned -22 2033/05/18 03:44:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xdb1f]}, 0x10) [ 755.401969] binder: 19702:19704 got reply transaction with no transaction stack [ 755.409558] binder: 19702:19704 transaction failed 29201/-71, size 0-0 line 2763 2033/05/18 03:44:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xfc00000000000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:09 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 755.528197] binder_alloc: binder_alloc_mmap_handler: 19702 20001000-20004000 already mapped failed -16 [ 755.559213] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:44:09 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x80000) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x200000001009) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) statx(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x400, 0x804, &(0x7f0000000280)) [ 755.591861] binder: 19737:19738 unknown command 0 [ 755.614740] binder_alloc: 19702: binder_alloc_buf, no vma [ 755.620539] binder: 19702:19729 transaction failed 29189/-3, size -5295614258035338083--1684697147460191162 line 2971 [ 755.623889] binder: 19702:19704 ioctl 40046207 0 returned -16 [ 755.637590] binder: 19737:19738 ioctl c0306201 20007000 returned -22 [ 755.672317] device bridge_slave_1 left promiscuous mode [ 755.676988] binder: 19737:19738 ioctl c0306201 20000240 returned -11 [ 755.678204] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.729060] device bridge_slave_0 left promiscuous mode [ 755.734674] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.746762] binder: 19702:19731 unknown command -21583093 [ 755.774871] binder: 19702:19731 ioctl c0306201 200000c0 returned -22 [ 755.783484] binder: 19702:19746 got reply transaction with no transaction stack [ 755.791063] binder: 19702:19746 transaction failed 29201/-71, size 0-0 line 2763 [ 755.816890] IPVS: ftp: loaded support on port[0] = 21 [ 755.832317] team0 (unregistering): Port device team_slave_1 removed [ 755.843881] binder: undelivered TRANSACTION_ERROR: 29201 [ 755.849497] binder: undelivered TRANSACTION_ERROR: 29201 [ 755.851559] team0 (unregistering): Port device team_slave_0 removed [ 755.867425] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 755.882383] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 755.911915] bond0 (unregistering): Released all slaves [ 756.512081] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.518498] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.525968] device bridge_slave_0 entered promiscuous mode [ 756.562224] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.568634] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.575936] device bridge_slave_1 entered promiscuous mode [ 756.611329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 756.648481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 756.757108] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 756.796421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 756.966916] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 756.974395] team0: Port device team_slave_0 added [ 757.010065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 757.017649] team0: Port device team_slave_1 added [ 757.049831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 757.087668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 757.126999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 757.160744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 757.417574] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.423991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.430672] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.437081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.444399] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 758.248645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.325670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 758.406135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 758.412346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 758.420366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 758.427912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.494777] 8021q: adding VLAN 0 to HW filter on device team0 2033/05/18 03:44:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xaf2d000000000000]}, 0x10) 2033/05/18 03:44:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:12 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xff00}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:12 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:12 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file1\x00', 0x8000, 0xffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:44:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20000114, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 758.995960] binder: 20018:20020 transaction failed 29189/-22, size 0-0 line 2856 [ 758.996077] binder: 20011:20017 unknown command 0 2033/05/18 03:44:12 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'vlan0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) 2033/05/18 03:44:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf401000000000000]}, 0x10) 2033/05/18 03:44:12 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 759.056190] binder: 20011:20017 ioctl c0306201 20007000 returned -22 [ 759.094098] binder: 20011:20017 ioctl c0306201 20000240 returned -11 2033/05/18 03:44:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:12 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 759.169802] binder: 20040:20041 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xfe80}, &(0x7f0000f81000)=0x90) [ 759.217945] binder: 20047:20049 unknown command 25361 2033/05/18 03:44:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:13 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 759.240864] binder: 20037:20038 transaction failed 29189/-22, size 0-0 line 2856 [ 759.249263] binder: 20047:20049 ioctl c0306201 20007000 returned -22 [ 759.277593] binder: 20037:20038 ERROR: BC_REGISTER_LOOPER called without request [ 759.286753] binder: 20047:20049 ioctl c0306201 20000240 returned -11 [ 759.952821] binder: 20037:20074 got reply transaction with no transaction stack [ 759.960327] binder: 20037:20074 transaction failed 29201/-71, size 0-0 line 2763 2033/05/18 03:44:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x200000000000000]}, 0x10) 2033/05/18 03:44:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x33fe0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:13 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:13 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:13 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bind(r0, &(0x7f0000000140)=@l2={0x1f, 0x9, {0x9, 0xe8, 0x7, 0x8, 0xffffffffffffffff, 0x5}, 0x7, 0x8}, 0x80) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:44:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x80fe}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:13 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'vlan0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) [ 760.084240] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:44:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 760.127676] binder: 20079:20081 unknown command 4743953 [ 760.147277] binder: 20079:20081 ioctl c0306201 20007000 returned -22 [ 760.169889] binder: 20079:20081 ioctl c0306201 20000240 returned -11 2033/05/18 03:44:13 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:13 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x61b7]}, 0x10) [ 760.243092] binder: 20091:20092 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x100000000000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 760.292877] binder: 20104:20107 got transaction to invalid handle [ 760.299357] binder: 20104:20107 transaction failed 29201/-22, size 0-0 line 2856 [ 760.313614] binder: 20091:20092 ERROR: BC_REGISTER_LOOPER called without request [ 760.960564] binder: 20091:20124 got reply transaction with no transaction stack [ 760.968144] binder: 20091:20124 transaction failed 29201/-71, size 0-0 line 2763 2033/05/18 03:44:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x168f]}, 0x10) 2033/05/18 03:44:14 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:14 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfe800000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'vlan0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) 2033/05/18 03:44:14 executing program 0: r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) recvfrom(r0, &(0x7f0000000200)=""/48, 0x30, 0x0, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0x80) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x12, 0x1) r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0xe001, r2, r3, 0x8, 0x10001, 0xc0000) utime(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x1, 0x2}) umount2(&(0x7f0000000100)='./file0\x00', 0x9) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)=""/250, 0xfa) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000180)=""/66) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x4001) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000340)=0x3) 2033/05/18 03:44:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7ffff000, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) [ 761.096694] binder: undelivered TRANSACTION_ERROR: 29201 [ 761.125469] binder: 20129:20132 transaction failed 29189/-22, size 0-0 line 2856 [ 761.142793] binder: 20130:20131 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7e9f]}, 0x10) 2033/05/18 03:44:14 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:15 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 761.261767] device bridge_slave_1 left promiscuous mode [ 761.267363] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.306827] binder: 20143:20145 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x1000000}, &(0x7f0000f81000)=0x90) [ 761.354406] binder: 20153:20157 transaction failed 29189/-22, size 0-0 line 2856 [ 761.355843] binder: 20143:20145 ERROR: BC_REGISTER_LOOPER called without request [ 761.370768] device bridge_slave_0 left promiscuous mode [ 761.376371] bridge0: port 1(bridge_slave_0) entered disabled state 2033/05/18 03:44:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xffffff80]}, 0x10) 2033/05/18 03:44:15 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 761.513798] binder: 20167:20168 transaction failed 29189/-22, size 0-0 line 2856 [ 761.530345] team0 (unregistering): Port device team_slave_1 removed 2033/05/18 03:44:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe6af]}, 0x10) [ 761.561822] team0 (unregistering): Port device team_slave_0 removed 2033/05/18 03:44:15 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 761.608333] bond0 (unregistering): Releasing backup interface bond_slave_1 2033/05/18 03:44:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xff000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa000000]}, 0x10) [ 761.648881] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 761.679759] binder: 20176:20177 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:15 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 761.791371] bond0 (unregistering): Released all slaves 2033/05/18 03:44:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7c9000000000000]}, 0x10) [ 761.857887] binder: 20186:20187 transaction failed 29189/-22, size 0-0 line 2856 [ 761.876472] binder: 20154:20155 transaction failed 29189/-22, size 0-0 line 2856 [ 761.937082] binder: undelivered TRANSACTION_ERROR: 29189 [ 761.998748] binder: 20143:20195 got reply transaction with no transaction stack [ 762.006478] binder: 20143:20195 transaction failed 29201/-71, size 0-0 line 2763 [ 762.154241] binder: undelivered TRANSACTION_ERROR: 29201 [ 763.015495] IPVS: ftp: loaded support on port[0] = 21 [ 763.381722] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.388141] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.395365] device bridge_slave_0 entered promiscuous mode [ 763.422562] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.428973] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.436201] device bridge_slave_1 entered promiscuous mode [ 763.463413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 763.491482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 763.565197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 763.595100] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 763.703546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 763.710739] team0: Port device team_slave_0 added [ 763.736185] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 763.743512] team0: Port device team_slave_1 added [ 763.771601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 763.799679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 763.828906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 763.858389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 764.106784] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.113160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.119797] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.126149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.975933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.062138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 765.138289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 765.144457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 765.151588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 765.234389] 8021q: adding VLAN 0 to HW filter on device team0 2033/05/18 03:44:20 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfec00000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") umount2(&(0x7f0000001580)='/\x00', 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:44:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf78f0000]}, 0x10) 2033/05/18 03:44:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:20 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10) 2033/05/18 03:44:20 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 766.697374] binder: 20467:20469 transaction failed 29189/-22, size 0-0 line 2856 [ 766.709572] binder: 20475:20479 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc0", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:20 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4000000]}, 0x10) [ 766.755314] binder: undelivered TRANSACTION_ERROR: 29189 [ 766.768469] binder: 20474:20477 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:20 executing program 7: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 766.848564] binder: 20485:20488 transaction failed 29189/-22, size 0-0 line 2856 [ 766.873650] binder: 20474:20477 ERROR: BC_REGISTER_LOOPER called without request 2033/05/18 03:44:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xff00}, &(0x7f0000f81000)=0x90) [ 766.909228] binder: 20495:20496 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:20 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)}) 2033/05/18 03:44:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x974a]}, 0x10) 2033/05/18 03:44:20 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffff5f1, 0x4002) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1=0xe0000001, @in=@rand_addr=0x80000000, 0x4e22, 0x0, 0x4e20, 0x4, 0x2, 0x80, 0x20, 0x0, r1, r2}, {0xffffffffd0d8452a, 0x80, 0x6, 0x3f, 0x8, 0x2, 0x8000000000000}, {0x81, 0x1, 0x9, 0x8}, 0x2, 0x6e6bba, 0x1, 0x0, 0x0, 0x2}, {{@in6, 0x4d2, 0x6c}, 0xa, @in=@rand_addr=0x5, 0x3502, 0x4, 0x2, 0x6, 0xa01, 0x9, 0x7e61b0a3}}, 0xe8) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) [ 766.959688] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:20 executing program 7: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 767.047996] binder: 20507:20508 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5627]}, 0x10) [ 767.106481] binder: 20513:20515 transaction failed 29189/-22, size 0-0 line 2856 [ 767.128836] device bridge_slave_1 left promiscuous mode [ 767.134572] bridge0: port 2(bridge_slave_1) entered disabled state 2033/05/18 03:44:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfe80}, &(0x7f0000f81000)=0x90) [ 767.179297] device bridge_slave_0 left promiscuous mode [ 767.184897] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.209790] binder: undelivered TRANSACTION_ERROR: 29189 [ 767.309525] IPVS: ftp: loaded support on port[0] = 21 [ 767.327524] team0 (unregistering): Port device team_slave_1 removed [ 767.350526] team0 (unregistering): Port device team_slave_0 removed [ 767.362698] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 767.379416] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 767.409990] bond0 (unregistering): Released all slaves [ 767.524139] binder: 20474:20538 got reply transaction with no transaction stack [ 767.531713] binder: 20474:20538 transaction failed 29201/-71, size 0-0 line 2763 2033/05/18 03:44:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) [ 767.673494] binder: undelivered TRANSACTION_ERROR: 29201 [ 768.095068] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.101504] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.108908] device bridge_slave_0 entered promiscuous mode [ 768.147559] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.153978] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.161792] device bridge_slave_1 entered promiscuous mode [ 768.198090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 768.234500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 768.344259] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 768.383590] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 768.554198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 768.562218] team0: Port device team_slave_0 added [ 768.604067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 768.612327] team0: Port device team_slave_1 added [ 768.642808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 768.681843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 768.721419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.749901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 769.007706] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.014094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.020743] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.027108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.034686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 769.827306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.888204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 769.915886] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 769.996907] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 770.003133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 770.010393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 770.086592] 8021q: adding VLAN 0 to HW filter on device team0 2033/05/18 03:44:25 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)}) 2033/05/18 03:44:25 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x400, 0x2) faccessat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0xc00) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) fchownat(r1, &(0x7f0000000140)='./file0\x00', r2, 0x0, 0x1800) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:44:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffffffe, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xffffffc0]}, 0x10) 2033/05/18 03:44:25 executing program 7: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xc0fe}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:25 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)}) 2033/05/18 03:44:25 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000080", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x80ffffff00000000]}, 0x10) [ 771.435019] binder: 20813:20816 transaction failed 29189/-22, size 0-0 line 2856 [ 771.457381] binder: 20812:20814 transaction failed 29189/-22, size 0-0 line 2856 [ 771.525385] binder: undelivered TRANSACTION_ERROR: 29189 [ 771.525756] binder: 20820:20822 transaction failed 29189/-22, size 0-0 line 2856 [ 771.559363] binder: 20818:20819 transaction failed 29189/-22, size 0-0 line 2856 [ 771.615441] binder: 20818:20819 ERROR: BC_REGISTER_LOOPER called without request [ 771.735230] device bridge_slave_1 left promiscuous mode [ 771.740978] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.753759] device bridge_slave_0 left promiscuous mode [ 771.759304] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.794900] team0 (unregistering): Port device team_slave_1 removed [ 771.805068] team0 (unregistering): Port device team_slave_0 removed [ 771.816775] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 771.832824] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 771.863986] bond0 (unregistering): Released all slaves [ 772.269968] binder: 20818:20838 got reply transaction with no transaction stack [ 772.277711] binder: 20818:20838 transaction failed 29201/-71, size 0-0 line 2763 2033/05/18 03:44:26 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0xffffffff80000001, 0x5, 0x8, 0x53, 0x9, 0x9, 0x10001, 0x10001, 0x4], 0x9, 0x9, 0x0, 0x5, 0x0, 0x7, {0xfffffffffffffff8, 0x2c, 0xd49, 0xfff, 0x8, 0x8, 0x1, 0x7, 0x100000000, 0x200, 0x8, 0x3, 0x79, 0x800, "07c45364409c0413de629ecb42e23c0f9b470e4354fa3a402884766a274b9ceb"}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:44:26 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)}) 2033/05/18 03:44:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffffff0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xd778000000000000]}, 0x10) 2033/05/18 03:44:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc00000000000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:26 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 2033/05/18 03:44:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:26 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 772.404275] binder: undelivered TRANSACTION_ERROR: 29201 [ 772.461268] binder: 20846:20852 transaction failed 29189/-22, size 0-0 line 2856 [ 772.472439] binder: 20853:20854 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6784000000000000]}, 0x10) 2033/05/18 03:44:26 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 772.540563] binder: 20856:20858 transaction failed 29189/-22, size 0-0 line 2856 [ 772.581146] binder: 20856:20858 ERROR: BC_REGISTER_LOOPER called without request [ 772.585552] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:26 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xff0a0000]}, 0x10) [ 772.647501] binder: 20870:20871 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfe80000000000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 772.780615] binder: 20883:20885 transaction failed 29189/-22, size 0-0 line 2856 [ 772.825388] IPVS: ftp: loaded support on port[0] = 21 [ 773.483827] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.490225] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.497391] device bridge_slave_0 entered promiscuous mode [ 773.522614] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.529050] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.536000] device bridge_slave_1 entered promiscuous mode [ 773.560232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 773.585269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 773.654455] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 773.682943] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 773.788764] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 773.795860] team0: Port device team_slave_0 added [ 773.819173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 773.826430] team0: Port device team_slave_1 added [ 773.850521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 773.876228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 773.903247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 773.910349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 773.918825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 773.938835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 773.945907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 773.954361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 774.169695] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.176205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.182857] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.189261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.196880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 774.560269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 775.001583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.083644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 775.162181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 775.168353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 775.176076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 775.249947] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.711477] QAT: Invalid ioctl [ 776.517591] QAT: Invalid ioctl 2033/05/18 03:44:30 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) keyctl$set_reqkey_keyring(0xe, 0x0) 2033/05/18 03:44:30 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:30 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f4]}, 0x10) 2033/05/18 03:44:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffff7f00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) [ 776.607376] binder: 21170:21173 transaction failed 29189/-22, size 0-0 line 2856 [ 776.654551] binder: 21169:21171 transaction failed 29189/-22, size 0-0 line 2856 [ 776.683074] binder: 21169:21171 ERROR: BC_REGISTER_LOOPER called without request [ 776.815531] device bridge_slave_1 left promiscuous mode [ 776.821195] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.830778] device bridge_slave_0 left promiscuous mode [ 776.836329] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.876595] team0 (unregistering): Port device team_slave_1 removed [ 776.886969] team0 (unregistering): Port device team_slave_0 removed [ 776.898585] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 776.915680] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 776.944577] bond0 (unregistering): Released all slaves 2033/05/18 03:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:31 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x11]}, 0x10) 2033/05/18 03:44:31 executing program 0 (fault-call:4 fault-nth:1): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffffffffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:31 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=0x0) timer_getoverrun(r6) 2033/05/18 03:44:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfec0}, &(0x7f0000f81000)=0x90) [ 777.596803] binder: 21189:21198 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:31 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5bef]}, 0x10) [ 777.661376] binder: 21187:21200 transaction failed 29189/-22, size 0-0 line 2856 [ 777.680530] binder: 21187:21200 ERROR: BC_REGISTER_LOOPER called without request 2033/05/18 03:44:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 777.785130] binder: 21214:21215 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:31 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3ff20000]}, 0x10) 2033/05/18 03:44:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 777.969630] binder: 21232:21234 transaction failed 29189/-22, size 0-0 line 2856 [ 777.979431] IPVS: ftp: loaded support on port[0] = 21 2033/05/18 03:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 778.660504] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.666908] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.674182] device bridge_slave_0 entered promiscuous mode [ 778.700423] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.706826] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.713926] device bridge_slave_1 entered promiscuous mode [ 778.738847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 778.763975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 778.833420] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 778.860607] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 778.973272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 778.980603] team0: Port device team_slave_0 added [ 779.004720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 779.011827] team0: Port device team_slave_1 added [ 779.035690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.061735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.088086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 779.095210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.104901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 779.125475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 779.132704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.141130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 779.365082] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.371487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.378167] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.384530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.391822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 779.744198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 780.209598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.293041] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 780.373967] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 780.380174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 780.387725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.465383] 8021q: adding VLAN 0 to HW filter on device team0 2033/05/18 03:44:34 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)) 2033/05/18 03:44:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x10c7]}, 0x10) 2033/05/18 03:44:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffff7f, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfec0000000000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:34 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 780.919387] binder: 21515:21516 transaction failed 29189/-22, size 0-0 line 2856 [ 780.965360] binder: 21518:21529 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:34 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf23f]}, 0x10) [ 781.019072] binder: 21533:21534 transaction failed 29189/-22, size 0-0 line 2856 [ 781.031931] binder: 21521:21523 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:34 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 781.078469] binder: 21521:21523 ERROR: BC_REGISTER_LOOPER called without request 2033/05/18 03:44:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 781.154964] binder: 21546:21549 transaction failed 29189/-22, size 0-0 line 2856 [ 781.254748] binder: release 21521:21523 transaction 1360 in, still active [ 781.262009] binder: send failed reply for transaction 1360 to 21553:21554 [ 781.269071] binder: send failed reply for transaction 1361 to 21553:21554 [ 781.286878] binder: undelivered TRANSACTION_COMPLETE [ 781.292094] binder: undelivered TRANSACTION_ERROR: 29189 [ 781.306485] binder: undelivered TRANSACTION_COMPLETE [ 781.311699] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:35 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xff00000000000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:35 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x44cf]}, 0x10) 2033/05/18 03:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:35 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:35 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) sched_yield() 2033/05/18 03:44:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000006", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:35 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 781.927197] binder: 21566:21569 transaction failed 29189/-22, size 0-0 line 2856 [ 781.947346] binder: 21571:21577 transaction failed 29189/-22, size 0-0 line 2856 [ 781.957364] binder: 21566:21569 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x571c0000]}, 0x10) 2033/05/18 03:44:35 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 782.011949] binder: 21570:21572 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:35 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:35 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 782.060422] binder: 21570:21572 ERROR: BC_REGISTER_LOOPER called without request [ 782.076861] binder: 21591:21593 transaction failed 29189/-22, size 0-0 line 2856 [ 782.085636] binder: undelivered TRANSACTION_ERROR: 29189 [ 782.091692] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:35 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 782.149239] binder: 21601:21602 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:35 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:36 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18) [ 782.234421] binder: release 21570:21572 transaction 1369 in, still active [ 782.241732] binder: send failed reply for transaction 1369 to 21603:21604 [ 782.248749] binder: send failed reply for transaction 1370 to 21603:21604 [ 782.319637] binder: 21617:21619 transaction failed 29189/-22, size 0-0 line 2856 [ 782.353175] binder: undelivered TRANSACTION_COMPLETE [ 782.358395] binder: undelivered TRANSACTION_ERROR: 29189 [ 782.386791] binder: 21618:21620 transaction failed 29189/-22, size 0-0 line 2856 [ 782.396132] binder: undelivered TRANSACTION_COMPLETE [ 782.401314] binder: undelivered TRANSACTION_ERROR: 29189 [ 782.408646] binder: 21618:21620 ERROR: BC_REGISTER_LOOPER called without request 2033/05/18 03:44:36 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045877, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe00, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xcf44]}, 0x10) 2033/05/18 03:44:36 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00)', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc00}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:36 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:36 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8) [ 783.272130] binder: 21635:21643 transaction failed 29189/-22, size 0-0 line 2856 [ 783.286740] binder: 21638:21644 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:37 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:37 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000004", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 783.339470] binder: 21638:21651 transaction failed 29189/-22, size 0-0 line 2856 [ 783.375724] binder: 21654:21655 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc805]}, 0x10) [ 783.389113] binder: 21646:21647 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:37 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:37 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 783.457426] binder: 21646:21647 ERROR: BC_REGISTER_LOOPER called without request [ 783.472643] binder: undelivered TRANSACTION_ERROR: 29189 [ 783.479179] binder: undelivered TRANSACTION_ERROR: 29189 [ 783.522357] binder: 21670:21671 transaction failed 29189/-22, size 0-0 line 2856 [ 783.631785] binder: release 21646:21647 transaction 1381 in, still active [ 783.638862] binder: send failed reply for transaction 1381 to 21675:21676 [ 783.646065] binder: send failed reply for transaction 1382 to 21675:21676 [ 783.667229] binder: undelivered TRANSACTION_COMPLETE [ 783.672539] binder: undelivered TRANSACTION_ERROR: 29189 [ 783.678842] binder: undelivered TRANSACTION_COMPLETE [ 783.684061] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00?', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:37 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xd557]}, 0x10) 2033/05/18 03:44:37 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:37 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:37 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98) 2033/05/18 03:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 784.206268] binder: 21694:21702 transaction failed 29189/-22, size 0-0 line 2856 [ 784.210646] binder: 21688:21697 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:38 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1c57]}, 0x10) [ 784.270972] binder: 21688:21709 transaction failed 29189/-22, size 0-0 line 2856 [ 784.296155] binder: 21698:21699 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:38 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 784.345270] binder: 21715:21716 ioctl c0306201 20000240 returned -11 [ 784.369397] binder: 21698:21699 ERROR: BC_REGISTER_LOOPER called without request [ 784.387160] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:38 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 784.393269] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:38 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:38 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) [ 784.487420] binder: release 21715:21716 transaction 1388 out, still active [ 784.494679] binder: undelivered TRANSACTION_COMPLETE 2033/05/18 03:44:38 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x57d5000000000000]}, 0x10) [ 784.531782] binder: release 21698:21699 transaction 1388 in, still active [ 784.538996] binder: send failed reply for transaction 1388, target dead [ 784.545860] binder: send failed reply for transaction 1389 to 21725:21727 [ 784.552844] binder: send failed reply for transaction 1390 to 21725:21727 2033/05/18 03:44:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 784.589301] binder: 21741:21742 transaction failed 29189/-22, size 0-0 line 2856 [ 784.667740] binder: 21748:21752 transaction failed 29189/-22, size 0-0 line 2856 [ 784.690087] binder: 21743:21744 transaction failed 29189/-22, size 0-0 line 2856 [ 784.714609] binder: undelivered TRANSACTION_COMPLETE [ 784.719834] binder: undelivered TRANSACTION_ERROR: 29189 [ 784.741452] binder: 21743:21744 ERROR: BC_REGISTER_LOOPER called without request [ 784.765640] binder: release 21748:21752 transaction 1395 out, still active [ 784.772794] binder: undelivered TRANSACTION_COMPLETE [ 784.807141] binder: undelivered TRANSACTION_ERROR: 29189 [ 784.817167] binder: undelivered TRANSACTION_COMPLETE [ 784.822349] binder: undelivered TRANSACTION_ERROR: 29189 [ 784.828453] binder: release 21743:21744 transaction 1395 in, still active [ 784.835480] binder: send failed reply for transaction 1395, target dead 2033/05/18 03:44:38 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:38 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2000000]}, 0x10) 2033/05/18 03:44:38 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4000000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:38 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 785.230975] binder: 21777:21779 transaction failed 29189/-22, size 0-0 line 2856 [ 785.239816] binder: 21781:21785 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 785.275010] binder: 21781:21785 transaction failed 29189/-22, size 0-0 line 2856 [ 785.277216] binder: 21774:21776 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f220000]}, 0x10) 2033/05/18 03:44:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:39 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 785.382539] binder: undelivered TRANSACTION_ERROR: 29189 [ 785.388658] binder: undelivered TRANSACTION_ERROR: 29189 [ 785.437863] binder: 21803:21804 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:39 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2033/05/18 03:44:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:39 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8f16]}, 0x10) 2033/05/18 03:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xb8040000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:39 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:39 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 786.191368] binder: 21816:21819 transaction failed 29189/-22, size 0-0 line 2856 [ 786.226787] binder: 21816:21835 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 786.254915] binder: 21822:21823 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5c8]}, 0x10) 2033/05/18 03:44:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 786.336370] binder: undelivered TRANSACTION_ERROR: 29189 [ 786.345832] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:40 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 2033/05/18 03:44:40 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffffe", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 786.378985] binder: undelivered TRANSACTION_ERROR: 29189 [ 786.418604] binder: 21852:21853 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 786.468360] binder: 21852:21853 transaction failed 29189/-22, size 0-0 line 2856 [ 786.556248] binder: undelivered TRANSACTION_ERROR: 29189 [ 786.562362] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xef5b0000]}, 0x10) 2033/05/18 03:44:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:40 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) 2033/05/18 03:44:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:40 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 787.164989] binder: 21886:21887 transaction failed 29189/-22, size 0-0 line 2856 [ 787.185586] binder: 21892:21894 unknown command 0 [ 787.208639] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\t', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x95bf]}, 0x10) 2033/05/18 03:44:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 787.220610] binder: 21892:21894 ioctl c0306201 20007000 returned -22 [ 787.228612] binder: 21886:21902 transaction failed 29189/-22, size 0-0 line 2856 [ 787.259398] binder: 21892:21894 ioctl c0306201 20000240 returned -11 2033/05/18 03:44:41 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:41 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc3", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:41 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 787.337913] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 787.409219] binder: 21919:21920 transaction failed 29189/-22, size 0-0 line 2856 [ 787.422240] binder: 21923:21925 unknown command 0 [ 787.456967] binder: 21923:21925 ioctl c0306201 20007000 returned -22 [ 787.475638] binder: 21919:21929 transaction failed 29189/-22, size 0-0 line 2856 [ 787.491375] binder: 21923:21925 ioctl c0306201 20000240 returned -11 [ 787.560160] binder: undelivered TRANSACTION_ERROR: 29189 [ 787.566338] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf00, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x700000000000000]}, 0x10) 2033/05/18 03:44:41 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:41 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:41 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803) [ 788.162134] binder: 21948:21949 unknown command 25361 [ 788.186466] binder: 21950:21953 transaction failed 29189/-22, size 0-0 line 2856 [ 788.186519] binder: 21948:21949 ioctl c0306201 20007000 returned -22 2033/05/18 03:44:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe000000]}, 0x10) [ 788.232499] binder: 21950:21963 transaction failed 29189/-22, size 0-0 line 2856 [ 788.235822] binder: 21948:21949 ioctl c0306201 20000240 returned -11 2033/05/18 03:44:42 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:42 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe803]}, 0x10) 2033/05/18 03:44:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 788.364621] binder: undelivered TRANSACTION_ERROR: 29189 [ 788.370711] binder: undelivered TRANSACTION_ERROR: 29189 [ 788.398571] binder: 21978:21979 unknown command 4743953 [ 788.424277] binder: 21978:21979 ioctl c0306201 20007000 returned -22 [ 788.458236] binder: 21982:21985 transaction failed 29189/-22, size 0-0 line 2856 [ 788.476160] binder: 21978:21979 ioctl c0306201 20000240 returned -11 [ 788.514246] binder: 21982:21994 transaction failed 29189/-22, size 0-0 line 2856 [ 788.600385] binder: undelivered TRANSACTION_ERROR: 29189 [ 788.606788] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe7e0]}, 0x10) 2033/05/18 03:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffff9e, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:42 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:42 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 789.172768] binder: 22016:22017 got transaction to invalid handle [ 789.174575] binder: 22013:22018 transaction failed 29189/-22, size 0-0 line 2856 [ 789.179126] binder: 22016:22017 transaction failed 29201/-22, size 0-0 line 2856 2033/05/18 03:44:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f67]}, 0x10) [ 789.236524] binder_alloc: 22013: binder_alloc_buf, no vma [ 789.242260] binder: 22013:22025 transaction failed 29189/-3, size 0-0 line 2971 [ 789.299380] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:44:43 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000003", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 789.344651] binder: 22013:22026 ioctl 40046207 20000240 returned -16 2033/05/18 03:44:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket(0xa, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 789.422160] binder: 22044:22045 transaction failed 29189/-22, size 0-0 line 2856 [ 789.480235] binder: undelivered TRANSACTION_ERROR: 29189 [ 789.487474] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x393f]}, 0x10) 2033/05/18 03:44:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306211, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3f00000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:43 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 790.177169] binder: 22068:22070 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f390000]}, 0x10) [ 790.221797] binder: 22077:22079 transaction failed 29189/-22, size 0-0 line 2856 [ 790.242254] binder: 22077:22079 ioctl c0306211 20000240 returned -22 2033/05/18 03:44:44 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 790.280696] binder: 22077:22079 transaction failed 29189/-22, size 0-0 line 2856 [ 790.283052] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:44 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 790.328614] binder: 22077:22086 ioctl c0306211 20000240 returned -22 [ 790.360019] binder: 22099:22100 transaction failed 29189/-22, size 0-0 line 2856 [ 790.423315] binder: undelivered TRANSACTION_ERROR: 29189 [ 790.464312] binder: undelivered TRANSACTION_ERROR: 29189 [ 790.470354] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:44 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa7b2]}, 0x10) 2033/05/18 03:44:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:44 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:44 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 791.189245] binder: 22126:22127 transaction failed 29189/-22, size 0-0 line 2856 [ 791.204567] binder: 22123:22124 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xb761]}, 0x10) [ 791.229664] binder: 22126:22127 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:45 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:45 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)}) 2033/05/18 03:44:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:45 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfdfdffff00000000, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 791.324322] binder: undelivered TRANSACTION_ERROR: 29189 [ 791.356890] binder: undelivered TRANSACTION_ERROR: 29189 [ 791.363448] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 791.414386] binder: 22149:22151 transaction failed 29189/-22, size 0-0 line 2856 [ 791.473669] binder: 22155:22157 transaction failed 29189/-22, size 0-0 line 2856 [ 791.508200] binder: 22155:22157 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc710]}, 0x10) 2033/05/18 03:44:45 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 791.533953] binder: 22155:22165 unknown command 0 [ 791.544227] binder: 22155:22165 ioctl c0306201 20000240 returned -22 [ 791.607150] binder: undelivered TRANSACTION_ERROR: 29189 [ 791.647850] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:45 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)}) 2033/05/18 03:44:45 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x1000000, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1100000000000000]}, 0x10) 2033/05/18 03:44:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf00000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:45 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 792.180990] binder: 22191:22197 transaction failed 29189/-22, size 0-0 line 2856 [ 792.186509] binder: 22200:22204 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00 ', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x0, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:46 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)}) [ 792.243317] binder: 22200:22204 transaction failed 29189/-22, size 0-0 line 2856 [ 792.271699] binder: 22200:22210 unknown command 0 [ 792.276874] binder: undelivered TRANSACTION_ERROR: 29189 [ 792.295552] binder: 22200:22210 ioctl c0306201 20000240 returned -22 [ 792.343162] binder: 22219:22220 transaction failed 29189/-22, size 0-0 line 2856 [ 792.394571] binder: undelivered TRANSACTION_ERROR: 29189 [ 792.419216] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:46 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xffffffff00000000]}, 0x10) 2033/05/18 03:44:46 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:46 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfdfdffff, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x0, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:47 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 793.230658] binder: 22244:22246 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x0, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 793.279922] binder: 22244:22254 transaction failed 29189/-22, size 0-0 line 2856 [ 793.318382] binder: 22244:22255 unknown command 0 2033/05/18 03:44:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x17a70000]}, 0x10) 2033/05/18 03:44:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 793.341789] binder: 22244:22255 ioctl c0306201 20000240 returned -22 2033/05/18 03:44:47 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:47 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:47 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfffffdfd, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 793.463170] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf78f000000000000]}, 0x10) [ 793.554365] binder: 22279:22282 transaction failed 29189/-22, size 0-0 line 2856 [ 793.610435] binder: 22279:22292 transaction failed 29189/-22, size 0-0 line 2856 [ 793.655614] binder: 22279:22293 unknown command 0 [ 793.673554] binder: 22279:22293 ioctl c0306201 20000240 returned -22 [ 793.707335] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x20f81090) 2033/05/18 03:44:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:47 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x100000000000000, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:47 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9703, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5f500000]}, 0x10) 2033/05/18 03:44:47 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:47 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 794.229973] binder: 22322:22323 transaction failed 29189/-22, size 0-0 line 2856 [ 794.267415] binder: 22322:22327 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe00]}, 0x10) [ 794.301497] binder: 22322:22329 unknown command 0 [ 794.318986] binder: 22322:22329 ioctl c0306201 20000240 returned -22 2033/05/18 03:44:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:48 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0xfffffdfd, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:48 executing program 7: socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:48 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 794.418279] binder: undelivered TRANSACTION_ERROR: 29189 [ 794.484476] binder: 22348:22353 transaction failed 29189/-22, size 0-0 line 2856 [ 794.531006] binder: 22348:22353 transaction failed 29189/-22, size 0-0 line 2856 [ 794.570568] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x8f) 2033/05/18 03:44:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5dc]}, 0x10) 2033/05/18 03:44:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:48 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x100000000000000, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xb804, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:48 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 795.148664] binder: 22378:22379 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2f8a000000000000]}, 0x10) [ 795.194826] binder: 22378:22379 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:49 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0xfdfdffff00000000, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 795.262892] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 795.371518] binder: 22404:22405 transaction failed 29189/-22, size 0-0 line 2856 [ 795.412835] binder: 22404:22405 transaction failed 29189/-22, size 0-0 line 2856 [ 795.526681] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) 2033/05/18 03:44:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7100000]}, 0x10) 2033/05/18 03:44:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:49 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffffffffffff000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 796.147238] binder: 22430:22436 transaction failed 29189/-22, size 0-0 line 2856 [ 796.180333] binder: 22430:22436 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7, 0x8001) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:49 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x400000000000000]}, 0x10) [ 796.281797] FAULT_INJECTION: forcing a failure. [ 796.281797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.293837] CPU: 0 PID: 22458 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #75 [ 796.301122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.310485] Call Trace: [ 796.313095] dump_stack+0x1b9/0x294 [ 796.316743] ? dump_stack_print_info.cold.2+0x52/0x52 [ 796.322060] ? zap_class+0x720/0x720 [ 796.325799] should_fail.cold.4+0xa/0x1a [ 796.329896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 796.335026] ? print_usage_bug+0xc0/0xc0 [ 796.340061] ? graph_lock+0x170/0x170 [ 796.343877] ? print_usage_bug+0xc0/0xc0 [ 796.347975] ? find_held_lock+0x36/0x1c0 [ 796.352061] ? __lock_is_held+0xb5/0x140 [ 796.356146] ? check_same_owner+0x320/0x320 [ 796.360483] ? rcu_note_context_switch+0x710/0x710 [ 796.365436] ? __might_sleep+0x95/0x190 [ 796.369441] __alloc_pages_nodemask+0x34e/0xd70 [ 796.374125] ? unwind_get_return_address+0x61/0xa0 [ 796.379076] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 796.384127] ? perf_trace_lock+0xd6/0x900 [ 796.388284] ? zap_class+0x720/0x720 [ 796.392005] ? __lock_acquire+0x7f5/0x5140 [ 796.396263] ? zap_class+0x720/0x720 [ 796.401291] ? print_usage_bug+0xc0/0xc0 [ 796.405374] ? print_usage_bug+0xc0/0xc0 [ 796.409478] ? graph_lock+0x170/0x170 [ 796.413295] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 796.418852] alloc_pages_current+0x10c/0x210 [ 796.423280] pte_alloc_one+0x1b/0x120 [ 796.427119] do_huge_pmd_anonymous_page+0xdcf/0x1cc0 [ 796.432235] ? __lock_acquire+0x7f5/0x5140 [ 796.436494] ? __thp_get_unmapped_area+0x180/0x180 [ 796.441444] ? debug_check_no_locks_freed+0x310/0x310 [ 796.446644] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 796.451849] ? rcu_read_lock+0x70/0x70 [ 796.455753] ? print_usage_bug+0xc0/0xc0 [ 796.459827] ? page_add_file_rmap+0x779/0xe20 [ 796.464330] ? perf_trace_lock+0xd6/0x900 [ 796.468483] ? page_add_new_anon_rmap+0x850/0x850 [ 796.473333] ? print_usage_bug+0xc0/0xc0 [ 796.477403] ? debug_check_no_locks_freed+0x310/0x310 [ 796.482585] ? pud_val+0x80/0xf0 [ 796.485938] ? pmd_val+0xf0/0xf0 [ 796.489297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.494822] __handle_mm_fault+0x2d02/0x4310 [ 796.499223] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 796.503962] ? graph_lock+0x170/0x170 [ 796.507750] ? print_usage_bug+0xc0/0xc0 [ 796.511802] ? find_held_lock+0x36/0x1c0 [ 796.515869] ? lock_downgrade+0x8e0/0x8e0 [ 796.520022] ? handle_mm_fault+0x8c0/0xc70 [ 796.524257] handle_mm_fault+0x53a/0xc70 [ 796.528309] ? __handle_mm_fault+0x4310/0x4310 [ 796.532883] ? find_vma+0x34/0x190 [ 796.536423] __do_page_fault+0x60b/0xe40 [ 796.540478] ? mm_fault_error+0x380/0x380 [ 796.544616] ? graph_lock+0x170/0x170 [ 796.548417] do_page_fault+0xee/0x8a7 [ 796.552203] ? vmalloc_sync_all+0x30/0x30 [ 796.556339] ? find_held_lock+0x36/0x1c0 [ 796.560407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 796.565243] page_fault+0x1e/0x30 [ 796.568687] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 796.574559] RSP: 0018:ffff880186e57838 EFLAGS: 00010246 [ 796.579911] RAX: ffffed0030dcaf2a RBX: 0000000000000040 RCX: 0000000000000040 [ 796.587173] RDX: 0000000000000040 RSI: 00000000204e0002 RDI: ffff880186e57910 [ 796.594427] RBP: ffff880186e57870 R08: ffffed0030dcaf2a R09: ffffed0030dcaf22 [ 796.601679] R10: ffffed0030dcaf29 R11: ffff880186e5794f R12: 00000000204e0042 [ 796.608931] R13: 00000000204e0002 R14: ffff880186e57910 R15: 00007ffffffff000 [ 796.616209] ? _copy_from_user+0x10d/0x150 [ 796.620435] ip6_tnl_ioctl+0x843/0xbe0 [ 796.624311] ? perf_trace_lock+0xd6/0x900 [ 796.628453] ? ip6_tnl_locate+0x9b0/0x9b0 [ 796.632585] ? zap_class+0x720/0x720 [ 796.636300] ? find_held_lock+0x36/0x1c0 [ 796.640366] ? ip6_tnl_locate+0x9b0/0x9b0 [ 796.644504] dev_ifsioc+0x43e/0xb90 [ 796.648114] ? ip6_tnl_locate+0x9b0/0x9b0 [ 796.652254] ? dev_ifsioc+0x43e/0xb90 [ 796.656043] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 796.661221] ? register_gifconf+0x70/0x70 [ 796.665384] dev_ioctl+0x69a/0xcc0 [ 796.668914] sock_ioctl+0x47e/0x680 [ 796.672544] ? dlci_ioctl_set+0x40/0x40 [ 796.676507] ? expand_files.part.8+0x9a0/0x9a0 [ 796.681086] ? kasan_check_write+0x14/0x20 [ 796.685317] ? wait_for_completion+0x870/0x870 [ 796.689975] ? dlci_ioctl_set+0x40/0x40 [ 796.693937] do_vfs_ioctl+0x1cf/0x16a0 [ 796.697829] ? ioctl_preallocate+0x2e0/0x2e0 [ 796.702236] ? fget_raw+0x20/0x20 [ 796.705696] ? __sb_end_write+0xac/0xe0 [ 796.709665] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 796.715186] ? fput+0x130/0x1a0 [ 796.718454] ? ksys_write+0x1a6/0x250 [ 796.722249] ? security_file_ioctl+0x94/0xc0 [ 796.726658] ksys_ioctl+0xa9/0xd0 [ 796.730106] __x64_sys_ioctl+0x73/0xb0 [ 796.734075] do_syscall_64+0x1b1/0x800 [ 796.737968] ? finish_task_switch+0x1ca/0x840 [ 796.742450] ? syscall_return_slowpath+0x5c0/0x5c0 [ 796.747375] ? syscall_return_slowpath+0x30f/0x5c0 [ 796.752306] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 796.757660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 796.762503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.767676] RIP: 0033:0x455a09 [ 796.770850] RSP: 002b:00007f82ca87bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.778547] RAX: ffffffffffffffda RBX: 00007f82ca87c6d4 RCX: 0000000000455a09 [ 796.785809] RDX: 00000000200000c0 RSI: 00800000000089f0 RDI: 0000000000000014 [ 796.793064] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 796.800317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 796.807580] R13: 0000000000000457 R14: 00000000006fb8c8 R15: 0000000000000000 [ 796.828576] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:50 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x37be000000000000]}, 0x10) 2033/05/18 03:44:50 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0xfdfdffff, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/118) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9703000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:50 executing program 6 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 797.131712] binder: 22475:22481 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 797.180805] binder: 22475:22493 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f39000000000000]}, 0x10) 2033/05/18 03:44:51 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:51 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x11, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 797.270597] binder: undelivered TRANSACTION_ERROR: 29189 [ 797.300676] FAULT_INJECTION: forcing a failure. [ 797.300676] name failslab, interval 1, probability 0, space 0, times 0 [ 797.311981] CPU: 1 PID: 22500 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #75 [ 797.319263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.328621] Call Trace: [ 797.331228] dump_stack+0x1b9/0x294 [ 797.334877] ? dump_stack_print_info.cold.2+0x52/0x52 [ 797.340084] ? percpu_ref_put_many+0x132/0x230 [ 797.344675] ? memcg_kmem_charge_memcg+0x74/0x110 [ 797.349540] should_fail.cold.4+0xa/0x1a [ 797.353619] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 797.358923] ? graph_lock+0x170/0x170 [ 797.362759] ? find_held_lock+0x36/0x1c0 [ 797.366843] ? __lock_is_held+0xb5/0x140 2033/05/18 03:44:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 797.370930] ? check_same_owner+0x320/0x320 [ 797.375258] ? zap_class+0x720/0x720 [ 797.378979] ? __lock_acquire+0x7f5/0x5140 [ 797.383225] ? rcu_note_context_switch+0x710/0x710 [ 797.388247] ? zap_class+0x720/0x720 [ 797.391976] __should_failslab+0x124/0x180 [ 797.396224] should_failslab+0x9/0x14 [ 797.400035] kmem_cache_alloc+0x2af/0x760 [ 797.404200] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 797.409755] ptlock_alloc+0x20/0x80 [ 797.413397] pte_alloc_one+0x6b/0x120 [ 797.417213] do_huge_pmd_anonymous_page+0xdcf/0x1cc0 [ 797.422328] ? __lock_acquire+0x7f5/0x5140 [ 797.426573] ? __thp_get_unmapped_area+0x180/0x180 [ 797.431509] ? debug_check_no_locks_freed+0x310/0x310 [ 797.436726] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 797.441906] ? rcu_read_lock+0x70/0x70 [ 797.445788] ? print_usage_bug+0xc0/0xc0 [ 797.449854] ? page_add_file_rmap+0x779/0xe20 [ 797.454336] ? perf_trace_lock+0xd6/0x900 [ 797.458470] ? page_add_new_anon_rmap+0x850/0x850 [ 797.463302] ? print_usage_bug+0xc0/0xc0 [ 797.467351] ? debug_check_no_locks_freed+0x310/0x310 [ 797.472538] ? pud_val+0x80/0xf0 [ 797.475896] ? pmd_val+0xf0/0xf0 [ 797.479260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 797.484789] __handle_mm_fault+0x2d02/0x4310 [ 797.489212] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 797.493954] ? graph_lock+0x170/0x170 [ 797.497744] ? print_usage_bug+0xc0/0xc0 [ 797.501797] ? find_held_lock+0x36/0x1c0 [ 797.505855] ? lock_downgrade+0x8e0/0x8e0 [ 797.510001] ? handle_mm_fault+0x8c0/0xc70 [ 797.514236] handle_mm_fault+0x53a/0xc70 [ 797.518376] ? __handle_mm_fault+0x4310/0x4310 [ 797.522951] ? find_vma+0x34/0x190 [ 797.526481] __do_page_fault+0x60b/0xe40 [ 797.530535] ? mm_fault_error+0x380/0x380 [ 797.534672] ? graph_lock+0x170/0x170 [ 797.538465] do_page_fault+0xee/0x8a7 [ 797.542426] ? vmalloc_sync_all+0x30/0x30 [ 797.546575] ? find_held_lock+0x36/0x1c0 [ 797.550637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 797.555490] page_fault+0x1e/0x30 [ 797.558938] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 797.564805] RSP: 0018:ffff88018dc67838 EFLAGS: 00010246 [ 797.570157] RAX: ffffed0031b8cf2a RBX: 0000000000000040 RCX: 0000000000000040 [ 797.577413] RDX: 0000000000000040 RSI: 00000000204e0002 RDI: ffff88018dc67910 [ 797.584669] RBP: ffff88018dc67870 R08: ffffed0031b8cf2a R09: ffffed0031b8cf22 [ 797.591929] R10: ffffed0031b8cf29 R11: ffff88018dc6794f R12: 00000000204e0042 [ 797.599183] R13: 00000000204e0002 R14: ffff88018dc67910 R15: 00007ffffffff000 [ 797.606463] ? _copy_from_user+0x10d/0x150 [ 797.610699] ip6_tnl_ioctl+0x843/0xbe0 [ 797.614576] ? perf_trace_lock+0xd6/0x900 [ 797.618730] ? ip6_tnl_locate+0x9b0/0x9b0 [ 797.622864] ? zap_class+0x720/0x720 [ 797.626573] ? find_held_lock+0x36/0x1c0 [ 797.630639] ? ip6_tnl_locate+0x9b0/0x9b0 [ 797.634791] dev_ifsioc+0x43e/0xb90 [ 797.638406] ? ip6_tnl_locate+0x9b0/0x9b0 [ 797.642542] ? dev_ifsioc+0x43e/0xb90 [ 797.646331] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 797.651510] ? register_gifconf+0x70/0x70 [ 797.655652] dev_ioctl+0x69a/0xcc0 [ 797.659191] sock_ioctl+0x47e/0x680 [ 797.662807] ? dlci_ioctl_set+0x40/0x40 [ 797.666776] ? expand_files.part.8+0x9a0/0x9a0 [ 797.671367] ? kasan_check_write+0x14/0x20 [ 797.675598] ? wait_for_completion+0x870/0x870 [ 797.680178] ? dlci_ioctl_set+0x40/0x40 [ 797.684237] do_vfs_ioctl+0x1cf/0x16a0 [ 797.688120] ? ioctl_preallocate+0x2e0/0x2e0 [ 797.692517] ? fget_raw+0x20/0x20 [ 797.695961] ? __sb_end_write+0xac/0xe0 [ 797.699928] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 797.705451] ? fput+0x130/0x1a0 [ 797.708717] ? ksys_write+0x1a6/0x250 [ 797.712518] ? security_file_ioctl+0x94/0xc0 [ 797.716922] ksys_ioctl+0xa9/0xd0 [ 797.720368] __x64_sys_ioctl+0x73/0xb0 [ 797.724262] do_syscall_64+0x1b1/0x800 [ 797.728147] ? finish_task_switch+0x1ca/0x840 [ 797.732630] ? syscall_return_slowpath+0x5c0/0x5c0 [ 797.737550] ? syscall_return_slowpath+0x30f/0x5c0 [ 797.742474] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 797.747915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 797.752751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.757940] RIP: 0033:0x455a09 [ 797.761121] RSP: 002b:00007f82ca87bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2033/05/18 03:44:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f67000000000000]}, 0x10) 2033/05/18 03:44:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)="2f70726f632f2f6970f9ff2f76732f7365637572f335211cbb7094d33628ee82655f74637000", 0x2, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x1000, &(0x7f0000000100)=0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KDENABIO(r2, 0x4b36) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000080)=0x2f66, &(0x7f00000000c0)=0x4) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000340)) [ 797.768819] RAX: ffffffffffffffda RBX: 00007f82ca87c6d4 RCX: 0000000000455a09 [ 797.776074] RDX: 00000000200000c0 RSI: 00800000000089f0 RDI: 0000000000000014 [ 797.783339] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 797.790594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 797.797850] R13: 0000000000000457 R14: 00000000006fb8c8 R15: 0000000000000001 2033/05/18 03:44:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1000000]}, 0x10) 2033/05/18 03:44:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 797.871070] binder: 22510:22512 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 797.920019] binder: 22510:22527 transaction failed 29189/-22, size 0-0 line 2856 [ 797.939338] binder: 22510:22529 unknown command 0 [ 797.961888] binder: 22510:22529 ioctl c0306201 20000240 returned -22 2033/05/18 03:44:51 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 798.072417] binder: undelivered TRANSACTION_ERROR: 29189 [ 798.078571] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:51 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1400, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x6, 0x1, 0x8, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @broadcast=0xffffffff}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e21, @multicast1=0xe0000001}, 'bcsf0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x40000000000}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:51 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4b050000]}, 0x10) 2033/05/18 03:44:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:51 executing program 6 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 798.216821] binder: 22562:22568 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xaf2d]}, 0x10) [ 798.257827] binder: 22562:22568 transaction failed 29189/-22, size 0-0 line 2856 [ 798.354238] FAULT_INJECTION: forcing a failure. [ 798.354238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.357894] binder: undelivered TRANSACTION_ERROR: 29189 [ 798.366201] CPU: 1 PID: 22565 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #75 [ 798.379148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.388506] Call Trace: [ 798.391093] dump_stack+0x1b9/0x294 [ 798.394736] ? dump_stack_print_info.cold.2+0x52/0x52 [ 798.399927] ? __lock_acquire+0x7f5/0x5140 [ 798.404154] ? __lock_acquire+0x7f5/0x5140 [ 798.408378] ? graph_lock+0x170/0x170 [ 798.412169] should_fail.cold.4+0xa/0x1a [ 798.416309] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 798.421400] ? debug_check_no_locks_freed+0x310/0x310 [ 798.426940] ? debug_check_no_locks_freed+0x310/0x310 [ 798.432125] ? debug_check_no_locks_freed+0x310/0x310 [ 798.437311] ? zap_class+0x720/0x720 [ 798.441019] ? print_usage_bug+0xc0/0xc0 [ 798.445078] ? perf_trace_lock+0xd6/0x900 [ 798.449308] ? perf_trace_lock+0xd6/0x900 [ 798.453458] ? zap_class+0x720/0x720 [ 798.457162] ? graph_lock+0x170/0x170 [ 798.460960] ? __lock_acquire+0x7f5/0x5140 [ 798.465182] ? graph_lock+0x170/0x170 [ 798.468971] ? trace_hardirqs_on+0xd/0x10 [ 798.473107] ? try_charge+0xacc/0x1660 [ 798.477010] __alloc_pages_nodemask+0x34e/0xd70 [ 798.481676] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 798.487723] ? graph_lock+0x170/0x170 [ 798.491524] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 798.496531] ? update_load_avg+0x2d9/0x2570 [ 798.500849] ? attach_entity_load_avg+0x850/0x850 [ 798.505688] ? update_load_avg+0x2d9/0x2570 [ 798.510023] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 798.516265] alloc_pages_vma+0x3a0/0x540 [ 798.520321] do_huge_pmd_wp_page+0x1767/0x4580 [ 798.524892] ? rb_erase+0x3530/0x3530 [ 798.528698] ? __split_huge_pmd+0x2b10/0x2b10 [ 798.533202] ? print_usage_bug+0xc0/0xc0 [ 798.537264] ? find_held_lock+0x36/0x1c0 [ 798.541316] ? graph_lock+0x170/0x170 [ 798.545117] ? __lock_acquire+0x7f5/0x5140 [ 798.549349] ? graph_lock+0x170/0x170 [ 798.553141] ? __lock_is_held+0xb5/0x140 [ 798.557194] ? debug_check_no_locks_freed+0x310/0x310 [ 798.562378] ? __lock_is_held+0xb5/0x140 [ 798.566442] ? __account_cfs_rq_runtime+0x600/0x600 [ 798.571449] ? print_usage_bug+0xc0/0xc0 [ 798.575508] ? perf_trace_lock+0xd6/0x900 [ 798.579661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.585189] ? zap_class+0x720/0x720 [ 798.588900] ? __lock_acquire+0x7f5/0x5140 [ 798.593119] ? graph_lock+0x170/0x170 [ 798.596914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.602450] ? __perf_event_task_sched_in+0x247/0xb80 [ 798.607728] ? perf_trace_lock+0xd6/0x900 [ 798.611875] ? debug_check_no_locks_freed+0x310/0x310 [ 798.617061] ? print_usage_bug+0xc0/0xc0 [ 798.621128] ? lock_downgrade+0x8e0/0x8e0 [ 798.625261] ? finish_task_switch+0x182/0x840 [ 798.629749] ? perf_trace_lock+0xd6/0x900 [ 798.633892] ? mark_held_locks+0xc9/0x160 [ 798.638031] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 798.642603] ? pmd_val+0x80/0xf0 [ 798.645960] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 798.650965] ? trace_hardirqs_on+0xd/0x10 [ 798.655111] ? _raw_spin_unlock_irq+0x27/0x70 [ 798.659599] __handle_mm_fault+0x221c/0x4310 [ 798.664003] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 798.668753] ? graph_lock+0x170/0x170 [ 798.672545] ? find_held_lock+0x36/0x1c0 [ 798.676605] ? lock_downgrade+0x8e0/0x8e0 [ 798.681015] ? handle_mm_fault+0x8c0/0xc70 [ 798.685257] handle_mm_fault+0x53a/0xc70 [ 798.689315] ? __handle_mm_fault+0x4310/0x4310 [ 798.693890] ? find_vma+0x34/0x190 [ 798.697423] __do_page_fault+0x60b/0xe40 [ 798.701479] ? mm_fault_error+0x380/0x380 [ 798.705613] ? print_usage_bug+0xc0/0xc0 [ 798.709670] ? graph_lock+0x170/0x170 [ 798.713555] do_page_fault+0xee/0x8a7 [ 798.717342] ? vmalloc_sync_all+0x30/0x30 [ 798.721480] ? find_held_lock+0x36/0x1c0 [ 798.725647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 798.730492] page_fault+0x1e/0x30 [ 798.733946] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 798.739813] RSP: 0018:ffff88017db8f838 EFLAGS: 00010246 [ 798.745176] RAX: ffffed002fb71f2a RBX: 0000000000000040 RCX: 0000000000000040 [ 798.752440] RDX: 0000000000000040 RSI: ffff88017db8f910 RDI: 00000000204e0002 [ 798.759705] RBP: ffff88017db8f870 R08: ffffed002fb71f2a R09: ffffed002fb71f22 [ 798.766961] R10: ffffed002fb71f29 R11: ffff88017db8f94f R12: 00000000204e0042 [ 798.774226] R13: 00000000204e0002 R14: ffff88017db8f910 R15: 00007ffffffff000 [ 798.781782] ? _copy_to_user+0xf6/0x110 [ 798.785749] ip6_tnl_ioctl+0x41a/0xbe0 [ 798.789629] ? perf_trace_lock+0xd6/0x900 [ 798.793806] ? ip6_tnl_locate+0x9b0/0x9b0 [ 798.797958] ? zap_class+0x720/0x720 [ 798.801691] ? ip6_tnl_locate+0x9b0/0x9b0 [ 798.805827] dev_ifsioc+0x43e/0xb90 [ 798.809442] ? ip6_tnl_locate+0x9b0/0x9b0 [ 798.813575] ? dev_ifsioc+0x43e/0xb90 [ 798.817363] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 798.822541] ? register_gifconf+0x70/0x70 [ 798.826686] dev_ioctl+0x69a/0xcc0 [ 798.830217] sock_ioctl+0x47e/0x680 [ 798.833833] ? dlci_ioctl_set+0x40/0x40 [ 798.837799] ? expand_files.part.8+0x9a0/0x9a0 [ 798.842464] ? kasan_check_write+0x14/0x20 [ 798.846699] ? wait_for_completion+0x870/0x870 [ 798.851267] ? dlci_ioctl_set+0x40/0x40 [ 798.855241] do_vfs_ioctl+0x1cf/0x16a0 [ 798.859294] ? ioctl_preallocate+0x2e0/0x2e0 [ 798.863710] ? fget_raw+0x20/0x20 [ 798.867158] ? __sb_end_write+0xac/0xe0 [ 798.871134] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 798.876658] ? fput+0x130/0x1a0 [ 798.879937] ? ksys_write+0x1a6/0x250 [ 798.883739] ? security_file_ioctl+0x94/0xc0 [ 798.888151] ksys_ioctl+0xa9/0xd0 [ 798.891607] __x64_sys_ioctl+0x73/0xb0 [ 798.895485] do_syscall_64+0x1b1/0x800 [ 798.899469] ? finish_task_switch+0x1ca/0x840 [ 798.903963] ? syscall_return_slowpath+0x5c0/0x5c0 [ 798.908977] ? syscall_return_slowpath+0x30f/0x5c0 [ 798.913908] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 798.919270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 798.924107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.929370] RIP: 0033:0x455a09 [ 798.932545] RSP: 002b:00007f82ca87bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.940244] RAX: ffffffffffffffda RBX: 00007f82ca87c6d4 RCX: 0000000000455a09 [ 798.947500] RDX: 00000000200000c0 RSI: 00800000000089f0 RDI: 0000000000000014 [ 798.954754] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 798.962013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 798.969274] R13: 0000000000000457 R14: 00000000006fb8c8 R15: 0000000000000002 2033/05/18 03:44:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:52 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:52 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:52 executing program 6 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfeffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f00]}, 0x10) 2033/05/18 03:44:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 799.182443] binder: 22601:22602 transaction failed 29189/-22, size 0-0 line 2856 [ 799.220290] binder: 22601:22602 ioctl c0306201 20000240 returned -14 2033/05/18 03:44:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:44:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') ioctl$KVM_NMI(r1, 0xae9a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2033/05/18 03:44:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2daf]}, 0x10) 2033/05/18 03:44:53 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 799.246955] binder: 22601:22602 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:53 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x100000000000000, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008948, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 799.418821] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x77ec000000000000]}, 0x10) 2033/05/18 03:44:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:44:53 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) sendto$inet6(r0, &(0x7f0000000000)="3bb1f12aeeeafe34122c8e60085bce594b1ed047f99e9c7a4ab193774e34eff7fe566698f4620c957f8961b3f18a31fe91af6bdc3b827b75e76aec77a71e7a0f3505259b41667de15754", 0x4a, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x100, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/106, &(0x7f00000001c0)=0x6a) [ 799.507537] binder: 22634:22636 transaction failed 29189/-22, size 0-0 line 2856 [ 799.546108] binder: 22634:22636 ioctl c0306201 20000240 returned -14 2033/05/18 03:44:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 799.606703] binder: 22634:22651 transaction failed 29189/-22, size 0-0 line 2856 [ 799.647634] binder: 22634:22656 unknown command 0 [ 799.674271] binder: 22634:22656 ioctl c0306201 20000240 returned -22 [ 799.726677] IPVS: length: 106 != 8 [ 799.741845] binder: undelivered TRANSACTION_ERROR: 29189 [ 799.759256] IPVS: length: 106 != 8 2033/05/18 03:44:53 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfdffff00000000, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:44:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008929, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x9b, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x200000000000000}, 0xfffffe56) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7733]}, 0x10) 2033/05/18 03:44:53 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 800.162901] binder: 22684:22685 transaction failed 29189/-22, size 0-0 line 2856 [ 800.196765] binder: 22684:22685 ioctl c0306201 20000240 returned -14 2033/05/18 03:44:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000005460, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7c9]}, 0x10) 2033/05/18 03:44:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 800.223519] binder: 22684:22685 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:54 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:54 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x1000000, &(0x7f0000000180)="b1"}) [ 800.318966] binder: undelivered TRANSACTION_ERROR: 29189 [ 800.401381] binder: 22713:22715 transaction failed 29189/-22, size 0-0 line 2856 [ 800.438846] binder: 22713:22715 ioctl c0306201 20000240 returned -14 [ 800.463536] binder: 22713:22715 transaction failed 29189/-22, size 0-0 line 2856 [ 800.508882] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008995, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3ff2]}, 0x10) 2033/05/18 03:44:54 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:54 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfdffff, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 801.177837] binder: 22728:22740 transaction failed 29189/-22, size 0-0 line 2856 [ 801.210286] binder: 22728:22740 ioctl c0306201 20000240 returned -14 2033/05/18 03:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000005421, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x505f]}, 0x10) [ 801.244685] binder: 22728:22740 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:55 executing program 0: rt_sigprocmask(0x2, &(0x7f0000000040)={0x1}, &(0x7f0000000080), 0x8) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a0750906000000000000cdb0bc4d0009ff41f159de82102d"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:55 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 801.362153] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f1, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 801.417483] binder: 22769:22773 unknown command 101283232 [ 801.453373] binder: 22769:22773 ioctl c0306201 20007000 returned -22 [ 801.507525] binder: 22769:22773 ioctl c0306201 20000240 returned -11 [ 801.527712] binder: 22769:22786 unknown command 101283232 [ 801.540638] binder: 22769:22786 ioctl c0306201 20007000 returned -22 2033/05/18 03:44:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x54b]}, 0x10) 2033/05/18 03:44:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089a3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:55 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff7fffffff, 0x1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:55 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x2, 0x80) sendmsg$nl_netfilter(r1, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000001440)={&(0x7f0000000200)={0x1214, 0x5, 0x2, 0x720, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x4}, [@typed={0x1004, 0x38, @binary="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"}, @nested={0x1ac, 0x1e, [@typed={0x8, 0x15, @u32=0x4}, @generic="83840e048994a0cbaccdfb227559a0acba370159775bb6dab5bb9d86565c20e63c5c292fe08b07e4764ee17a00c5fc3195c0b7e4cb22edb1273d362622da011900249313aa8875175fb1b3824be96d14e010438989ca48efff9d6c184d1abf2dc47cacb6449c4a1102ff8078f476221903cb681b8c15172c9bbe7440af9d88310b8522056f921d46d8be620113f13129601725fe75377446a2e22207dadf2517f5645f52e17ded187e9cb913f687e3bd74a5b9d8057c4dc15e3be549eb0627983c9528b9b69d9944669ac79cd89abf78e48a85ab1953da3d69674e330836e2510104fc38649ba46ac92e0c2771b9e55df820", @typed={0x10, 0x44, @str='/dev/vcsa#\x00'}, @generic="a838ca0cb9b87c495777f35cb1cf9af1545dab49068ad008c6a34d78292840bda61cc70705227ed46e1d66e61331084dc9b8ba54ce1bac7e99c951323e87257688d4840d0c4a89f239ded1ffa5e652cdb3aa336ba6dd7111476b06977e8e7b2c7e69d67f79d09a2b1d56a11dde7914bf11b9b85ca7197f33c10608fa84dd0d5b9e3f50d72c6ad87956e5425a6a43d47af6f17f47e37069570418d9b488c8"]}, @generic="c4447515504025617ca79cb5b87f11a21fe1d6a109c30f22f53d28c305b9804052cbff1e44ee5a9957b2ee911c6f0fb2f5bd6ed7ffcc487e4ad96a0a691bc5338919806dde0327463431adec7f"]}, 0x1214}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000050) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400) r3 = accept$alg(r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000040)=""/77, &(0x7f00000000c0)=0x4d) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000014c0)=""/197) [ 802.188111] binder: 22812:22814 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008937, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa7b2000000000000]}, 0x10) [ 802.236012] binder: 22812:22818 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0) 2033/05/18 03:44:56 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:56 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11635840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0xfffffffffffffff7, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008924, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 802.458528] binder: 22840:22841 unknown command 1079534353 [ 802.502132] binder: 22840:22841 ioctl c0306201 20007000 returned -22 [ 802.526432] binder: 22840:22841 ioctl c0306201 20000000 returned -11 [ 802.544288] binder: 22840:22841 unknown command 1079534353 [ 802.555593] binder: 22840:22841 ioctl c0306201 20007000 returned -22 2033/05/18 03:44:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6784]}, 0x10) 2033/05/18 03:44:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="be", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0) 2033/05/18 03:44:56 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089a2, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xb804000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:56 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x5, 0x6, 0x7fffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x100, 0x7, 0x4288cc78, 0x80000001, 0x6, 0x0, 0x7ff}, {0x3, 0x8cb1, 0x3f, 0x0, 0xbe01, 0x2ae, 0x3, 0x100000000, 0x7, 0x6, 0x3, 0x0, 0x1}, {0x1, 0x8, 0x4, 0xaa6, 0x3f, 0x3, 0x9, 0x0, 0x64, 0x6, 0x4000000, 0x3f, 0x6}], 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 803.131393] binder: 22863:22871 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008946, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:56 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0) [ 803.177346] binder: 22863:22871 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x100000000000000]}, 0x10) 2033/05/18 03:44:57 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="845aa81278f3d163881ada8186e66aa5207b71677c4002008971") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x8000000802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000000002, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 803.294676] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000fffffd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 803.360749] binder: 22898:22899 transaction failed 29189/-22, size 0-0 line 2856 [ 803.442565] binder: 22898:22899 transaction failed 29189/-22, size 0-0 line 2856 [ 803.497270] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:57 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f00000000000000]}, 0x10) 2033/05/18 03:44:57 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0xa, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r2 = getgid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r5 = getgid() getgroups(0x5, &(0x7f00000003c0)=[r1, r2, r3, r4, r5]) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r6, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r7 = syz_open_dev$sndmidi(&(0x7f0000000440)='/dev/snd/midiC#D#\x00', 0x276, 0x80) connect$netrom(r7, &(0x7f0000000480)=@full={{0x3, {"d96bfb19295888"}}, [{"ce13dd3be39d7e"}, {"fd81bfc2c54343"}, {"91514e94d544ad"}, {"75a9f49248bf07"}, {"64b3b7c2b202e8"}, {"fa43260a20bf62"}, {"03802c41926873"}, {"cf12f898ae862b"}]}, 0x48) r8 = memfd_create(&(0x7f00000001c0)=')\x00', 0x2) ioctl$int_out(r8, 0x5462, &(0x7f0000000400)) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f0000000200)) ioctl$LOOP_SET_FD(r0, 0x4c00, r6) connect(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x3, 0x4, 0x1, {0xa, 0x4e24, 0xc3b, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}}, 0x80) ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, &(0x7f0000000240)={0x7fffffff, 0x4, 0x80, 0x200}) socketpair(0x9, 0x7, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000080)=0x40) 2033/05/18 03:44:57 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0100000007d82c99244715") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffe01, 0x8b01311fee829b85) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xe0, 0x2fc, "0f7ca982982c6e0f54ed5a18fbb2ac272e04ee84b51c13235ab079de586367caa4dcb49b7b2906bcc2062d04f33070d76c44461b09a31a04db8ffa2cfbcba35723ebddda6ce0d9a2b2ad809a6d78b49fc5aee964e36b3a4eb4153725bb4b2ee524ed457fe02a73c9068f095ef712bc1063adb00a94aff5a4ee82ea19ae4fdb3d8ec98dacb1a467ee497a6f76dd0fa8ff75b281b05414e72c1dade975a0a85503cc65cf409543a14a5e3cba27a049c19473417a97617416171733b4f3e0d28ca9188496a0c21de558451bad660656e9ec2de31930f0dcda17"}, &(0x7f00000001c0), 0x1000) 2033/05/18 03:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008932, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x97030000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:57 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008947, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 804.111804] binder: 22926:22927 transaction failed 29189/-22, size 0-0 line 2856 [ 804.130528] binder: 22931:22932 transaction failed 29189/-22, size 0-0 line 2856 [ 804.145920] binder: 22926:22927 ioctl c0306201 20000240 returned -14 2033/05/18 03:44:57 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4b05000000000000]}, 0x10) [ 804.179627] binder: 22931:22932 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:58 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008993, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:58 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000000040)=""/4, 0x4) ioctl(r2, 0xffffffff, &(0x7f0000000080)="971551b83d59ba90f3c47a76af63d4c71f68d297e484feb01256350fd70b69ad2dd5b97bde8a6147b9b3fe43e2ec9a3ba42e656d0395c5b6829d14fa5131a8a847207abc8ccbdcabab4ac820f6be5bd4800c46f1681c11ded4a6195b3f287f74b8bf107899d75d3cbdea57e627e32f35849a25de8759f8573dc5f92fd6795827ca257be4f43763436319465e9181d8eb73a657aa8979fdcf1080c9342f772fb3861a0ccd68c587d17ce1d8dc0b02a7d5ab3e84a79653a48d6a6ec8e0091868a2a115f9715422208f5bd2025b19412468d46a05783f13f25b1786aba71318c4f465edc220e80b6be639") [ 804.320581] binder: undelivered TRANSACTION_ERROR: 29189 [ 804.359864] binder: 22962:22964 transaction failed 29189/-22, size 0-0 line 2856 [ 804.395841] binder: 22969:22971 transaction failed 29189/-22, size 0-0 line 2856 [ 804.406920] binder: 22962:22964 ioctl c0306201 20000240 returned -14 [ 804.431602] binder: 22969:22971 transaction failed 29189/-22, size 0-0 line 2856 [ 804.520363] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:44:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8000000000894a, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xafe60000]}, 0x10) 2033/05/18 03:44:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x40000000}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:58 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:58 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8913, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x1) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) accept4$ipx(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x98, 0x0, &(0x7f0000000080)="56adae57e4a0293f41fa306428c51a62f73fdcf4ff7e8e021bec773b7a2e80613b28be783bc32123321d13c9dfda7a856c0e14b63fce9efcc20350d5ded74d7ed635faf5b7fb5d018e95ec0ae965db58552ee3f48e0512492e9807f89d8f4b16cd595b366e62832fed971774df647b39f1591161ede4a63662898d554e5ec53d9d58cf9c4adb55e822f6abb97563346e7d2c45ebacd658fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 805.095109] binder: 22989:22990 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008914, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8ff7]}, 0x10) [ 805.144920] binder: 22989:22990 ioctl c0306201 20000240 returned -14 2033/05/18 03:44:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:59 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 805.197852] binder: 22985:22986 transaction failed 29189/-22, size 0-0 line 2856 [ 805.221431] binder: 22985:22986 ioctl c0306201 20000240 returned -11 2033/05/18 03:44:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000aaff09)="b8", 0x1, 0x48081, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$kcm(0x29, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8105, 0x3ff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008971, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:59 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 805.309751] binder: 22985:23026 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:44:59 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = msgget$private(0x0, 0x100) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/3) mq_unlink(&(0x7f0000000140)='/dev/binder#\x00') r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8, 0x183001) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000340)={0x335, 0x80000001, 0xfffffffffffffff9, 0x2, 0x9, 0x1, 0xff, 0x5, 0x0, 0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x80002, 0x0) setuid(r4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b591b2ff7ced71071351d3d0a35dedf1e404fb247030598aa75f6ee3e9e6800a8ed004e7bdf05cfda4d8f12ed5d110089fb980b0540903636615299bf4fe442ff6d08d1e0e9925a6fd0a37bef2bd8ceaa9f530fdbd5650b94a147a7e0557b1547ad62c6526f58e967115253377250e6becaaf79b73480c67cfb7489c178aa0290bed1745efcf70217cf77dc930bbf40ff8d531b8e9e0a34d63a932e321833f1a9f788e54f2f936510faafe6bda91dcc303c79b96c593b14e4bc48da60e05cd3510170009bc1e7e2e29f0"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:59 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 805.517325] binder: 23052:23053 unknown command -5074507 [ 805.550297] binder: 23052:23053 ioctl c0306201 20007000 returned -22 [ 805.566177] binder: 23052:23053 ioctl c0306201 200001c0 returned -11 [ 805.590456] binder: 23052:23053 unknown command -5074507 [ 805.596271] binder: 23052:23053 ioctl c0306201 20007000 returned -22 2033/05/18 03:44:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4fa1000000000000]}, 0x10) 2033/05/18 03:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8000000000891e, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:59 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4b8, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:44:59 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:44:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x6}, 0x8) 2033/05/18 03:44:59 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='-wlan1^-\x00', 0xfffffffffffffffa) keyctl$invalidate(0x15, r1) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6f632740e56577e3cd39a60093f0725d4039df8c451e24f41e489aca603db95f0a249261ab0fcf7ec5682f207829f755982d56206c0647bfc81a6645dfb08b4995febc87dddbf6992aab09d345ea27d23e61a3e85af6159cee42e524faa175b204ba753c11cd6b0867d4598bf1f37ef27f0de35e1283684f6ccf7e272d110f3dcef11de2cd54cd7e527e17a27226628e0e4e51798db97088804eec1b432fa84f4a896f0235a35ac4624f99e5557edd1d7b"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffe3d, 0x0, &(0x7f0000000140), 0x1d6, 0x0, &(0x7f0000000180)='Q'}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x30000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x99ab, 0x4e21, 0x1, 0x2, 0x0, 0x80, 0x87, r4, r5}, {0x4, 0x6, 0x10001, 0xff, 0x6, 0x48000000000000, 0x6, 0x6}, {0x3, 0x1f, 0x100000000, 0xab}, 0x8, 0x6e6bc0, 0x0, 0x1, 0x1, 0x2}, {{@in6, 0x4d2, 0xff}, 0xa, @in=@loopback=0x7f000001, 0x0, 0x4, 0x1, 0x7, 0x3, 0x4cc9, 0x1}}, 0xe8) 2033/05/18 03:44:59 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 806.081523] binder: 23068:23071 unknown command 1076323183 [ 806.108689] binder: 23068:23071 ioctl c0306201 20007000 returned -22 2033/05/18 03:44:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:44:59 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008970, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 806.137481] binder: 23068:23071 ioctl c0306201 200000c0 returned -11 [ 806.167177] binder: 23068:23071 unknown command 1076323183 2033/05/18 03:44:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xef5b]}, 0x10) [ 806.193472] binder: 23068:23071 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:00 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:00 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ae5f03cf53d5bdfca5fa5c098647e0c6227219f4bb25938f9b1978ced876f7098415fee12552b147df005a774869634c307c4b43ad6245afb6ca86b2089f240000"], 0x0, 0x0, &(0x7f0000000040)}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:00 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) [ 806.417928] binder: 23118:23119 unknown command 0 [ 806.439643] binder: 23118:23119 ioctl c0306201 20000080 returned -22 [ 806.450419] binder: 23118:23119 ioctl c0306201 20000240 returned -11 [ 806.461651] binder: 23118:23119 unknown command 0 [ 806.468972] binder: 23118:23119 ioctl c0306201 20000080 returned -22 2033/05/18 03:45:00 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40000) connect$ipx(r2, &(0x7f0000000040)={0x4, 0x8, 0x7fff, "1157bfc800a7", 0x1ff}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) getrandom(&(0x7f00000000c0), 0x0, 0x2) 2033/05/18 03:45:00 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:45:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8000004020940d, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xacdf]}, 0x10) 2033/05/18 03:45:00 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:00 executing program 0: r0 = socket$kcm(0x29, 0x1005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) [ 807.101583] binder: 23142:23143 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xcf440000]}, 0x10) [ 807.151264] binder: 23142:23143 transaction failed 29189/-22, size 0-0 line 2856 [ 807.266240] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089b1, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:01 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0xfffffffffffffeff) 2033/05/18 03:45:01 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:45:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffff000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f8000000000000]}, 0x10) 2033/05/18 03:45:01 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x10001, 0x7, [0x400, 0x2, 0x49, 0x5, 0x8, 0x2, 0x4]}, &(0x7f0000000080)=0x16) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0xbb46}, &(0x7f0000000100)=0x8) socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x2000008912, &(0x7f0000000540)="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") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="32a84337ecfb83208366fa8785fa23664397e56023eddf399732485bf90e2467ee29f4ecd78f9ac0ded3e8e12ebc45ac21a8ef364aad98df5337b8d7280210b75da58c5d1cdef9d0789ca54e01514a0b9bac9b3d406a66744201d4a6f19dbf743fa189a91eec2a0a155a02c5e2056e4d260d39b4f1907230da04f049126e3487e41543ade159ef29a5c691b411cca5cf96dcb3c55ed7e10cc2eaa8c982dd4bb2a38ff9655b6719411bc840580ab8362e296b91ea84e7e97d3c34a2ecfaacb70b3b073397106775905705fe08e5653be8aa62ec9f4c78e727bd045ede2b2c132fd92ffc07a950a426"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 808.082235] binder: 23178:23180 transaction failed 29189/-22, size 0-0 line 2856 [ 808.083835] binder: 23176:23179 unknown command 927180850 2033/05/18 03:45:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008913, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 808.138297] binder: 23176:23179 ioctl c0306201 20007000 returned -22 [ 808.144568] binder: 23178:23180 ioctl c0306201 20000240 returned -14 [ 808.176643] binder: 23176:23179 ioctl c0306201 20000240 returned -11 2033/05/18 03:45:01 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xb7610000]}, 0x10) 2033/05/18 03:45:02 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x6fce, 0x0, 0x8, 0x8, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 808.216300] binder: 23176:23193 unknown command 927180850 [ 808.245818] binder: 23176:23193 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:02 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x26, 0x0, &(0x7f0000000040)="addfca0a429dd0a81e4546b04eb8ed0efb87ad6bd6fa16c55dcb2aa80a20b194dcfcb2d35fda9f2b71b322f52ad98e73eaf3f68d177451505f528785b6f8842fb1704424a9b985b4b2961a7667726d854d5381248362306ec4858c21fe2dd3308187e417115bedfc7c3bbb8e947bd30651ecef987fceb2d64f6f65b0a106000000000000002771f7718355616a3eac8fc0e327afef630e168b225e2eaaf5164a1ac44b61863bee4b73004169cdb79a2c52"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000005452, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 808.300698] binder: 23203:23204 transaction failed 29189/-22, size 0-0 line 2856 [ 808.358105] binder: 23203:23204 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:02 executing program 7: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3705]}, 0x10) 2033/05/18 03:45:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 808.430482] binder: 23217:23218 transaction failed 29189/-22, size 0-0 line 2856 [ 808.492101] binder: 23229:23230 transaction failed 29189/-22, size 0-0 line 2856 [ 808.508798] binder: 23217:23218 transaction failed 29189/-22, size 0-0 line 2856 [ 808.564690] binder: 23229:23230 ioctl c0306201 20000240 returned -14 [ 808.595636] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8a7, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x9}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="270000b7fac5de44eaf503000000000000000047cb341e520000a624ef99183a10dcb10000000000000000"], &(0x7f00000002c0)=0x2f) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) rt_sigtimedwait(&(0x7f00000001c0)={0x5}, &(0x7f0000000200), &(0x7f0000000240), 0x8) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0xffff) 2033/05/18 03:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8000000000891f, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xdc05]}, 0x10) 2033/05/18 03:45:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:02 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x41) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3f000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:02 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:02 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 809.092589] binder: 23248:23258 transaction failed 29189/-22, size 0-0 line 2856 [ 809.092881] binder: 23246:23257 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe]}, 0x10) 2033/05/18 03:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000005451, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 809.141945] binder: 23248:23260 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:02 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:02 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80040, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000140)={0x0, 0x81, 0x3ff, &(0x7f0000000100)=0x1f}) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 809.233876] binder: undelivered TRANSACTION_ERROR: 29189 [ 809.254500] binder: 23246:23257 ioctl c0306201 20000240 returned -14 [ 809.319978] binder: 23283:23284 transaction failed 29189/-22, size 0-0 line 2856 [ 809.358978] binder: 23283:23284 transaction failed 29189/-22, size 0-0 line 2856 [ 809.428852] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2]}, 0x10) 2033/05/18 03:45:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008911, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:03 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:03 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0) 2033/05/18 03:45:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x100005, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x17, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:03 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@empty, @broadcast, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xa4, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x931, 0x70bd27, 0x25dfdbfb, {0x0, r3, {0xffff, 0xc}, {}, {0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x91}, @TCA_STAB={0x20, 0x8, @TCA_STAB_BASE={0x1c, 0x1, {0x1, 0x9, 0x9, 0x2, 0x0, 0x1, 0x8}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x7c}, 0x1}, 0x4000080) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000300)={0x9, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') [ 810.101867] binder: 23306:23308 transaction failed 29189/-22, size 0-0 line 2856 [ 810.105321] binder: 23297:23299 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:03 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0) 2033/05/18 03:45:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008920, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 810.154649] binder: 23306:23308 ioctl c0306201 20000240 returned -14 [ 810.156996] binder: 23297:23299 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f000000]}, 0x10) 2033/05/18 03:45:04 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:04 executing program 0: r0 = add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="7fcb0ed96b3126c3fbd78e48d4d1dd76933f5951cf6051ee11e6d288551edd5a3f6b7e7fd78054fd8574323265f0a4a85103d40cdae57587ddb0cc7512dac92408763aae479ea42b2abc634f09296183f7eca48a1b006b56f883d888414d3226270c9ca8568b5f9947e9b18e19b49bd399f0e84c5e85af4156cec721c1cd2dd0be01826d6c920af108c76c10c01fd4d5f017a8af1308bdb8d6c57e57d4062536c6e4589ac9c815400d40476a084debcf3c", 0xb1, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='/dev/binder#\x00', r0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:04 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0) 2033/05/18 03:45:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000c0045878, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 810.309145] binder: undelivered TRANSACTION_ERROR: 29189 [ 810.336965] binder: 23336:23337 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc8050000]}, 0x10) [ 810.387233] binder: 23341:23345 ioctl c0306201 20000240 returned -11 [ 810.402783] binder: 23336:23337 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:04 executing program 7: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:04 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000c80)={{0x7, 0xfffffffffffffffb, 0x8, 0xff, 0x1, 0x5}, 0x1, 0x1, 0xb2, 0x0, 0x1000, "65a9c5250aac505e3538a71c8d18c49bf3e9b4d62b13e84d8121298ec9c4ef68e79c7d1c328aea80f792b8cbe8addaf68d876afbd7021f9cc61ecae717f1ac71ceba878cd773e7af0e07f868743c43bc606fc8a9ac5c71237d316defe15c4366cf7153ca5ed499db9004881d8d3c564c46a902126af3253b89677da46ea7467e"}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x220101, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000f00)) socket$inet6(0xa, 0x2, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x4e, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000d40)=0xfffffffffffffda3) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000c00)) r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) recvmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000a40)=""/210, 0xd2}], 0x2, &(0x7f0000000b80)=""/23, 0x17, 0xffffffffffffff4f}, 0x1) r4 = semget$private(0x0, 0x3, 0x20) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/90) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000e80)=0xe8) r6 = getegid() fchown(r1, r5, r6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@hci={0x1f, r7, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="1493bbc44d22e762d5dfadce84d7d470e4dcb908880755f769b2e453eaddf11dd7afac24c93bafcddb1a6b4be44d13597ebfd2540fe846583c6a36035624bcdf6bc3557d49fa6a1ee5f713d1432923f8e53e33cceb4b26ac14517c55deff0f40bb4c0131d0b63063a6d9f4b72a95a1ad192fa88ad188d2f406bfe04c943430af434565c9741816fbaeb861e0775f46aead296ae7467b8410969b8420727bb9da232c74425b7f96dac8614041ca3704939c", 0xb1}, {&(0x7f00000001c0)="ce92a90d6dd3f08cf8839f9d1ebf59a898f2299d03b7c22228239d3d046e39d41c74462909caf176f61d8df9919dad91c82f", 0x32}, {&(0x7f0000000440)="af251ff9ee130664ba529a8296eccbbda05bf18c75de0d12be81a74a5be16154dd6562163e3fb434b1ff46b9e2d0e9cb3ded3479f4b83566ed257faf53f87153b47d18f33a21b1ffb3ea057f6a264ca81c5fe50c7312515dd3795395c26bb7985a60f9220cc9d47b91e690fa1c61a29433e7fb3821118b932b46d00e704b421da9958771b4c0ea3882a9b19a2061fa21d894dd278079c9ef2c0b2fa334df4517b27db58f1eb7c1db287c89c6864ef297bd654dc9ab1d8088609b1209ff4e", 0xbe}], 0x3, &(0x7f0000000540)=[{0x58, 0x1ff, 0x9, "f38b1e68b5499aca62ad140c18a5350bb382ce3c095dac88a9e18c4985c3fec9f79516c49516b803a7c45f693c4995ecf1f5d37a1325de776d154fc40699799a6cab0e"}, {0xb0, 0xff, 0x4, "621dcaef6d8769589d9dcb28fb8eef865a1aa815b8c5117c9ee2f3ed048f2cdb50818c023268b65edcd4bbe4e26fd69cab6d05cdb1fd268e7b2d28c928d011797a10797f09f57daa07b636c7a9a49add48538b2d1c8e1aa6b5ffb83a868f25a154473e4804691395cabcf9e5fb770700d89777a13a865b7ada5b92b1070f3255d5635c10c7fcf3ff280ccd8c236decdd84b21d269d531db3b9e54274a047ecd1"}, {0x30, 0x103, 0x8, "0dd440796d9fcedef54b7400928d0dc598bfcbcc66d276f2cfcb1ca79964"}, {0xd0, 0x103, 0x5, "97ea2e0800b942ae889d92dc38ec27f212fadb15c4a64d77a50d76ffb255edca5182c419fc8890589a85a098529142c40662191075340c4f683a88612e09096e6ff5c7d75c4177f550203c6947bbe7971f4c434618708834a5c18031f272c901f8c5c8b60bfc592c55f961b476801c6865daffc37dd71d1f7c8e348d837b6b931067dc372065e60920e6c349852a4ce5392ab5df0a81f131e5f4b4ecec85d6de8425300986f19d8d8a82f15fd320f6b753d108ca55b79f4fb4fb0d9265"}, {0xb0, 0x117, 0x2f73, "c082a0ef6ab680fd4d40c083b9be0686d7e6ed69b115edf978ed9a3098686cc03ead3f2a37681d9619fec28583f74e75186c9754caecf53b778c9499aacd6984ab7ff2772f46ba7d6fd1cd3f5f6d04b476ed7861ed73d229f41723c28efe604e67f7c99fd743558df84a1857114b1ec65241d8f2a60c9b949cc2990305ea0e42162213a4007a5a2b7d8153fca9e54ad3046d5a1d153bdc2f351e4a5e"}, {0xc8, 0x10d, 0x6, "b9abde766c513470cecac5442302df756b6f8cfe8d70d928a0d4bf1bcdb0da564abf89be83a7eb0ebfd774b1a6ffe23f6ea51bfd8f13d9e2b87c18612760102763723c5079614567d4ceaabda224589fbac87b451a7dddc43663766b90c2397bb9f9aad1eab6a90206d0fb7a09d52c1c86449aa4023f78bd3f4e2b282b2d2cb2b67f008e42a9931693df73c01744b6cc71ee7910f35a55378a0780cbeed0f36491e9e83a9f986226cd3b55622f32109ecc9a"}], 0x380, 0x8010}, 0x40010) [ 810.586760] Unknown ioctl -2147202861 [ 810.590853] binder: 23367:23369 transaction failed 29189/-22, size 0-0 line 2856 [ 810.638317] binder: 23367:23369 ioctl c0306201 20000240 returned -14 [ 810.643568] binder: 23366:23370 unknown command 0 [ 810.652242] binder: 23366:23370 ioctl c0306201 20007000 returned -22 [ 811.504210] Unknown ioctl -2147202861 2033/05/18 03:45:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:05 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7494f89618634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @multicast2=0xe0000002}, {0x7}, 0x4c, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 'yam0\x00'}) 2033/05/18 03:45:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:05 executing program 7: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008942, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3f00, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffff000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xbf95]}, 0x10) [ 811.529913] binder: 23366:23382 unknown command 0 [ 811.534880] binder: 23366:23382 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008994, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 811.625004] binder: 23396:23397 transaction failed 29189/-22, size 0-0 line 2856 [ 811.640894] binder: 23404:23405 unknown command -1762093964 [ 811.664448] binder: 23404:23405 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f22]}, 0x10) [ 811.671835] binder: 23396:23397 ioctl c0306201 20000240 returned -14 [ 811.691331] binder: 23404:23405 ioctl c0306201 20000240 returned -11 [ 811.714643] binder: 23404:23405 unknown command -1762093964 2033/05/18 03:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:05 executing program 7: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 811.742239] binder: 23404:23405 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:05 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100)=0xb76, 0x4) socket$kcm(0x29, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8d0886aa1ed059503fe388c0f1123d956caa7ee33cb17af1d6f21eb82fc7fe6d79edc3bd259e7d1981fe64419d03c308233faecd26b7fa7e08cf1cc75d3693549a8da7e966c2a0c12abde32cc7fbe03729e0d6f76a268ce2eedcc6f75f054b79ce8b27f9e0eea94b49349a6d0c83ddc327aab80fd6b9e52f9b12ee96959d21e4602f2eed775a5e8f3ce44334d2758e4e24ae48e92baba7a6f1d02ce4932ff2dd2e0885f63afb1c34585f3209017567a4ec083f3235b48b09b2b724bfcbd6de92a817746dadd626dc7f3a9283ab2274dd9e09b25709c5ad"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008949, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 811.825117] binder: 23427:23429 transaction failed 29189/-22, size 0-0 line 2856 [ 811.857626] binder: 23427:23429 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x974a000000000000]}, 0x10) 2033/05/18 03:45:05 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 811.931969] binder: 23435:23437 unknown command -1434056563 [ 811.953910] binder: 23435:23437 ioctl c0306201 20007000 returned -22 [ 811.982834] binder: 23443:23444 transaction failed 29189/-22, size 0-0 line 2856 [ 812.004480] binder: 23435:23437 ioctl c0306201 20000240 returned -11 2033/05/18 03:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f2, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 812.032988] binder: 23443:23444 ioctl c0306201 20000240 returned -14 [ 812.039968] binder: 23435:23454 unknown command -1434056563 [ 812.052135] binder: 23435:23454 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x397, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1fdb000000000000]}, 0x10) 2033/05/18 03:45:06 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:06 executing program 0: r0 = socket$kcm(0x29, 0x80000000008, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="eba63007655bb9f6b1d49c905a1881257e45054086fc9b2985d7768e5e093146ddfc2da3b9e48543e42957a01a6d07eab0cdaefb75c975198988688183959e5cd49b41f4ae0ae348a49ab54dac304773d2a4d2ad20b4867362f312945c52db80e5bc23fcfee5b5c2ccf054706a628ea80f3dc5aa3e01ce46b751b39d3c9155503083ef9a3f1751d31493e3abd063a33fe1b3"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400400, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x7, 0x1, 0xf, 0x17, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d4, 0x10001, 0xf71a00000000, 0x8c, 0x2, 0x1}, @sadb_key={0x8, 0x0, 0x1a8, 0x0, "524e5b9f8d92470d4440cc195f56550cc4c6e4722c0feb4726e93670f88b31181c5522bf290132c98b8a5e35975230e8922fa31e8e"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@dev={0xfe, 0x80, [], 0x15}, 0x11, 0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x9, 0xfa, 0x4, 0x80000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x8000}]}, 0xb8}, 0x1}, 0x91) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000003c0)={0x7ff}, 0x4) 2033/05/18 03:45:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8000000000891d, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:06 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:06 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000000040)=""/4, 0x4) ioctl(r2, 0xffffffff, &(0x7f0000000080)="971551b83d59ba90f3c47a76af63d4c71f68d297e484feb01256350fd70b69ad2dd5b97bde8a6147b9b3fe43e2ec9a3ba42e656d0395c5b6829d14fa5131a8a847207abc8ccbdcabab4ac820f6be5bd4800c46f1681c11ded4a6195b3f287f74b8bf107899d75d3cbdea57e627e32f35849a25de8759f8573dc5f92fd6795827ca257be4f43763436319465e9181d8eb73a657aa8979fdcf1080c9342f772fb3861a0ccd68c587d17ce1d8dc0b02a7d5ab3e84a79653a48d6a6ec8e0091868a2a115f9715422208f5bd2025b19412468d46a05783f13f25b1786aba71318c4f465edc220e80b6be639") [ 812.543788] binder: 23472:23473 transaction failed 29189/-22, size 0-0 line 2856 [ 812.546254] binder: 23481:23486 unknown command 120628971 [ 812.552907] binder: 23476:23480 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008943, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:06 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:06 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa7b20000]}, 0x10) [ 812.584847] binder: 23472:23473 ioctl c0306201 20000240 returned -14 [ 812.595681] binder: 23481:23486 ioctl c0306201 20007000 returned -22 [ 812.621527] binder: 23481:23486 ioctl c0306201 20000240 returned -11 2033/05/18 03:45:06 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}, r1}, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:06 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11636840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000000)="b1"}) recvmmsg(r0, &(0x7f0000009040)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/217, 0xd9}], 0x5, &(0x7f0000000540)=""/147, 0x93, 0x6}, 0xc35}, {{&(0x7f0000000600)=@l2, 0x80, &(0x7f0000002740)=[{&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/10, 0xa}], 0x4, &(0x7f0000002780)=""/4096, 0x1000, 0x1}, 0x5d}, {{&(0x7f0000003780)=@pptp, 0x80, &(0x7f0000004980)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/56, 0x38}, {&(0x7f0000004840)=""/31, 0x1f}, {&(0x7f0000004880)=""/201, 0xc9}], 0x4, &(0x7f00000049c0)=""/216, 0xd8, 0x2}, 0x2}, {{&(0x7f0000004ac0)=@alg, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/51, 0x33, 0x418}, 0x80000001}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004bc0)=""/70, 0x46}, {&(0x7f0000004c40)=""/68, 0x44}, {&(0x7f0000004cc0)=""/163, 0xa3}, {&(0x7f0000004d80)=""/68, 0x44}, {&(0x7f0000004e00)=""/191, 0xbf}, {&(0x7f0000004ec0)=""/131, 0x83}, {&(0x7f0000004f80)=""/20, 0x14}, {&(0x7f0000004fc0)=""/72, 0x48}, {&(0x7f0000005040)=""/236, 0xec}], 0x9, &(0x7f0000005200)=""/187, 0xbb, 0x5}, 0x7}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000052c0)=""/231, 0xe7}], 0x1, 0x0, 0x0, 0x1}, 0x38c}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005400)=""/119, 0x77}, {&(0x7f0000005480)=""/175, 0xaf}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x3, &(0x7f0000005580)=""/62, 0x3e, 0xfffffffffffffffc}, 0x3}, {{&(0x7f00000055c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005640)=""/205, 0xcd}, {&(0x7f0000005740)=""/19, 0x13}, {&(0x7f0000005780)=""/66, 0x42}, {&(0x7f0000005800)=""/45, 0x2d}, {&(0x7f0000005840)=""/202, 0xca}, {&(0x7f0000005940)=""/39, 0x27}, {&(0x7f0000005980)=""/255, 0xff}], 0x7, &(0x7f0000005b00)=""/55, 0x37, 0x4}, 0x10000}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005b40)=""/221, 0xdd}, {&(0x7f0000005c40)=""/63, 0x3f}], 0x2, &(0x7f0000007040)=""/4096, 0x1000, 0x6}}, {{&(0x7f0000005cc0)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d40)=""/14, 0xe}, {&(0x7f0000005d80)=""/45, 0x2d}, {&(0x7f0000005dc0)=""/145, 0x91}], 0x3, &(0x7f0000008040)=""/4096, 0x1000}, 0x9}], 0xa, 0x40, &(0x7f0000005ec0)={0x77359400}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000005f00), &(0x7f0000005f40)=0x14) [ 812.670360] binder: 23481:23486 unknown command 120628971 [ 812.690652] binder: 23481:23486 ioctl c0306201 20007000 returned -22 [ 812.809074] binder: 23508:23514 transaction failed 29189/-22, size 0-0 line 2856 [ 812.867570] binder: 23522:23523 unknown command 1080582929 [ 812.874739] binder: 23508:23514 ioctl c0306201 20000240 returned -14 [ 812.900272] binder: 23522:23523 ioctl c0306201 20007000 returned -22 [ 812.929912] binder: 23522:23523 ioctl c0306201 20000240 returned -11 [ 812.956300] binder: 23522:23523 unknown command 1080582929 [ 812.975210] binder: 23522:23523 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe00000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008927, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa00]}, 0x10) 2033/05/18 03:45:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x8001) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x5, 0x9f, &(0x7f0000000040)="73822bc24a4c3cb10a5954065347bf26d67174fca86adceb168e7516161af3358067ef81a13bb763948ee8e45cc258c7ffa5d072eb8541f03218f0815627a7698055a818b96c11cab564fc979c1c434f8627d4beae012c54ced313840919fcabac0928ba01dc14b78b919be59fae63caf04dde52b708cc3670e0ba14ed88987be5dee9d4cf083fe82c0fd1a7d62a2023e121479260ba0d9be8bcacceb35f67"}) 2033/05/18 03:45:07 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:07 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:07 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x4, &(0x7f0000000240)="0047fc2f07d82c99240370") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000c0189436, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 813.559371] FAULT_INJECTION: forcing a failure. [ 813.559371] name failslab, interval 1, probability 0, space 0, times 0 [ 813.570710] CPU: 0 PID: 23549 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 813.577999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.587367] Call Trace: [ 813.589977] dump_stack+0x1b9/0x294 [ 813.593627] ? dump_stack_print_info.cold.2+0x52/0x52 [ 813.598830] ? lock_downgrade+0x8e0/0x8e0 [ 813.602998] should_fail.cold.4+0xa/0x1a [ 813.607076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 813.612191] ? __local_bh_enable_ip+0x161/0x230 [ 813.616882] ? _raw_spin_unlock_bh+0x30/0x40 [ 813.621301] ? release_sock+0x1e2/0x2b0 [ 813.625282] ? rcu_is_watching+0x85/0x140 [ 813.629446] ? __release_sock+0x3a0/0x3a0 [ 813.633609] ? find_held_lock+0x36/0x1c0 [ 813.637707] ? check_same_owner+0x320/0x320 [ 813.642047] ? rcu_note_context_switch+0x710/0x710 [ 813.646993] ? __netlink_lookup+0x5cf/0xaa0 [ 813.651337] __should_failslab+0x124/0x180 [ 813.655592] should_failslab+0x9/0x14 [ 813.659406] kmem_cache_alloc_node+0x272/0x780 [ 813.663998] ? find_held_lock+0x36/0x1c0 [ 813.668079] __alloc_skb+0x111/0x780 [ 813.671799] ? skb_scrub_packet+0x580/0x580 [ 813.676119] ? rcu_is_watching+0x85/0x140 [ 813.680260] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 813.685456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 813.691073] ? netlink_autobind.isra.34+0x240/0x330 [ 813.696083] netlink_sendmsg+0xb01/0xfa0 [ 813.700141] ? netlink_unicast+0x740/0x740 [ 813.704371] ? security_socket_sendmsg+0x94/0xc0 [ 813.709117] ? netlink_unicast+0x740/0x740 [ 813.713348] sock_sendmsg+0xd5/0x120 [ 813.717065] ___sys_sendmsg+0x805/0x940 [ 813.721048] ? copy_msghdr_from_user+0x560/0x560 [ 813.725807] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 813.731422] ? proc_fail_nth_write+0x96/0x1f0 [ 813.735913] ? __fget_light+0x2ef/0x430 [ 813.739884] ? fget_raw+0x20/0x20 [ 813.743327] ? find_held_lock+0x36/0x1c0 [ 813.747488] ? kasan_check_write+0x14/0x20 [ 813.751805] ? wait_for_completion+0x870/0x870 [ 813.756389] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 813.761917] ? sockfd_lookup_light+0xc5/0x160 [ 813.766406] __sys_sendmsg+0x115/0x270 [ 813.770293] ? __ia32_sys_shutdown+0x80/0x80 [ 813.774693] ? __sb_end_write+0xac/0xe0 [ 813.778658] ? fput+0x130/0x1a0 [ 813.781935] ? ksys_write+0x1a6/0x250 [ 813.785738] __x64_sys_sendmsg+0x78/0xb0 [ 813.789791] do_syscall_64+0x1b1/0x800 [ 813.793672] ? finish_task_switch+0x1ca/0x840 [ 813.798156] ? syscall_return_slowpath+0x5c0/0x5c0 [ 813.803076] ? syscall_return_slowpath+0x30f/0x5c0 [ 813.808012] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 813.813374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 813.818220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.823401] RIP: 0033:0x455a09 [ 813.826574] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.834359] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 813.841627] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 813.848886] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008990, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 813.856143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 813.863396] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000000 [ 813.873191] binder: 23541:23542 transaction failed 29189/-22, size 0-0 line 2856 [ 813.881881] binder: 23539:23552 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x5, 0x8001}, {0x100000001, 0x2}, 0x5d50a251, 0x5, 0x8000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:07 executing program 3 (fault-call:3 fault-nth:1): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 813.906695] binder: 23539:23552 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x800, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000480)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffd, 0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0x400}}, 0x10000, 0x2e6}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={r4, 0x8, 0x0, 0x6, 0x892}, &(0x7f0000000400)=0x18) keyctl$get_keyring_id(0x0, r2, 0x401) r5 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x8e, 0x0, &(0x7f0000000280)="93e9419fb91c377c6e4f4eef38a26c473381cc9d0015f3b96138fb00d4a92407ae792d17fa3c84b1b51e79362c092d7cba0c83eae12a3c5941313064ebbca8b81d86958dee8bcb5a77e529d836845e85bdc16db703fea1ee0561b86ee1c3376c83e94a000063f688602f6b1b05d2ec7c508800b87eb75b32b6abb09dd32fd3642e8999f71e42a18ef7e7a5a1517a"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f00000000c0)) 2033/05/18 03:45:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x9f7e]}, 0x10) 2033/05/18 03:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000c020660b, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 813.981849] binder: 23541:23542 ioctl c0306201 20000240 returned -14 [ 814.011044] binder: undelivered TRANSACTION_ERROR: 29189 [ 814.063728] binder: 23578:23579 transaction failed 29189/-22, size 0-0 line 2856 [ 814.098388] binder: 23578:23579 ioctl c0306201 20000240 returned -11 [ 814.137513] binder: 23578:23591 transaction failed 29189/-22, size 0-0 line 2856 [ 814.147922] FAULT_INJECTION: forcing a failure. [ 814.147922] name failslab, interval 1, probability 0, space 0, times 0 [ 814.159245] CPU: 1 PID: 23576 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 814.166529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.175888] Call Trace: [ 814.178492] dump_stack+0x1b9/0x294 [ 814.182151] ? dump_stack_print_info.cold.2+0x52/0x52 [ 814.187360] ? is_bpf_text_address+0xd7/0x170 [ 814.191882] should_fail.cold.4+0xa/0x1a [ 814.195957] ? __save_stack_trace+0x7e/0xd0 [ 814.200294] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 814.205422] ? save_stack+0x43/0xd0 [ 814.209062] ? kasan_kmalloc+0xc4/0xe0 [ 814.212957] ? kasan_slab_alloc+0x12/0x20 [ 814.217121] ? find_held_lock+0x36/0x1c0 [ 814.221210] ? check_same_owner+0x320/0x320 [ 814.225546] ? rcu_note_context_switch+0x710/0x710 [ 814.232371] __should_failslab+0x124/0x180 [ 814.236726] should_failslab+0x9/0x14 [ 814.240528] kmem_cache_alloc_node_trace+0x26f/0x770 [ 814.245630] __kmalloc_node_track_caller+0x33/0x70 [ 814.250552] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 814.255301] __alloc_skb+0x14d/0x780 [ 814.259016] ? skb_scrub_packet+0x580/0x580 [ 814.263346] ? rcu_is_watching+0x85/0x140 [ 814.267505] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 814.272693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 814.278217] ? netlink_autobind.isra.34+0x240/0x330 [ 814.283228] netlink_sendmsg+0xb01/0xfa0 [ 814.287281] ? netlink_unicast+0x740/0x740 [ 814.291507] ? security_socket_sendmsg+0x94/0xc0 [ 814.296257] ? netlink_unicast+0x740/0x740 [ 814.300489] sock_sendmsg+0xd5/0x120 [ 814.304210] ___sys_sendmsg+0x805/0x940 [ 814.308182] ? copy_msghdr_from_user+0x560/0x560 [ 814.312945] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 814.318476] ? proc_fail_nth_write+0x96/0x1f0 [ 814.323067] ? __fget_light+0x2ef/0x430 [ 814.327052] ? fget_raw+0x20/0x20 [ 814.330508] ? find_held_lock+0x36/0x1c0 [ 814.334561] ? kasan_check_write+0x14/0x20 [ 814.338873] ? wait_for_completion+0x870/0x870 [ 814.343451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 814.349074] ? sockfd_lookup_light+0xc5/0x160 [ 814.353567] __sys_sendmsg+0x115/0x270 [ 814.357469] ? __ia32_sys_shutdown+0x80/0x80 [ 814.361883] ? __sb_end_write+0xac/0xe0 [ 814.365861] ? fput+0x130/0x1a0 [ 814.369217] ? ksys_write+0x1a6/0x250 [ 814.373028] __x64_sys_sendmsg+0x78/0xb0 [ 814.377109] do_syscall_64+0x1b1/0x800 [ 814.381007] ? finish_task_switch+0x1ca/0x840 [ 814.385507] ? syscall_return_slowpath+0x5c0/0x5c0 [ 814.390430] ? syscall_return_slowpath+0x30f/0x5c0 [ 814.395354] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 814.400724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 814.405572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.410758] RIP: 0033:0x455a09 [ 814.413941] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.421653] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 814.428922] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 814.436199] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 814.443466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 814.450738] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000001 2033/05/18 03:45:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfeffffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:08 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008930, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:08 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x101, 0x620040) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000001c0)={0x3, 0x8000}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000100)={0x2013}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f00000002c0)={'veth1_to_bridge\x00', {0x4, 0x3, 0x2, "0bc62c6c8aaf", 0x5}}) r4 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb) keyctl$invalidate(0x15, r4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)={0x7, 0x3, 0x2a69, 0x0, 0x58, 0x38, 0xfffffffffffffff7, 0x1, 0x8000, 0x7, 0x9, 0x2, 0x0, 0x8, 0x9, 0x100000001, 0x8, 0x80000000, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf401]}, 0x10) 2033/05/18 03:45:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x8000, 0x3, 0x3, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x200, 0x8, 0x1, 0x763, r2}, 0x10) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x3ff}, &(0x7f0000000240)=0x8) 2033/05/18 03:45:08 executing program 3 (fault-call:3 fault-nth:2): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 814.516967] binder: 23601:23602 transaction failed 29189/-22, size 0-0 line 2856 [ 814.530146] FAULT_INJECTION: forcing a failure. [ 814.530146] name failslab, interval 1, probability 0, space 0, times 0 [ 814.541908] CPU: 1 PID: 23605 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 814.549195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.552670] binder: 23610:23612 transaction failed 29189/-22, size 0-0 line 2856 [ 814.558549] Call Trace: [ 814.558637] dump_stack+0x1b9/0x294 [ 814.558662] ? dump_stack_print_info.cold.2+0x52/0x52 [ 814.577569] ? check_noncircular+0x20/0x20 [ 814.581820] should_fail.cold.4+0xa/0x1a [ 814.585899] ? check_noncircular+0x20/0x20 [ 814.590146] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 814.595260] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 814.600814] ? zap_class+0x720/0x720 [ 814.604537] ? graph_lock+0x170/0x170 [ 814.608346] ? graph_lock+0x170/0x170 [ 814.612168] ? find_held_lock+0x36/0x1c0 [ 814.616249] ? __lock_is_held+0xb5/0x140 [ 814.620348] ? check_same_owner+0x320/0x320 [ 814.624713] ? rcu_note_context_switch+0x710/0x710 [ 814.629650] ? __lock_acquire+0x7f5/0x5140 [ 814.633896] __should_failslab+0x124/0x180 [ 814.638143] should_failslab+0x9/0x14 [ 814.641955] __kmalloc+0x2c8/0x760 [ 814.645509] ? debug_check_no_locks_freed+0x310/0x310 [ 814.650706] ? wiphy_new_nm+0x819/0x2290 [ 814.654789] wiphy_new_nm+0x819/0x2290 [ 814.658693] ? print_usage_bug+0xc0/0xc0 2033/05/18 03:45:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe7e0000000000000]}, 0x10) 2033/05/18 03:45:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 814.662944] ? cfg80211_dev_check_name.isra.7+0x420/0x420 [ 814.668488] ? __lock_acquire+0x7f5/0x5140 [ 814.672319] binder: 23601:23602 ioctl c0306201 20000240 returned -14 [ 814.672724] ? __lock_acquire+0x7f5/0x5140 [ 814.672741] ? check_noncircular+0x20/0x20 [ 814.672758] ? perf_trace_lock+0xd6/0x900 [ 814.672776] ? print_usage_bug+0xc0/0xc0 [ 814.672791] ? zap_class+0x720/0x720 [ 814.672801] ? __lock_acquire+0x7f5/0x5140 [ 814.672817] ? print_usage_bug+0xc0/0xc0 [ 814.707996] ? print_usage_bug+0xc0/0xc0 [ 814.712097] ? zap_class+0x720/0x720 [ 814.715827] ? print_usage_bug+0xc0/0xc0 [ 814.719904] ? print_usage_bug+0xc0/0xc0 [ 814.723979] ? print_usage_bug+0xc0/0xc0 [ 814.728055] ? print_usage_bug+0xc0/0xc0 [ 814.732132] ? __lock_acquire+0x7f5/0x5140 [ 814.736377] ? check_noncircular+0x20/0x20 [ 814.740655] ? __lock_acquire+0x7f5/0x5140 [ 814.744910] ? debug_check_no_locks_freed+0x310/0x310 [ 814.750119] ? debug_check_no_locks_freed+0x310/0x310 [ 814.755336] ? print_usage_bug+0xc0/0xc0 [ 814.759415] ? print_usage_bug+0xc0/0xc0 [ 814.763599] ? __lock_acquire+0x7f5/0x5140 2033/05/18 03:45:08 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 814.767845] ? unwind_get_return_address+0x61/0xa0 [ 814.772790] ? __save_stack_trace+0x7e/0xd0 [ 814.777125] ieee80211_alloc_hw_nm+0x4c9/0x2080 [ 814.781805] ? print_usage_bug+0xc0/0xc0 [ 814.785910] ? ieee80211_restart_work+0x1a0/0x1a0 [ 814.790769] ? perf_trace_lock+0xd6/0x900 [ 814.794934] ? __lock_acquire+0x7f5/0x5140 [ 814.799286] ? zap_class+0x720/0x720 [ 814.803026] ? graph_lock+0x170/0x170 [ 814.806838] ? debug_check_no_locks_freed+0x310/0x310 [ 814.812047] ? debug_check_no_locks_freed+0x310/0x310 [ 814.817249] ? print_usage_bug+0xc0/0xc0 [ 814.821332] ? print_usage_bug+0xc0/0xc0 [ 814.825402] ? find_held_lock+0x36/0x1c0 [ 814.829487] ? lock_downgrade+0x8e0/0x8e0 [ 814.833647] ? mark_held_locks+0xc9/0x160 [ 814.837802] ? kasan_check_read+0x11/0x20 [ 814.841963] ? __local_bh_enable_ip+0x161/0x230 [ 814.846637] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 814.851642] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 814.856735] ? trace_hardirqs_on+0xd/0x10 [ 814.860872] ? __local_bh_enable_ip+0x161/0x230 [ 814.865548] mac80211_hwsim_new_radio+0x235/0x3410 [ 814.870469] ? graph_lock+0x170/0x170 [ 814.874271] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 814.880414] ? lock_release+0xa10/0xa10 [ 814.884381] ? check_same_owner+0x320/0x320 [ 814.888697] ? rcu_note_context_switch+0x710/0x710 [ 814.893622] ? __lock_acquire+0x7f5/0x5140 [ 814.897848] ? __might_sleep+0x95/0x190 [ 814.901816] ? kasan_check_write+0x14/0x20 [ 814.906058] ? __mutex_lock+0x7d9/0x17f0 [ 814.910109] ? genl_rcv_msg+0x13a/0x170 [ 814.914075] ? __lock_acquire+0x7f5/0x5140 [ 814.918297] ? mutex_trylock+0x2a0/0x2a0 [ 814.922352] ? perf_trace_lock+0xd6/0x900 [ 814.926499] ? graph_lock+0x170/0x170 [ 814.930661] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 814.935842] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 814.940845] ? validate_nla+0x2d9/0x7b0 [ 814.944811] hwsim_new_radio_nl+0x7b8/0xa60 [ 814.949125] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 814.954308] ? __netlink_ns_capable+0x100/0x130 [ 814.958976] genl_family_rcv_msg+0x889/0x1120 [ 814.963465] ? genl_rcv+0x40/0x40 [ 814.966907] ? lock_downgrade+0x8e0/0x8e0 [ 814.971045] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 814.976059] ? lock_acquire+0x1dc/0x520 [ 814.980027] ? genl_rcv+0x19/0x40 [ 814.983484] genl_rcv_msg+0xc6/0x170 [ 814.987191] netlink_rcv_skb+0x172/0x440 [ 814.991239] ? genl_family_rcv_msg+0x1120/0x1120 [ 814.995991] ? netlink_ack+0xbc0/0xbc0 [ 814.999868] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 815.005051] ? netlink_skb_destructor+0x210/0x210 [ 815.009891] genl_rcv+0x28/0x40 [ 815.013162] netlink_unicast+0x58b/0x740 [ 815.017218] ? netlink_attachskb+0x970/0x970 [ 815.021618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 815.027152] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 815.032278] ? security_netlink_send+0x88/0xb0 [ 815.036852] netlink_sendmsg+0x9f0/0xfa0 [ 815.040909] ? netlink_unicast+0x740/0x740 [ 815.045136] ? security_socket_sendmsg+0x94/0xc0 [ 815.049879] ? netlink_unicast+0x740/0x740 [ 815.054113] sock_sendmsg+0xd5/0x120 [ 815.057820] ___sys_sendmsg+0x805/0x940 [ 815.061790] ? copy_msghdr_from_user+0x560/0x560 [ 815.066544] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 815.072070] ? proc_fail_nth_write+0x96/0x1f0 [ 815.076566] ? __fget_light+0x2ef/0x430 [ 815.080540] ? fget_raw+0x20/0x20 [ 815.083980] ? find_held_lock+0x36/0x1c0 [ 815.088044] ? kasan_check_write+0x14/0x20 [ 815.092276] ? wait_for_completion+0x870/0x870 [ 815.096874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 815.102400] ? sockfd_lookup_light+0xc5/0x160 [ 815.106884] __sys_sendmsg+0x115/0x270 [ 815.110774] ? __ia32_sys_shutdown+0x80/0x80 [ 815.115171] ? __sb_end_write+0xac/0xe0 [ 815.119136] ? fput+0x130/0x1a0 [ 815.122403] ? ksys_write+0x1a6/0x250 [ 815.126207] __x64_sys_sendmsg+0x78/0xb0 [ 815.130262] do_syscall_64+0x1b1/0x800 [ 815.134138] ? finish_task_switch+0x1ca/0x840 [ 815.138623] ? syscall_return_slowpath+0x5c0/0x5c0 [ 815.143543] ? syscall_return_slowpath+0x30f/0x5c0 [ 815.148465] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 815.153822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 815.158659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.163842] RIP: 0033:0x455a09 [ 815.167019] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.174731] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 815.181986] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 815.189250] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 815.196504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 815.203762] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000002 2033/05/18 03:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008921, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 815.224936] binder: 23610:23612 transaction failed 29189/-22, size 0-0 line 2856 [ 815.248251] binder: 23629:23633 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x571c000000000000]}, 0x10) 2033/05/18 03:45:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 815.273293] binder: 23629:23633 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:09 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffff8cc, 0x8000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0xef, "97723f296a2602571eff8fc63abd8f2f6e8322258281eba7d2a5e37c44148b6d962f64ae6ff7e5335aedc0163b453f752fab4021589cf507f569c87ee5f9909579592b175bbedb091851c510b82abef93ecf16fc7964d4523d4713647b33917000b837a111c9252e301957b4df3c65b3a03fd5bd93f8571c733a9ee7c8e229b65c0aeba111062f35e8c4acdc9738b830cdb297c27f20c57b061b48a0923dbf10f0dd87f3584a3057009f62ac28bc78a551fbd5a3e49095fe899921874523271f90bc0291e23f56a25b8b843893773b7bb28c301341d2f4e0e63d564a9476195004d49af8c4a05a5b75ab069f46fabb"}) [ 815.325068] binder: undelivered TRANSACTION_ERROR: 29189 [ 815.365401] binder: 23644:23646 transaction failed 29189/-22, size 0-0 line 2856 [ 815.394785] binder: 23652:23653 transaction failed 29189/-22, size 0-0 line 2856 [ 815.409339] binder: 23644:23646 ioctl c0306201 20000240 returned -14 [ 815.436262] binder: 23652:23653 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9effffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r1, 0x20}, &(0x7f0000000080)=0x8) 2033/05/18 03:45:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x476d]}, 0x10) 2033/05/18 03:45:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089b0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:09 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team_slave_1\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000040)="b1"}) 2033/05/18 03:45:09 executing program 3 (fault-call:3 fault-nth:3): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 815.478727] binder: undelivered TRANSACTION_ERROR: 29189 [ 815.532954] FAULT_INJECTION: forcing a failure. [ 815.532954] name failslab, interval 1, probability 0, space 0, times 0 [ 815.544273] CPU: 0 PID: 23664 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 815.551557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.560947] Call Trace: [ 815.563556] dump_stack+0x1b9/0x294 [ 815.567209] ? dump_stack_print_info.cold.2+0x52/0x52 [ 815.569915] binder: 23667:23668 transaction failed 29189/-22, size 0-0 line 2856 [ 815.572416] should_fail.cold.4+0xa/0x1a [ 815.572444] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 815.589232] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 815.593841] binder: 23667:23668 ioctl c0306201 20000240 returned -14 [ 815.594433] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 815.594453] ? graph_lock+0x170/0x170 [ 815.594474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 815.594494] ? put_dec_trunc8+0x273/0x300 [ 815.594508] ? find_held_lock+0x36/0x1c0 [ 815.594525] ? __lock_is_held+0xb5/0x140 [ 815.627806] ? check_same_owner+0x320/0x320 [ 815.632141] ? save_stack+0x43/0xd0 [ 815.635776] ? kasan_kmalloc+0xc4/0xe0 [ 815.639671] ? rcu_note_context_switch+0x710/0x710 [ 815.644618] __should_failslab+0x124/0x180 [ 815.648869] should_failslab+0x9/0x14 [ 815.652675] __kmalloc_track_caller+0x2c4/0x760 [ 815.657349] ? pointer+0xa10/0xa10 [ 815.660912] ? print_usage_bug+0xc0/0xc0 [ 815.665181] ? kvasprintf_const+0x67/0x190 [ 815.669424] kvasprintf+0xa9/0x130 [ 815.672970] ? bust_spinlocks+0xe0/0xe0 [ 815.676953] kvasprintf_const+0x67/0x190 [ 815.681024] kobject_set_name_vargs+0x5b/0x150 [ 815.685609] dev_set_name+0xa4/0xc0 [ 815.689242] ? device_initialize+0x5d0/0x5d0 [ 815.693675] ? debug_check_no_locks_freed+0x310/0x310 [ 815.695435] binder: 23680:23682 transaction failed 29189/-22, size 0-0 line 2856 [ 815.698868] ? wiphy_new_nm+0x819/0x2290 [ 815.698889] wiphy_new_nm+0x94e/0x2290 [ 815.698909] ? cfg80211_dev_check_name.isra.7+0x420/0x420 [ 815.698924] ? __lock_acquire+0x7f5/0x5140 [ 815.698937] ? __lock_acquire+0x7f5/0x5140 [ 815.698953] ? check_noncircular+0x20/0x20 [ 815.725135] binder: 23680:23682 ioctl c0306201 20000240 returned -14 [ 815.729949] ? print_usage_bug+0xc0/0xc0 [ 815.729967] ? __lock_acquire+0x7f5/0x5140 [ 815.729980] ? print_usage_bug+0xc0/0xc0 [ 815.729996] ? __lock_acquire+0x7f5/0x5140 [ 815.730014] ? print_usage_bug+0xc0/0xc0 [ 815.730039] ? print_usage_bug+0xc0/0xc0 [ 815.766165] ? print_usage_bug+0xc0/0xc0 [ 815.770240] ? print_usage_bug+0xc0/0xc0 [ 815.774400] ? __lock_acquire+0x7f5/0x5140 [ 815.778647] ? check_noncircular+0x20/0x20 [ 815.782891] ? __lock_acquire+0x7f5/0x5140 [ 815.787138] ? debug_check_no_locks_freed+0x310/0x310 [ 815.792348] ? debug_check_no_locks_freed+0x310/0x310 [ 815.797630] ? print_usage_bug+0xc0/0xc0 [ 815.801703] ? print_usage_bug+0xc0/0xc0 [ 815.805790] ? __lock_acquire+0x7f5/0x5140 [ 815.810033] ? unwind_get_return_address+0x61/0xa0 [ 815.814975] ? __save_stack_trace+0x7e/0xd0 [ 815.819305] ieee80211_alloc_hw_nm+0x4c9/0x2080 [ 815.824066] ? print_usage_bug+0xc0/0xc0 [ 815.825093] binder: 23688:23689 transaction failed 29189/-22, size 0-0 line 2856 [ 815.828129] ? ieee80211_restart_work+0x1a0/0x1a0 [ 815.828148] ? __lock_acquire+0x7f5/0x5140 [ 815.828163] ? __lock_acquire+0x7f5/0x5140 [ 815.828179] ? kasan_slab_alloc+0x12/0x20 [ 815.828192] ? kmem_cache_alloc+0x12e/0x760 [ 815.828204] ? __d_alloc+0xc0/0xd30 [ 815.828223] ? graph_lock+0x170/0x170 [ 815.859427] binder: 23688:23689 ioctl c0306201 20000240 returned -14 [ 815.861074] ? debug_check_no_locks_freed+0x310/0x310 [ 815.861091] ? debug_check_no_locks_freed+0x310/0x310 [ 815.861104] ? print_usage_bug+0xc0/0xc0 [ 815.861124] ? print_usage_bug+0xc0/0xc0 [ 815.861137] ? find_held_lock+0x36/0x1c0 [ 815.861157] ? lock_downgrade+0x8e0/0x8e0 [ 815.898354] ? mark_held_locks+0xc9/0x160 [ 815.902518] ? kasan_check_read+0x11/0x20 [ 815.906685] ? __local_bh_enable_ip+0x161/0x230 [ 815.911360] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 815.916474] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 815.921591] ? trace_hardirqs_on+0xd/0x10 [ 815.925786] ? __local_bh_enable_ip+0x161/0x230 [ 815.930467] mac80211_hwsim_new_radio+0x235/0x3410 [ 815.935418] ? graph_lock+0x170/0x170 [ 815.939236] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 815.945409] ? lock_release+0xa10/0xa10 [ 815.949404] ? check_same_owner+0x320/0x320 [ 815.950222] binder: 23695:23696 transaction failed 29189/-22, size 0-0 line 2856 [ 815.953750] ? rcu_note_context_switch+0x710/0x710 [ 815.953766] ? __lock_acquire+0x7f5/0x5140 [ 815.953785] ? __might_sleep+0x95/0x190 [ 815.953805] ? kasan_check_write+0x14/0x20 [ 815.953827] ? __mutex_lock+0x7d9/0x17f0 [ 815.983326] ? genl_rcv_msg+0x13a/0x170 [ 815.987328] ? __lock_acquire+0x7f5/0x5140 [ 815.991582] ? mutex_trylock+0x2a0/0x2a0 [ 815.995672] ? graph_lock+0x170/0x170 [ 815.999485] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 815.999734] binder: 23695:23696 ioctl c0306201 20000240 returned -14 [ 816.005205] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 816.005221] ? validate_nla+0x2d9/0x7b0 [ 816.005238] hwsim_new_radio_nl+0x7b8/0xa60 [ 816.005253] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 816.005274] ? __netlink_ns_capable+0x100/0x130 [ 816.005300] genl_family_rcv_msg+0x889/0x1120 [ 816.039488] ? genl_rcv+0x40/0x40 [ 816.042958] ? lock_downgrade+0x8e0/0x8e0 [ 816.047122] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 816.052157] ? kasan_check_read+0x11/0x20 [ 816.056433] ? lock_acquire+0x1dc/0x520 [ 816.060508] ? genl_rcv+0x19/0x40 [ 816.064015] genl_rcv_msg+0xc6/0x170 [ 816.067746] netlink_rcv_skb+0x172/0x440 [ 816.071822] ? genl_family_rcv_msg+0x1120/0x1120 [ 816.076595] ? netlink_ack+0xbc0/0xbc0 [ 816.080494] ? rcu_bh_force_quiescent_state+0x20/0x20 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x34000]}, 0x10) 2033/05/18 03:45:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x67840000]}, 0x10) 2033/05/18 03:45:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1fdb]}, 0x10) 2033/05/18 03:45:09 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xafe6]}, 0x10) 2033/05/18 03:45:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5f50]}, 0x10) [ 816.085705] ? netlink_skb_destructor+0x210/0x210 [ 816.090567] genl_rcv+0x28/0x40 [ 816.093856] netlink_unicast+0x58b/0x740 [ 816.097937] ? netlink_attachskb+0x970/0x970 [ 816.102360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 816.107914] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 816.112945] ? security_netlink_send+0x88/0xb0 [ 816.117564] netlink_sendmsg+0x9f0/0xfa0 [ 816.121638] ? netlink_unicast+0x740/0x740 [ 816.125877] ? security_socket_sendmsg+0x94/0xc0 [ 816.130629] ? netlink_unicast+0x740/0x740 [ 816.134865] sock_sendmsg+0xd5/0x120 [ 816.138571] ___sys_sendmsg+0x805/0x940 [ 816.142549] ? copy_msghdr_from_user+0x560/0x560 [ 816.147306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 816.152832] ? proc_fail_nth_write+0x96/0x1f0 [ 816.157329] ? __fget_light+0x2ef/0x430 [ 816.161295] ? fget_raw+0x20/0x20 [ 816.164744] ? find_held_lock+0x36/0x1c0 [ 816.168805] ? kasan_check_write+0x14/0x20 [ 816.173041] ? wait_for_completion+0x870/0x870 [ 816.177620] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 816.183143] ? sockfd_lookup_light+0xc5/0x160 [ 816.187628] __sys_sendmsg+0x115/0x270 [ 816.191507] ? __ia32_sys_shutdown+0x80/0x80 [ 816.195905] ? __sb_end_write+0xac/0xe0 [ 816.199868] ? fput+0x130/0x1a0 [ 816.203135] ? ksys_write+0x1a6/0x250 [ 816.206945] __x64_sys_sendmsg+0x78/0xb0 [ 816.210995] do_syscall_64+0x1b1/0x800 [ 816.214891] ? finish_task_switch+0x1ca/0x840 [ 816.219377] ? syscall_return_slowpath+0x5c0/0x5c0 [ 816.224298] ? syscall_return_slowpath+0x30f/0x5c0 [ 816.229221] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 816.234605] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 816.239443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 816.244617] RIP: 0033:0x455a09 [ 816.247793] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.255498] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 816.262755] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 816.270010] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 816.277276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 816.284539] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000003 [ 816.305480] binder: 23708:23711 transaction failed 29189/-22, size 0-0 line 2856 [ 816.319708] binder: 23708:23713 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x40000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:10 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa717]}, 0x10) 2033/05/18 03:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008931, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:10 executing program 3 (fault-call:3 fault-nth:4): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:10 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="fc2f07d82c992409702b6435ade3e2902aada89b81bcd9fdc0a6d15ecf46c6449cdd43a76a5f631fff2fbe473046ef15537f3e7053b0af4d4bee88facb32e6419930ed78b95c141c3a83d1a164d64c0fe7a4") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = socket(0x8, 0x8000f, 0x9) getpeername$unix(r2, &(0x7f0000000100)=@abs, &(0x7f00000001c0)=0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "a03beaa93cc45746fa128524554a01453f88ca25165f91fe99447d0d867a65f233b84501aed520f93b227cf65d03badc92992cab5a1a4a798b5b9b5e0d8337c1354df6c19a606b37d373dc5f56152d4e8f04b0aab72efc84b7d981b94eb7f3c0"}, 0x64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 816.517805] binder: 23724:23736 transaction failed 29189/-22, size 0-0 line 2856 [ 816.530014] FAULT_INJECTION: forcing a failure. [ 816.530014] name failslab, interval 1, probability 0, space 0, times 0 [ 816.531342] binder: 23731:23732 transaction failed 29189/-22, size 0-0 line 2856 [ 816.541381] CPU: 1 PID: 23733 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 816.556178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.565537] Call Trace: [ 816.568146] dump_stack+0x1b9/0x294 [ 816.571788] ? dump_stack_print_info.cold.2+0x52/0x52 [ 816.576395] binder: 23724:23736 transaction failed 29189/-22, size 0-0 line 2856 [ 816.576996] should_fail.cold.4+0xa/0x1a [ 816.588677] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 816.593789] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 816.598988] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 816.604185] ? graph_lock+0x170/0x170 [ 816.607996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 816.613541] ? put_dec_trunc8+0x273/0x300 [ 816.617720] ? find_held_lock+0x36/0x1c0 [ 816.621799] ? __lock_is_held+0xb5/0x140 [ 816.625865] ? ZSTD_compressBlock_lazy2+0x3d50/0x4380 [ 816.631091] ? check_same_owner+0x320/0x320 [ 816.635696] ? save_stack+0x43/0xd0 [ 816.639333] ? kasan_kmalloc+0xc4/0xe0 [ 816.643227] ? rcu_note_context_switch+0x710/0x710 [ 816.648169] __should_failslab+0x124/0x180 [ 816.652414] should_failslab+0x9/0x14 [ 816.654756] binder: 23731:23732 ioctl c0306201 20000240 returned -14 [ 816.656213] __kmalloc_track_caller+0x2c4/0x760 2033/05/18 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8467]}, 0x10) 2033/05/18 03:45:10 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 816.656228] ? pointer+0xa10/0xa10 [ 816.656245] ? print_usage_bug+0xc0/0xc0 [ 816.656268] ? kvasprintf_const+0x67/0x190 [ 816.675956] binder: undelivered TRANSACTION_ERROR: 29189 [ 816.679192] kvasprintf+0xa9/0x130 [ 816.679207] ? bust_spinlocks+0xe0/0xe0 [ 816.679228] kvasprintf_const+0x67/0x190 [ 816.679248] kobject_set_name_vargs+0x5b/0x150 [ 816.679263] dev_set_name+0xa4/0xc0 [ 816.679275] ? device_initialize+0x5d0/0x5d0 [ 816.679294] ? wiphy_new_nm+0x819/0x2290 [ 816.679311] wiphy_new_nm+0x94e/0x2290 2033/05/18 03:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000005450, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 816.679330] ? cfg80211_dev_check_name.isra.7+0x420/0x420 [ 816.679344] ? __lock_acquire+0x7f5/0x5140 [ 816.679358] ? __lock_acquire+0x7f5/0x5140 [ 816.679370] ? check_noncircular+0x20/0x20 [ 816.679387] ? perf_trace_lock+0xd6/0x900 [ 816.739203] ? print_usage_bug+0xc0/0xc0 [ 816.743272] ? zap_class+0x720/0x720 [ 816.746990] ? __lock_acquire+0x7f5/0x5140 [ 816.751229] ? print_usage_bug+0xc0/0xc0 [ 816.755295] ? zap_class+0x720/0x720 [ 816.759014] ? print_usage_bug+0xc0/0xc0 [ 816.763088] ? print_usage_bug+0xc0/0xc0 [ 816.767161] ? print_usage_bug+0xc0/0xc0 [ 816.771254] ? print_usage_bug+0xc0/0xc0 [ 816.775321] ? __lock_acquire+0x7f5/0x5140 [ 816.779561] ? check_noncircular+0x20/0x20 [ 816.781631] binder: 23750:23751 transaction failed 29189/-22, size 0-0 line 2856 [ 816.783809] ? __lock_acquire+0x7f5/0x5140 [ 816.783830] ? debug_check_no_locks_freed+0x310/0x310 [ 816.783854] ? debug_check_no_locks_freed+0x310/0x310 [ 816.783871] ? print_usage_bug+0xc0/0xc0 [ 816.810041] ? print_usage_bug+0xc0/0xc0 [ 816.814129] ? __lock_acquire+0x7f5/0x5140 2033/05/18 03:45:10 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 816.818382] ? unwind_get_return_address+0x61/0xa0 [ 816.823323] ? __save_stack_trace+0x7e/0xd0 [ 816.827650] ieee80211_alloc_hw_nm+0x4c9/0x2080 [ 816.832324] ? print_usage_bug+0xc0/0xc0 [ 816.836390] ? ieee80211_restart_work+0x1a0/0x1a0 [ 816.841256] ? perf_trace_lock+0xd6/0x900 [ 816.845420] ? __lock_acquire+0x7f5/0x5140 [ 816.849666] ? zap_class+0x720/0x720 [ 816.853397] ? graph_lock+0x170/0x170 [ 816.857206] ? debug_check_no_locks_freed+0x310/0x310 [ 816.862403] ? debug_check_no_locks_freed+0x310/0x310 [ 816.867597] ? print_usage_bug+0xc0/0xc0 [ 816.868696] binder: 23750:23751 transaction failed 29189/-22, size 0-0 line 2856 [ 816.871660] ? print_usage_bug+0xc0/0xc0 [ 816.871678] ? find_held_lock+0x36/0x1c0 [ 816.871703] ? lock_downgrade+0x8e0/0x8e0 [ 816.871718] ? mark_held_locks+0xc9/0x160 [ 816.871733] ? kasan_check_read+0x11/0x20 [ 816.871750] ? __local_bh_enable_ip+0x161/0x230 [ 816.871764] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 816.871780] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 816.914528] ? trace_hardirqs_on+0xd/0x10 2033/05/18 03:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008910, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 816.918689] ? __local_bh_enable_ip+0x161/0x230 [ 816.923370] mac80211_hwsim_new_radio+0x235/0x3410 [ 816.924553] binder: 23766:23767 transaction failed 29189/-22, size 0-0 line 2856 [ 816.928304] ? graph_lock+0x170/0x170 [ 816.928333] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 816.928353] ? lock_release+0xa10/0xa10 [ 816.928369] ? check_same_owner+0x320/0x320 [ 816.928390] ? rcu_note_context_switch+0x710/0x710 [ 816.959026] ? __lock_acquire+0x7f5/0x5140 [ 816.963275] ? __might_sleep+0x95/0x190 [ 816.967263] ? kasan_check_write+0x14/0x20 [ 816.971513] ? __mutex_lock+0x7d9/0x17f0 [ 816.975586] ? genl_rcv_msg+0x13a/0x170 [ 816.979569] ? __lock_acquire+0x7f5/0x5140 [ 816.983815] ? mutex_trylock+0x2a0/0x2a0 [ 816.987884] ? perf_trace_lock+0xd6/0x900 [ 816.992040] ? graph_lock+0x170/0x170 [ 816.995853] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 817.001053] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 817.001795] binder: 23766:23767 ioctl c0306201 20000240 returned -14 [ 817.006086] ? validate_nla+0x2d9/0x7b0 [ 817.006106] hwsim_new_radio_nl+0x7b8/0xa60 [ 817.006124] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 817.006146] ? __netlink_ns_capable+0x100/0x130 [ 817.006167] genl_family_rcv_msg+0x889/0x1120 [ 817.032913] binder: undelivered TRANSACTION_ERROR: 29189 [ 817.035256] ? genl_rcv+0x40/0x40 [ 817.035276] ? lock_downgrade+0x8e0/0x8e0 [ 817.035294] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 817.035316] ? lock_acquire+0x1dc/0x520 [ 817.057300] ? genl_rcv+0x19/0x40 [ 817.060781] genl_rcv_msg+0xc6/0x170 [ 817.064506] netlink_rcv_skb+0x172/0x440 [ 817.068573] ? genl_family_rcv_msg+0x1120/0x1120 [ 817.073338] ? netlink_ack+0xbc0/0xbc0 [ 817.077233] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 817.082432] ? netlink_skb_destructor+0x210/0x210 [ 817.087290] genl_rcv+0x28/0x40 [ 817.090577] netlink_unicast+0x58b/0x740 [ 817.094652] ? netlink_attachskb+0x970/0x970 [ 817.099077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 817.104623] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 817.109650] ? security_netlink_send+0x88/0xb0 [ 817.114255] netlink_sendmsg+0x9f0/0xfa0 [ 817.118330] ? netlink_unicast+0x740/0x740 [ 817.122574] ? security_socket_sendmsg+0x94/0xc0 [ 817.127337] ? netlink_unicast+0x740/0x740 [ 817.131580] sock_sendmsg+0xd5/0x120 [ 817.135302] ___sys_sendmsg+0x805/0x940 [ 817.139289] ? copy_msghdr_from_user+0x560/0x560 [ 817.144076] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 817.149622] ? proc_fail_nth_write+0x96/0x1f0 [ 817.154132] ? __fget_light+0x2ef/0x430 [ 817.158119] ? fget_raw+0x20/0x20 [ 817.161574] ? find_held_lock+0x36/0x1c0 [ 817.165648] ? kasan_check_write+0x14/0x20 [ 817.169897] ? wait_for_completion+0x870/0x870 [ 817.174495] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 817.180039] ? sockfd_lookup_light+0xc5/0x160 [ 817.184549] __sys_sendmsg+0x115/0x270 [ 817.188442] ? __ia32_sys_shutdown+0x80/0x80 [ 817.192859] ? __sb_end_write+0xac/0xe0 [ 817.196847] ? fput+0x130/0x1a0 [ 817.200133] ? ksys_write+0x1a6/0x250 [ 817.203953] __x64_sys_sendmsg+0x78/0xb0 [ 817.208027] do_syscall_64+0x1b1/0x800 [ 817.211924] ? finish_task_switch+0x1ca/0x840 [ 817.216413] ? syscall_return_slowpath+0x5c0/0x5c0 [ 817.221330] ? syscall_return_slowpath+0x30f/0x5c0 [ 817.226254] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 817.231610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 817.236444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 817.241620] RIP: 0033:0x455a09 [ 817.244793] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.252488] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 817.259743] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 817.267007] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 817.274268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 817.281529] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000004 2033/05/18 03:45:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9effffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:11 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x80000000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0x3}, {0x4, 0x8000}, {0xf, 0x3}, {0x2, 0x7f}, {0x4, 0xe9b}], 0x5) 2033/05/18 03:45:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8000000000000000]}, 0x10) 2033/05/18 03:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008922, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:11 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:11 executing program 3 (fault-call:3 fault-nth:5): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:11 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)=""/80, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0xfffffffffffffffc, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3ff, 0x0, 0x23a2, 0x1, 0x0}, &(0x7f0000000040)=0x10) clock_gettime(0x0, &(0x7f0000001740)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/165, 0xa5}], 0x1, 0x0, 0x0, 0xfffffffffffffff8}, 0xee11}, {{&(0x7f0000000400)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/101, 0x65}], 0xa, &(0x7f0000000bc0)=""/188, 0xbc, 0xff}, 0x4}, {{&(0x7f0000000c80)=@rc, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d00)=""/18, 0x12}, {&(0x7f0000000d40)=""/150, 0x96}, {&(0x7f0000000e00)=""/110, 0x6e}, {&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/222, 0xde}, {&(0x7f0000000fc0)=""/51, 0x33}, {&(0x7f0000001000)=""/59, 0x3b}, {&(0x7f0000001040)=""/26, 0x1a}], 0x8, 0x0, 0x0, 0x2}, 0x101}, {{&(0x7f0000001100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001180)=""/85, 0x55}, {&(0x7f0000001200)=""/48, 0x30}, {&(0x7f0000001240)=""/181, 0xb5}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/206, 0xce}, {&(0x7f0000001440)=""/240, 0xf0}], 0x6, &(0x7f00000015c0)=""/247, 0xf7, 0x2}, 0x8001}, {{&(0x7f00000016c0)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001740)}, {&(0x7f0000001780)=""/91, 0x5b}], 0x2, &(0x7f0000001840)=""/119, 0x77, 0xfffffffffffffbff}, 0x2}, {{&(0x7f00000018c0)=@can, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)=""/129, 0x81}, {&(0x7f0000001a00)=""/36, 0x24}, {&(0x7f0000001a40)=""/89, 0x59}], 0x3, &(0x7f0000001b00)=""/214, 0xd6, 0x4ee}, 0x2}, {{&(0x7f0000001c00)=@ll, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/202, 0xca}], 0x2, &(0x7f0000002dc0)=""/6, 0x6, 0x8}}], 0x7, 0x10001, &(0x7f0000003000)={r3, r4+30000000}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000003040)=@sack_info={r2, 0x401, 0xa8}, &(0x7f0000003080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r2, 0xc9}, 0x8) fadvise64(r0, 0x0, 0x10001, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000240)=0x80, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000002fc0)=0x8fb2, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 817.836926] FAULT_INJECTION: forcing a failure. [ 817.836926] name failslab, interval 1, probability 0, space 0, times 0 [ 817.848266] CPU: 1 PID: 23786 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 817.849665] binder: 23792:23793 transaction failed 29189/-22, size 0-0 line 2856 [ 817.855562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.855567] Call Trace: [ 817.855594] dump_stack+0x1b9/0x294 [ 817.855615] ? dump_stack_print_info.cold.2+0x52/0x52 2033/05/18 03:45:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 817.855640] ? print_usage_bug+0xc0/0xc0 [ 817.887943] should_fail.cold.4+0xa/0x1a [ 817.892025] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 817.897144] ? graph_lock+0x170/0x170 [ 817.900244] binder: 23792:23793 transaction failed 29189/-22, size 0-0 line 2856 [ 817.900951] ? mark_held_locks+0xc9/0x160 [ 817.900970] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 817.917197] ? find_held_lock+0x36/0x1c0 [ 817.921269] ? __lock_is_held+0xb5/0x140 [ 817.925347] ? check_same_owner+0x320/0x320 [ 817.929676] ? rcu_note_context_switch+0x710/0x710 2033/05/18 03:45:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 817.934606] __should_failslab+0x124/0x180 [ 817.938847] should_failslab+0x9/0x14 [ 817.942650] __kmalloc+0x2c8/0x760 [ 817.946198] ? lockdep_init_map+0x9/0x10 [ 817.950267] ? rfkill_alloc+0xf2/0x390 [ 817.954164] rfkill_alloc+0xf2/0x390 [ 817.957885] ? rfkill_fop_read+0x710/0x710 [ 817.962214] ? __lockdep_init_map+0x105/0x590 [ 817.966710] wiphy_new_nm+0x1633/0x2290 [ 817.970691] ? cfg80211_dev_check_name.isra.7+0x420/0x420 [ 817.976233] ? __lock_acquire+0x7f5/0x5140 [ 817.976339] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:11 executing program 0: r0 = socket$kcm(0x29, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634800acc56ebf8dfe5462c61f0d1df90d8c8310419b86ca78456e73b0a4d44830917ec532f4f0805a447781dfc00065b0580cf8d838d2951432054bbed1efce07e69e830c0296171199b34b030841d6a7d7b7b6cc4a8d2d642bb026132f5f0b2063359ccbb194b525fd24def912b329e844c065364eb6af897ee0abd9ea9345b0437a51a3adc021e315457d1f920404b0da73486231db45ec5c952cfe645c6472cf45d5559c57c3314936af50c01279467df4524d0f470775b640b953333464daf66794cb332fe3ccb66fadb727ee28211fedab587cb9b58a969138b789b3b57fa2d38f5166acbaae179ad19efd80912bcf9f0169766c8033d0b3310c88517f19f97b3834a4ba859fb99fba28c77b64d276e1423b6ee23f42b3c661653cfc68f49cecea7e832e3bf836ee7fa44a1d73f39800b3d2af67af6594f605e77478c0af04537b841f59b8a3f1d1261fa0f0815bbc5c8f29f7d0fa5386edb27e9aff1db2c9516ee3776570efaedd55756ab161cfe048bf1a2f8bf057973f1462fe083dfc88b24508b2435a73450596ee60fbbc05ad3f0bcda41bd67aca15539e641c1247bb3f91325b19ab2431ae0f14936f54fcaed655a67b240a4d9e930776a769245c905e6fb6a025a4a283011431"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 817.980461] ? __lock_acquire+0x7f5/0x5140 [ 817.980477] ? check_noncircular+0x20/0x20 [ 817.980497] ? print_usage_bug+0xc0/0xc0 [ 817.980513] ? __lock_acquire+0x7f5/0x5140 [ 817.980526] ? print_usage_bug+0xc0/0xc0 [ 817.980542] ? __lock_acquire+0x7f5/0x5140 [ 817.980560] ? print_usage_bug+0xc0/0xc0 [ 817.980579] ? print_usage_bug+0xc0/0xc0 [ 817.980593] ? print_usage_bug+0xc0/0xc0 [ 817.980609] ? print_usage_bug+0xc0/0xc0 [ 818.027300] ? __lock_acquire+0x7f5/0x5140 [ 818.031550] ? check_noncircular+0x20/0x20 2033/05/18 03:45:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 818.035792] ? __lock_acquire+0x7f5/0x5140 [ 818.036191] binder: 23810:23811 unknown command 4743953 [ 818.040039] ? debug_check_no_locks_freed+0x310/0x310 [ 818.040054] ? print_usage_bug+0xc0/0xc0 [ 818.040069] ? print_usage_bug+0xc0/0xc0 [ 818.040083] ? __lock_acquire+0x7f5/0x5140 [ 818.040101] ? unwind_get_return_address+0x61/0xa0 [ 818.040118] ? __save_stack_trace+0x7e/0xd0 [ 818.040135] ieee80211_alloc_hw_nm+0x4c9/0x2080 [ 818.040151] ? print_usage_bug+0xc0/0xc0 [ 818.064243] binder: 23810:23811 ioctl c0306201 20007000 returned -22 [ 818.067904] ? ieee80211_restart_work+0x1a0/0x1a0 [ 818.067924] ? __lock_acquire+0x7f5/0x5140 [ 818.067940] ? __lock_acquire+0x7f5/0x5140 [ 818.067957] ? kasan_slab_alloc+0x12/0x20 [ 818.067971] ? kmem_cache_alloc+0x12e/0x760 [ 818.067990] ? __d_alloc+0xc0/0xd30 [ 818.068018] ? graph_lock+0x170/0x170 [ 818.078459] binder: 23810:23811 ioctl c0306201 20000240 returned -11 [ 818.081030] ? debug_check_no_locks_freed+0x310/0x310 [ 818.081047] ? debug_check_no_locks_freed+0x310/0x310 [ 818.081063] ? print_usage_bug+0xc0/0xc0 [ 818.137483] ? print_usage_bug+0xc0/0xc0 [ 818.141555] ? find_held_lock+0x36/0x1c0 [ 818.145615] ? lock_downgrade+0x8e0/0x8e0 [ 818.149766] ? mark_held_locks+0xc9/0x160 [ 818.153903] ? kasan_check_read+0x11/0x20 [ 818.158045] ? __local_bh_enable_ip+0x161/0x230 [ 818.162710] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 818.167715] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 818.172805] ? trace_hardirqs_on+0xd/0x10 [ 818.176940] ? __local_bh_enable_ip+0x161/0x230 [ 818.181601] mac80211_hwsim_new_radio+0x235/0x3410 [ 818.186518] ? graph_lock+0x170/0x170 [ 818.190323] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 818.196547] ? lock_release+0xa10/0xa10 [ 818.200510] ? check_same_owner+0x320/0x320 [ 818.204847] ? rcu_note_context_switch+0x710/0x710 [ 818.209852] ? __lock_acquire+0x7f5/0x5140 [ 818.214077] ? __might_sleep+0x95/0x190 [ 818.218048] ? kasan_check_write+0x14/0x20 [ 818.222272] ? __mutex_lock+0x7d9/0x17f0 [ 818.226321] ? genl_rcv_msg+0x13a/0x170 [ 818.231912] ? __lock_acquire+0x7f5/0x5140 [ 818.236151] ? mutex_trylock+0x2a0/0x2a0 [ 818.240203] ? graph_lock+0x170/0x170 [ 818.243996] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 818.249181] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 818.254184] ? validate_nla+0x2d9/0x7b0 [ 818.258149] hwsim_new_radio_nl+0x7b8/0xa60 [ 818.262461] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 818.267645] ? __netlink_ns_capable+0x100/0x130 [ 818.272316] genl_family_rcv_msg+0x889/0x1120 [ 818.276807] ? genl_rcv+0x40/0x40 [ 818.280356] ? lock_downgrade+0x8e0/0x8e0 [ 818.284495] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 818.289508] ? kasan_check_read+0x11/0x20 [ 818.293647] ? lock_acquire+0x1dc/0x520 [ 818.297609] ? genl_rcv+0x19/0x40 [ 818.301066] genl_rcv_msg+0xc6/0x170 [ 818.304775] netlink_rcv_skb+0x172/0x440 [ 818.308913] ? genl_family_rcv_msg+0x1120/0x1120 [ 818.313659] ? netlink_ack+0xbc0/0xbc0 [ 818.317534] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 818.322722] ? netlink_skb_destructor+0x210/0x210 [ 818.327559] genl_rcv+0x28/0x40 [ 818.330826] netlink_unicast+0x58b/0x740 [ 818.334882] ? netlink_attachskb+0x970/0x970 [ 818.339280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 818.344807] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 818.349831] ? security_netlink_send+0x88/0xb0 [ 818.354403] netlink_sendmsg+0x9f0/0xfa0 [ 818.358467] ? netlink_unicast+0x740/0x740 [ 818.362695] ? security_socket_sendmsg+0x94/0xc0 [ 818.367444] ? netlink_unicast+0x740/0x740 [ 818.371672] sock_sendmsg+0xd5/0x120 [ 818.375376] ___sys_sendmsg+0x805/0x940 [ 818.379345] ? copy_msghdr_from_user+0x560/0x560 [ 818.384101] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 818.389633] ? proc_fail_nth_write+0x96/0x1f0 [ 818.394235] ? __fget_light+0x2ef/0x430 [ 818.398210] ? fget_raw+0x20/0x20 [ 818.401658] ? find_held_lock+0x36/0x1c0 [ 818.405735] ? kasan_check_write+0x14/0x20 [ 818.409972] ? wait_for_completion+0x870/0x870 [ 818.414551] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 818.420077] ? sockfd_lookup_light+0xc5/0x160 [ 818.424564] __sys_sendmsg+0x115/0x270 [ 818.428443] ? __ia32_sys_shutdown+0x80/0x80 [ 818.432840] ? __sb_end_write+0xac/0xe0 [ 818.436804] ? fput+0x130/0x1a0 [ 818.440074] ? ksys_write+0x1a6/0x250 [ 818.443875] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 818.448714] __x64_sys_sendmsg+0x78/0xb0 [ 818.452774] do_syscall_64+0x1b1/0x800 [ 818.456649] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 818.461482] ? syscall_return_slowpath+0x5c0/0x5c0 [ 818.466414] ? syscall_return_slowpath+0x30f/0x5c0 [ 818.471343] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 818.476698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 818.481534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 818.486706] RIP: 0033:0x455a09 [ 818.489878] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.497584] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 818.504845] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 818.512101] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 818.519355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 818.526608] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000005 2033/05/18 03:45:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7733000000000000]}, 0x10) 2033/05/18 03:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008923, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 818.541563] binder: 23794:23813 transaction failed 29189/-22, size 0-0 line 2856 [ 818.548761] binder: 23810:23811 unknown command 4743953 [ 818.559902] ip6tnl0: Invalid MTU 541982722 requested, hw max 65392 [ 818.570800] binder: 23810:23811 ioctl c0306201 20007000 returned -22 [ 818.576228] binder: 23794:23813 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:12 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 818.661690] binder: 23824:23827 transaction failed 29189/-22, size 0-0 line 2856 [ 818.687372] : renamed from ip6tnl0 [ 818.725223] binder: 23824:23827 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:12 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="19634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:12 executing program 3 (fault-call:3 fault-nth:6): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf73]}, 0x10) 2033/05/18 03:45:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008933, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:12 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x4, 0x7, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x84, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x2}, @in6={0xa, 0x4e20, 0xccc, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in6={0xa, 0x4e24, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in6={0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0xa}, 0x1ff}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000017c0)=ANY=[@ANYRES32=r2, @ANYBLOB="b90000004a49ade2ade48361ed92f27987f82a63bbdce9e0314c1cb9d7cedb3d1c9f11079e45084ce9c997b96335d6c17cb97be8820abbda0f925bd58fce0e1c11dbdf96733a94f6f34aa451ee77c0fb943542cef3314c9b0eb9fef7c4617c02c5e55a72acfe9c40b397b4397750e551a567d4e9d7f661a94b0863232f7d4c1ba4ddd2bef2cc26a814246e94647083633b19369685d6ab3d7c93a0d912088a7135ef4c92dd7e86f6b6ea710b34749bc6558e136748c20ba0193ec366798bdbea66b264c8f7e76392a4ffbc4b9e46bab1266b09a40b"], &(0x7f0000000300)=0xc1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) sendmmsg$inet_sctp(r1, &(0x7f0000001780)=[{&(0x7f0000000340)=@in6={0xa, 0x4e22, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffff}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="a97cd32a864f9d448e289ca90e04", 0xe}, {&(0x7f00000003c0)="7e7d4802bf5ab2241010d5a2060be99b4c8c6cbc3ef14ac30d749b4c18e8a922392831b810ad69a513bf8d1a395be7fc8a66795d51f7f504244976c0c0a547eea0e2211eefbf7ff63c3f45c83419beea414a736b890801cbd32f4f2fa57f8d1f14a579779473e24c515ec01c44c2872049d998f474dec149b235448083e804d6b8f0bbb9935edaaacdc9b7d5f96068bfc702f36dacd0ff2c65d20e62a2f63741c6d1e04c7ee918559d73e4a666fc4498e6963bc8685ee58124688807141910ab383d4f6bb92d3842d9b79e7ed3bebea4764b4114823ea20aaf6ab1b078eb01f06b5d6ec93e24a07168b74748210907d11db850d7f47e144daf7ebca6f9f96f85244119699c702ff4cdb2f410cf841e9425b38bd8dc0381e5f25ec3f60202f668004f84e74d9548b2ede260c23bc8ed9a9fe59530235f40d0dde8d15afae055bd223c6c89ea7402afa4e686586ef0aa50816b8c2f4050ef6a35522f5400a536792347ebfb37e8d80eaadd30dd7ee0cc3f68c65fc4c041558f31d5bfadae363c0e19733c54d05dbef295ceef1c4f5f252075caf85afe9caac37465831b0bd022e47842ea757867aa0fbfc0a89d31b013481da568538613df0ca041c4d31d26f7d8ce29642ef9b5f9f43a23604c69911cd59092b0fc69556debda8ef115ceb810630b5b35190be4e8ed12128ee12ec506a5ce3d1c609565cdb595d74babb8a56d43eb544fd6ae9fbb91e04f58cfae846ba47570d3f6e72367e5de3fbd28856b4b7422391ad39ae7a49a23b6c53da4045ec94aadaf5622f7fd4ee0bb43d1e0490a705ff4eece2b3a5b3aa299a24f93b0eefe3af566f2d888b990d74190955c196629ceca6d4b89f374ff7a0af5355fea408205900429ec81ace582462948c628030668997e70712ae7684fbeeff9099533c67592d18e4bc661e33c0c8fafc2964dc60296e8e8197e92e703b92db735caba642fecae747e7a337e3e0ef04d1dbfd028ed971dfcc7695f316a605d0896a44741b2671dd80dbafeac2a7ea3e3356d67d5c64c4c435a43ff3bb49164ea763678d765fec9e1e90b114ec0217530d76506cd77ae8a9b4aadba6a287a7db2a8fc3e53d9261cb8349420e0f968576de9bf2fa3e1c5dc8c232065419c7dbd90e7430fc2bf634e9c123cf15405d4663d29a5f5ca27b976ed7ac3696605280464dbe81b2729b0cce24c40870ab85f409b4902361340535e0263087c8643cc525f197bad8bdc5aa24a4f0bd8675e3d00f738555241d18a7752bf35349ac8e3086411b4c3a2ebfdcaa1cfb2fbc5512119e9d95e535503e11bbb024d7606c9c364fda06ce7cf318ec6283809e8c739320d2e5c6b43deab1ae7e65d5688de5b6eeb6f2ee9ff38ee4d5bdd3e1df891062a0e0c3fd3b360b4efbbee36ccad937b199bf2435b8edd9fbfa64ae0050773a137ad70ba981bf01a50744149931ad00f68bfa6e0ebae2472df0210ae2ab95baced4d9ad89fd50d7d3e55166d2e885b0359b5c0fe0594bf3691c145e2910b3fd08d928c49f8a61b1df47c5981fb2a046693b59502304ac30744190c534879fe3d51d3bc0a482b067b79867a8208d16859102fef20b4a7ab84134a4625cbed5bc600f4d7ca64efd0c5f62e3d32f4a6fc1d247ba5fc971f9def80e09a49bc8314560bb5e8ae1c252397d9cbf5db2aed9d5ff371ac9ac85d8d4a69d3f444bbde4e485958c1170696b6999fda4f1cad0962d22e686d189ded486eb044d468093b0a2485b7b29831ef67d16dbdcd082686474ff62317a1739a28f3867d06b498afeaa00ac95d899121907387a7c0c972ec0a2dceefe23a75fc4addc8c4f2bb7d1259deffb5dc65b0139cbb90dcc97a0e5b24bb09f6e33f20e187749a1762d16bdbb2daa63deb2e65da5b0c82d51c89e2cdc0d0347808c3c1cf0c1ae6d665659249ea26dcc38dfb09fdc27291e064b90eb2a279ba037bb9499c042d9831bb0ea3e8cbd1b17d18ae5057897160a06d668b0c8ad88491dc1ada26ae331393417a2448abd18461a44bf2614756666e5a5eb223893c5a7090d1ca434fd363bb18356335a5fd9f8fbaafd0db9de1a96c37fcc142211a9ab9723cc59272103ce92a5af41467a0d326a0c26adfbfd2e60203099ca304ee2ceac9665bd4da649c0f8d8003ecd76868dffd75f5c89d090e427f542b9f78ad050869ca7060531f3ab0e0c9b23a263c3bfc4b4d7d53a864c4ae2248445b6dc8ca6ee4c565e902e9176d1be6729f624ec91636b6f280967630894d2e7fff57cc75998146bd427a1ab2cdb62291566ef87ea433a1deb2ea5d8e2820f980625853e582a478a92e70a274a28e8e73695e90c655dc1b8f57194282af9eea97feeb2586727c1e43108d1b32a682ff72cadc186b10dbd4c1f544a3b06d153ca528ae3f861964d596b5698b7072c1a3d7b160da10177bd8fcd0bfc85ade3d2007cb8eb62d8faf6e577c5fb12bf09202ea1c08220f7184d62b9557693e7a1b1e00f1328b1c782238e108ce3fb3804bc08cb1f910a31599e58c7e6bb33092ebb76da04bcada157ac5d2821306dd03863b3379e8d105c61f706026faf2fa8acc8dd3140c55a4a814e93bc6c258a999162b844f7ff37f7c0715b5ccbb6fa7e575416cbaef5871e1b7a9501b731cf3373ee6dd699f6296d22212684db601c27296280f9c833ce760dea89e2990b22281e49d0bd9415809c1e8558c46ea007e3e1c9dea97246886aa95fcfc16ccb459e5810ac649d8926272a1e2f89e1c0ff14f2f65cc329b119174d49da4ce102b7a16d2a786904e8b0314146ed25828fa6cd42ccf557a2a1bde8cd0c57501fe58fa16ece109d29c4034453d00c5e0edbf5198561d0f74f58db3eb8c5efddac86bfd7ff44066acc2b6edc1c4159a285e35ae0edffee316ee548033e66329db52ce6f49c84fec139eeb5994c44aa07063bd731400477d5593828a7703e403d33737dc24e4c1a23ab5e07b456a7fc9fa99a85aada2b3cf883dabdd49e362ea8f31577f3465782d432358386e56ad72ee24825e738c69855616a46aff9c9373bb6df1b1a23c486335d8be3933ae5cfc468e546144ca28f879a10bc7ed874d3e8e30016e99258f3d4ce6ee7ebd60877d928dfc3da71400091d154d2be4b85e2473b9cfdda771c1bb3a2a19b5c416b34f8e2b9f539a0f520adfe3340da78dbe9c43fa9c9dfa63a039b40af171baa8601c8e448108990084dff5f723b2b063801053fc2065d498c8e7eb8d619e8ec04e54427e79d812bc996815eb49cf52965acb03b4cfa76fb1b6b044f0fe6bfc0ce334e9a3adacac6acf1a7bcacb7a09021bc7ff218fad0516ea648677a2f40e4e2f7a5b3c75b1f842e5b2d4c6d2599e7e4c88983a4c29a66d2f64c999e0c1772e6fe1554361e96aebd219790efd6db233293086f50186e4aebfe26e271c6b8a70fdba6ead677b7e2f0f5d708a7d674e1ce923bf9f37ed78704e77786c2188ce033c1afafdd7e7e4db91492ca457cf3667b1a3f0af81347b8ef26aa97fab204ef721acdb747b4174d0805d3f76117a946db4dcdf414d2038381b2b4b37ecf6f6fc1904864378dbba984e375e1d909b06b7a477e8429e6689a3c7cdb7875a9553925c1f2d63ee6f953964fb83fd1ed5722b651c646df98faaba4229b7a0ee5de4c169b2f3fe20a4d33f0730da5fcf8b3cc181e432419ec3998d73a1b7bbfe11b70ac8fcb4bf73280423255f5a132b8d816d4c0a43c63af5a538a892748ab4931db31875e6cde85a08a55145521d1a14a7da574a3424b2aab1b9d8e6b864689131fcd49a94436816862c2c1475f0b2936e6f73d0f1a5898c603fd14a135006c3d1cee5e4bc67fae4902b3fd7b5234a6a6b30edcc4b517d0b4c5d09d56c84dcc626e4d99fc7730df4c0e41448804deaabbde26bdc19cc261d7ebc33b636feb04428f169fb6a34a391eb603095cd57fed97d443ba73588b2120049d59a1d4c9c4efc8e343704e580457b8aade4e305b33f4eb1b7d0d8fc4095e156f49e259cb3e2eb267bf44803c1949ffdc5210cebad96eba35dacac909b1b077378bc3accd08a339cde1028b34a37c41d6d6899da6eaf75381b1bf9d52448c0cd0b11ecbbb1b94ecfc18e89bc9e4cb23fa1be7dbd590729777e1b2ab574580cbf559635518816208a0e41eee1d15f1481d454b083df72944dc3d4bc23f16e2c7091b28c17e5c1e29ee9ce0d675782ce45f1a511e5a9a4411e567d1e0990a052bf90097195e4c298db12420fad3be7f71f7782e46af18efa50146095c9f9f2a380c682709db9741cba9cd98a8148a44d8e1aa440b365fe611214289aa1221b023ad8a902eedfccdcba5e35a50c6f96ee9193023f751cd3b5ae3125e68619fbd36df456648f2601366f5d9344543eb46662b434153717474fa0025b359524f9ccba281059f9e2a49304a8e4f0256b56b455abd7d9cb67d741d813c653c61ad3da8beb25eff470c141d257487ee745ba8124c88e0e0a9124e5b3eb26fc824b4807f569585e6c1a3ec8932972194b59489813ef2ff505dcc4d8a26f41838da46aed88238b10ae95977c5c4978932f4bf59152d0ecc6b7a5662f2ea82c94475cfdba77d7652fc579c75859933c4b06649945a404e2268ba98c9cf0264667c158eca1d0052fe74cfb238bceeaa8a4fde07f1fd0953c73233128e48f8b8d7f140ea8e41ed82ef4467736cc47f7d1909486b24742128dcc4d594bfdc987a9872217bcf3f76700871b3c43b78f4ef998f47bd9e0e8b675a44e3be3e3a14c77606b72bd719a18ea32c57b3f39b99b6d90d9270f5afd50f66857d25fe8ceacdd6da2386b9f8af0c92375196365761018acd30c955d876fcf2ba233bf73f9a23045bf7d261176c3ee2bc2ed7c4a61a73329be16ea45cc1675440c0205e1263fd602b56761bc11cf2afbc68f0f60b6b298f4cdc468885af0bc667e5e0acf9777434db8780bc29c63bca77871f335f0bd31e932940f3c5b35552389cda33ed774bdf2bf5f70589a3a3a33afa1ca17ab31152738216d6e7624b6b3c7be8f704fa2a6cb956b0cf0b183215358e513c6cd5e98f4d696ddedd5c4ea139eebb85522c415da2135d972d74b8323b10ff127100c9657c20a0edc6a7a4b6a79aa3693cbefe3c392e61f5aa76a27125dc3579e7f7bd6f9a810bf4b8c3e589e97c4dd524de2360fb3f5294932a652e44824af1a460451e9dd3927fd338c2f3f4049cf11969bf69ec5cfe00351ded45e51a4692ed08ce6858473e388c5aad92542093d1c4dbdddc94db8e2a56edd706f26b0950a890b30fc6d0b1bb767e8a9f6639dd1e8747c065f0fa09ff3737fe0b1d7409fdc27e0f62a9272f9308b2b72c7389c56a72116bab4347b9b04a5b394c13dc8953668498e084c08f78448ca303f1074796c86ecb4a2cca20ef591013464485e3becbac736d6168bfd5ec19d49d8f9bf14426ffaf3e051d45055c53bf4b08c654412e85f0f1c3eba7b7d76ba720ecc3eabe24d577358afafacdee19a6298669c35057d7394e0a31206efefe3dd4a4386a7e7290cfaea0750f4dd24ba329f15ce9024491e73cb95653c6b5bc0739f3d932279a1f08b74019a2c1e6433144b7b83005e609033eb1a9fafc8bac782229a34880b7a48ed52f741e57da0afdc9fa18243f6b8ba4db6f15d12dff66445c841869864b66679d235d8aba5a7310c1e10c70247f88d28d96ba5fe276343ab83e496b3997e5826b5a7b98370f3795634b4b5e7b84e554078ca1fc1681b1bf8a0c443a9bb763f4b4370aec4085373c6f6cf20d52f1f1ee18266", 0x1000}, {&(0x7f00000013c0)="68e64e68b3c2522ed264fd15ee4e224d99c27d44c249edf40500a1e326746010ab8b1b5e7d7d30a41b86a6", 0x2b}, {&(0x7f0000001400)="7baf1316b7b0ee21b096565614627fab791d1d2203974d2a57f60d85a8243e294cb003b7721037352f574c7545c201d181e43ecaa20eced18bcd23b2e95ff994006ed714b7dfe325ae2fba338538474e7f0f769799b09e8df5b117cb4d4353c6d239f95632e1d9dfe6f1d3078651419562b68c72bcf94d74637ed590d9eec900ab1ba7458648498decf0a1df690850560c5cd5de32d7704c67dfd999e2ef2beea94ca8500537a1fc274ec4842665ddaa298b42481bcd9f993ef1d234752c1f8e30adc52f458b8a1e515a4e33c6a63b", 0xcf}, {&(0x7f0000001500)="8b652cf0fc6a2a94a00849ac257ef02306299fe8c7ff40f4622f55b35a28a8614853d9c434457d5fa094161cba5518a11065b65f1fdc9c4512660c6415af9ed772335ce1e8f0fe962903dc43c905", 0x4e}, {&(0x7f0000001580)="8813ae2438fc968892e2c74ddefa55b5490fc454bbe930f44499bc6f38a252a5d239030596be5b37cfdf0b12f97c384f7cec4ece29edaf635a12088af991f7fd2bee5732fc49042a2bb6953fe124", 0x4e}, {&(0x7f0000001600)="d828e839102b1d658ed9fc14803c49e65794b12cef996242f4a21faf4cba5f66e8870305f9e887210f6a43cff57d51f0387b3a124622ebd0683d392916da468d58156317885a3c31af593fcc13b7d4eb0f09e3f8f86c401b81e88befc3e210eb438cbb948a53cca5eabf059a3f797191fa310d5dfc1b7af197e700d6d5ffe995212e8ce2934ae3d6a7fcadaed910d062e5b946521b69fa334659e36c5c331f38627880d158c0a1e0efcddc4cb0581f4d9b7b87cfa8dfc01f6b5922fb244b6b8179f0f9fc8decbfe9b76546c562cd497803e3d141997d321d", 0xd8}], 0x7, 0x0, 0x0, 0x48000}], 0x1, 0x4000000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000200)=""/249) 2033/05/18 03:45:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 818.877113] binder: 23846:23848 unknown command 1078485785 [ 818.880200] binder: 23852:23857 transaction failed 29189/-22, size 0-0 line 2856 [ 818.890822] FAULT_INJECTION: forcing a failure. [ 818.890822] name failslab, interval 1, probability 0, space 0, times 0 [ 818.899222] binder: 23846:23848 ioctl c0306201 20007000 returned -22 [ 818.902165] CPU: 1 PID: 23855 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 818.916401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.925758] Call Trace: [ 818.928361] dump_stack+0x1b9/0x294 [ 818.932012] ? dump_stack_print_info.cold.2+0x52/0x52 [ 818.936993] binder: 23846:23848 ioctl c0306201 20000240 returned -11 [ 818.937213] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 818.937244] should_fail.cold.4+0xa/0x1a [ 818.947113] binder: 23846:23848 unknown command 1078485785 [ 818.948918] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 818.948946] ? unwind_get_return_address+0x61/0xa0 [ 818.953198] binder: 23846:23848 ioctl c0306201 20007000 returned -22 [ 818.958594] ? __save_stack_trace+0x7e/0xd0 [ 818.958611] ? graph_lock+0x170/0x170 [ 818.958631] ? find_held_lock+0x36/0x1c0 [ 818.958649] ? __lock_is_held+0xb5/0x140 [ 818.958675] ? check_same_owner+0x320/0x320 [ 818.995612] ? rcu_note_context_switch+0x710/0x710 [ 819.000536] __should_failslab+0x124/0x180 [ 819.004762] should_failslab+0x9/0x14 [ 819.008554] kmem_cache_alloc_node_trace+0x26f/0x770 [ 819.013644] ? __kmalloc_node+0x33/0x70 [ 819.017603] ? __kmalloc_node+0x33/0x70 [ 819.021566] ? rcu_read_lock_sched_held+0x108/0x120 [ 819.026576] __kmalloc_node+0x33/0x70 [ 819.030370] kvmalloc_node+0x6b/0x100 [ 819.034164] alloc_bucket_spinlocks+0x92/0x1a0 [ 819.038739] bucket_table_alloc+0x17e/0x5d0 [ 819.043050] ? __raw_spin_lock_init+0x1c/0x100 [ 819.047621] ? rhashtable_insert_one+0xb20/0xb20 [ 819.052365] ? __lockdep_init_map+0x105/0x590 [ 819.056856] rhashtable_init+0x5ba/0xaa0 [ 819.060912] ? rhashtable_rehash_alloc+0x100/0x100 [ 819.065832] ? graph_lock+0x170/0x170 [ 819.069624] ? __lock_acquire+0x7f5/0x5140 [ 819.073859] rhltable_init+0x58/0xb0 [ 819.077562] sta_info_init+0x75/0x1e0 [ 819.081345] ? print_usage_bug+0xc0/0xc0 [ 819.085394] ? sta_info_recalc_tim+0x20/0x20 [ 819.089789] ? print_usage_bug+0xc0/0xc0 [ 819.093839] ? update_load_avg+0x2d9/0x2570 [ 819.098160] ? unwind_get_return_address+0x61/0xa0 [ 819.103090] ? __save_stack_trace+0x7e/0xd0 [ 819.107405] ieee80211_alloc_hw_nm+0x74e/0x2080 [ 819.112061] ? print_usage_bug+0xc0/0xc0 [ 819.116117] ? ieee80211_restart_work+0x1a0/0x1a0 [ 819.120946] ? __lock_acquire+0x7f5/0x5140 [ 819.125168] ? __lock_acquire+0x7f5/0x5140 [ 819.129394] ? kasan_slab_alloc+0x12/0x20 [ 819.133539] ? graph_lock+0x170/0x170 [ 819.137328] ? debug_check_no_locks_freed+0x310/0x310 [ 819.142506] ? debug_check_no_locks_freed+0x310/0x310 [ 819.147681] ? print_usage_bug+0xc0/0xc0 [ 819.151737] ? print_usage_bug+0xc0/0xc0 [ 819.155785] ? find_held_lock+0x36/0x1c0 [ 819.159842] ? lock_downgrade+0x8e0/0x8e0 [ 819.163980] ? mark_held_locks+0xc9/0x160 [ 819.168115] ? kasan_check_read+0x11/0x20 [ 819.172254] ? __local_bh_enable_ip+0x161/0x230 [ 819.176912] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 819.181914] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 819.187005] ? trace_hardirqs_on+0xd/0x10 [ 819.191154] ? __local_bh_enable_ip+0x161/0x230 [ 819.195815] mac80211_hwsim_new_radio+0x235/0x3410 [ 819.200733] ? graph_lock+0x170/0x170 [ 819.204533] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 819.210681] ? lock_release+0xa10/0xa10 [ 819.214653] ? check_same_owner+0x320/0x320 [ 819.218984] ? rcu_note_context_switch+0x710/0x710 [ 819.223908] ? __lock_acquire+0x7f5/0x5140 [ 819.228229] ? __might_sleep+0x95/0x190 [ 819.232197] ? kasan_check_write+0x14/0x20 [ 819.236428] ? __mutex_lock+0x7d9/0x17f0 [ 819.240481] ? genl_rcv_msg+0x13a/0x170 [ 819.244445] ? __lock_acquire+0x7f5/0x5140 [ 819.248670] ? mutex_trylock+0x2a0/0x2a0 [ 819.252721] ? graph_lock+0x170/0x170 [ 819.256512] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 819.261692] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 819.266704] ? validate_nla+0x2d9/0x7b0 [ 819.270669] hwsim_new_radio_nl+0x7b8/0xa60 [ 819.274983] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 819.280168] ? __netlink_ns_capable+0x100/0x130 [ 819.284920] genl_family_rcv_msg+0x889/0x1120 [ 819.289497] ? genl_rcv+0x40/0x40 [ 819.292939] ? lock_downgrade+0x8e0/0x8e0 [ 819.297083] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 819.302090] ? kasan_check_read+0x11/0x20 [ 819.306226] ? lock_acquire+0x1dc/0x520 [ 819.310195] ? genl_rcv+0x19/0x40 [ 819.313823] genl_rcv_msg+0xc6/0x170 [ 819.317527] netlink_rcv_skb+0x172/0x440 [ 819.321584] ? genl_family_rcv_msg+0x1120/0x1120 [ 819.326330] ? netlink_ack+0xbc0/0xbc0 [ 819.330206] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 819.335387] ? netlink_skb_destructor+0x210/0x210 [ 819.340233] genl_rcv+0x28/0x40 [ 819.343499] netlink_unicast+0x58b/0x740 [ 819.347556] ? netlink_attachskb+0x970/0x970 [ 819.351951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 819.357477] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 819.362484] ? security_netlink_send+0x88/0xb0 [ 819.367056] netlink_sendmsg+0x9f0/0xfa0 [ 819.371113] ? netlink_unicast+0x740/0x740 [ 819.375340] ? security_socket_sendmsg+0x94/0xc0 [ 819.380084] ? netlink_unicast+0x740/0x740 [ 819.384312] sock_sendmsg+0xd5/0x120 [ 819.388021] ___sys_sendmsg+0x805/0x940 [ 819.392004] ? copy_msghdr_from_user+0x560/0x560 [ 819.396776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 819.402301] ? proc_fail_nth_write+0x96/0x1f0 [ 819.406789] ? __fget_light+0x2ef/0x430 [ 819.410752] ? fget_raw+0x20/0x20 [ 819.414194] ? find_held_lock+0x36/0x1c0 [ 819.418250] ? kasan_check_write+0x14/0x20 [ 819.422481] ? wait_for_completion+0x870/0x870 [ 819.427063] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 819.432612] ? sockfd_lookup_light+0xc5/0x160 [ 819.437095] __sys_sendmsg+0x115/0x270 [ 819.440973] ? __ia32_sys_shutdown+0x80/0x80 [ 819.445370] ? __sb_end_write+0xac/0xe0 [ 819.449337] ? fput+0x130/0x1a0 [ 819.452612] ? ksys_write+0x1a6/0x250 [ 819.456420] __x64_sys_sendmsg+0x78/0xb0 [ 819.460470] do_syscall_64+0x1b1/0x800 [ 819.464346] ? finish_task_switch+0x1ca/0x840 [ 819.468832] ? syscall_return_slowpath+0x5c0/0x5c0 [ 819.473764] ? syscall_return_slowpath+0x30f/0x5c0 [ 819.478688] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 819.484050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 819.488892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 819.494066] RIP: 0033:0x455a09 [ 819.497326] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.505030] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 819.512295] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 819.519560] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:45:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x37be]}, 0x10) [ 819.526821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 819.534083] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000006 [ 819.548281] binder: 23852:23857 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:13 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:13 executing program 3 (fault-call:3 fault-nth:7): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:13 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="f0b589"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x4000) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x7) syncfs(r2) 2033/05/18 03:45:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000c0045877, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 819.678419] binder: 23878:23879 transaction failed 29189/-22, size 0-0 line 2856 [ 819.703659] FAULT_INJECTION: forcing a failure. [ 819.703659] name failslab, interval 1, probability 0, space 0, times 0 [ 819.715005] CPU: 1 PID: 23882 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 819.722289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.731652] Call Trace: [ 819.734259] dump_stack+0x1b9/0x294 [ 819.737908] ? dump_stack_print_info.cold.2+0x52/0x52 [ 819.743119] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 819.748340] should_fail.cold.4+0xa/0x1a [ 819.750112] binder: 23887:23889 unknown command 9025008 [ 819.752418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 819.752443] ? unwind_get_return_address+0x61/0xa0 [ 819.752460] ? __save_stack_trace+0x7e/0xd0 [ 819.752479] ? graph_lock+0x170/0x170 2033/05/18 03:45:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 819.774934] binder: 23887:23889 ioctl c0306201 20007000 returned -22 [ 819.775966] ? find_held_lock+0x36/0x1c0 [ 819.775990] ? __lock_is_held+0xb5/0x140 [ 819.776024] ? check_same_owner+0x320/0x320 [ 819.789460] binder: 23887:23889 ioctl c0306201 20000240 returned -11 [ 819.790607] ? rcu_note_context_switch+0x710/0x710 [ 819.790627] __should_failslab+0x124/0x180 [ 819.790647] should_failslab+0x9/0x14 [ 819.810304] binder: 23887:23889 unknown command 9025008 [ 819.810589] kmem_cache_alloc_node_trace+0x26f/0x770 [ 819.810606] ? __kmalloc_node+0x33/0x70 [ 819.824791] binder: 23887:23889 ioctl c0306201 20007000 returned -22 [ 819.824849] ? __kmalloc_node+0x33/0x70 [ 819.839258] ? rcu_read_lock_sched_held+0x108/0x120 [ 819.844290] __kmalloc_node+0x33/0x70 [ 819.848101] kvmalloc_node+0x6b/0x100 [ 819.851912] alloc_bucket_spinlocks+0x92/0x1a0 [ 819.856509] bucket_table_alloc+0x17e/0x5d0 [ 819.860841] ? __raw_spin_lock_init+0x1c/0x100 [ 819.865445] ? rhashtable_insert_one+0xb20/0xb20 [ 819.870205] ? __lockdep_init_map+0x105/0x590 [ 819.874714] rhashtable_init+0x5ba/0xaa0 [ 819.878783] ? rhashtable_rehash_alloc+0x100/0x100 [ 819.883719] ? check_noncircular+0x20/0x20 [ 819.887970] ? __lock_acquire+0x7f5/0x5140 [ 819.892228] rhltable_init+0x58/0xb0 [ 819.895948] sta_info_init+0x75/0x1e0 [ 819.899753] ? print_usage_bug+0xc0/0xc0 [ 819.903823] ? sta_info_recalc_tim+0x20/0x20 [ 819.908322] ? print_usage_bug+0xc0/0xc0 [ 819.912379] ? __lock_acquire+0x7f5/0x5140 [ 819.912836] binder: 23878:23879 ioctl c0306201 20000240 returned -14 [ 819.916607] ? unwind_get_return_address+0x61/0xa0 [ 819.916626] ? __save_stack_trace+0x7e/0xd0 [ 819.916645] ieee80211_alloc_hw_nm+0x74e/0x2080 [ 819.916661] ? print_usage_bug+0xc0/0xc0 [ 819.916674] ? ieee80211_restart_work+0x1a0/0x1a0 [ 819.916688] ? perf_trace_lock+0xd6/0x900 [ 819.916700] ? __lock_acquire+0x7f5/0x5140 [ 819.916717] ? zap_class+0x720/0x720 [ 819.958005] ? graph_lock+0x170/0x170 [ 819.961815] ? debug_check_no_locks_freed+0x310/0x310 [ 819.967014] ? debug_check_no_locks_freed+0x310/0x310 [ 819.972211] ? print_usage_bug+0xc0/0xc0 [ 819.976295] ? print_usage_bug+0xc0/0xc0 [ 819.980364] ? find_held_lock+0x36/0x1c0 [ 819.984441] ? lock_downgrade+0x8e0/0x8e0 [ 819.988609] ? mark_held_locks+0xc9/0x160 [ 819.992763] ? kasan_check_read+0x11/0x20 [ 819.996922] ? __local_bh_enable_ip+0x161/0x230 [ 820.001600] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 820.006630] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 820.011737] ? trace_hardirqs_on+0xd/0x10 [ 820.015895] ? __local_bh_enable_ip+0x161/0x230 [ 820.020576] mac80211_hwsim_new_radio+0x235/0x3410 [ 820.025510] ? graph_lock+0x170/0x170 [ 820.029331] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 820.035498] ? lock_release+0xa10/0xa10 [ 820.039479] ? check_same_owner+0x320/0x320 [ 820.043818] ? rcu_note_context_switch+0x710/0x710 [ 820.049078] ? __lock_acquire+0x7f5/0x5140 [ 820.053325] ? __might_sleep+0x95/0x190 [ 820.057316] ? kasan_check_write+0x14/0x20 [ 820.061567] ? __mutex_lock+0x7d9/0x17f0 [ 820.065640] ? genl_rcv_msg+0x13a/0x170 [ 820.069626] ? __lock_acquire+0x7f5/0x5140 [ 820.073875] ? mutex_trylock+0x2a0/0x2a0 [ 820.077933] ? perf_trace_lock+0xd6/0x900 [ 820.082068] ? graph_lock+0x170/0x170 [ 820.085860] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 820.091043] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 820.096047] ? validate_nla+0x2d9/0x7b0 [ 820.100018] hwsim_new_radio_nl+0x7b8/0xa60 [ 820.104335] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 820.109518] ? __netlink_ns_capable+0x100/0x130 [ 820.114183] genl_family_rcv_msg+0x889/0x1120 [ 820.118681] ? genl_rcv+0x40/0x40 [ 820.122121] ? lock_downgrade+0x8e0/0x8e0 [ 820.126266] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 820.131276] ? lock_acquire+0x1dc/0x520 [ 820.135244] ? genl_rcv+0x19/0x40 [ 820.138699] genl_rcv_msg+0xc6/0x170 [ 820.142402] netlink_rcv_skb+0x172/0x440 [ 820.146451] ? genl_family_rcv_msg+0x1120/0x1120 [ 820.151203] ? netlink_ack+0xbc0/0xbc0 [ 820.155085] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 820.160271] ? netlink_skb_destructor+0x210/0x210 [ 820.165118] genl_rcv+0x28/0x40 [ 820.168387] netlink_unicast+0x58b/0x740 [ 820.172440] ? netlink_attachskb+0x970/0x970 [ 820.176838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 820.182361] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 820.187368] ? security_netlink_send+0x88/0xb0 [ 820.191940] netlink_sendmsg+0x9f0/0xfa0 [ 820.195995] ? netlink_unicast+0x740/0x740 [ 820.200223] ? security_socket_sendmsg+0x94/0xc0 [ 820.204966] ? netlink_unicast+0x740/0x740 [ 820.209202] sock_sendmsg+0xd5/0x120 [ 820.212907] ___sys_sendmsg+0x805/0x940 [ 820.216874] ? copy_msghdr_from_user+0x560/0x560 [ 820.221644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 820.227170] ? proc_fail_nth_write+0x96/0x1f0 [ 820.232772] ? __fget_light+0x2ef/0x430 [ 820.236739] ? fget_raw+0x20/0x20 [ 820.240179] ? find_held_lock+0x36/0x1c0 [ 820.244234] ? kasan_check_write+0x14/0x20 [ 820.248463] ? wait_for_completion+0x870/0x870 [ 820.253047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 820.258571] ? sockfd_lookup_light+0xc5/0x160 [ 820.263056] __sys_sendmsg+0x115/0x270 [ 820.266935] ? __ia32_sys_shutdown+0x80/0x80 [ 820.271333] ? __sb_end_write+0xac/0xe0 [ 820.275299] ? fput+0x130/0x1a0 [ 820.278567] ? ksys_write+0x1a6/0x250 [ 820.282450] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 820.287284] __x64_sys_sendmsg+0x78/0xb0 [ 820.291334] do_syscall_64+0x1b1/0x800 [ 820.295210] ? finish_task_switch+0x1ca/0x840 [ 820.299691] ? syscall_return_slowpath+0x5c0/0x5c0 [ 820.304607] ? syscall_return_slowpath+0x30f/0x5c0 [ 820.309536] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 820.314895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 820.319729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 820.324905] RIP: 0033:0x455a09 [ 820.328078] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.335774] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 820.343038] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 820.350299] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 820.357553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 820.364817] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000007 2033/05/18 03:45:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:14 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000002c0)=0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d71087706000000000000001ef4c98ecc6847c61a63131fb5b350addcea6d6f52da13875362d7a7f8f6ea9be78315495b0e7867ff7b2b2cef89259d6b1d9b8094c71ce5849fa9f5af7c5bd14ecc22b88f194534d39ed4ff7ec90843561d675766da830cecfb761cd2de91496cf55d0b3fbe5490ba2f77c90b1fae428b7ba49f03036052bcf0ba68cf5bab3c0df83481d17d8d1647c5745bda833ee966aca88f5e1c812bbdb3e6a22239a2aa37ebbe14bbc4ef4a3ab8da4e7d385dbb0695f79a4374dca041e11ea6ee7aff0a9b1589df5ae89eebda860e6d33502dd3169dd03d266f7fe2e5b6ff5abb8d1eb47e7987526a30987548cc3388ced7c081da423afac4f64bb4377b81a50610192b572d860701eee2df77f22b9592e84bccadb206a075ed905f3f9b94e2d51a6ab2514291fdf80b4a989f208789d96f1a854be529be21cdf81769a5b3d0d7566d26db5b80eb6b53748e565a3b25986c4eed61abedc8358b87fa93ce9c30002ce45bce"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000300)={"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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x476d0000]}, 0x10) 2033/05/18 03:45:14 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000000008992, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = memfd_create(&(0x7f0000000000)='{\x00', 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:14 executing program 3 (fault-call:3 fault-nth:8): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 820.539345] FAULT_INJECTION: forcing a failure. [ 820.539345] name failslab, interval 1, probability 0, space 0, times 0 [ 820.550638] CPU: 0 PID: 23915 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 820.557932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.567296] Call Trace: [ 820.569904] dump_stack+0x1b9/0x294 [ 820.573555] ? dump_stack_print_info.cold.2+0x52/0x52 [ 820.578766] should_fail.cold.4+0xa/0x1a [ 820.580777] binder: 23916:23917 transaction failed 29189/-22, size 0-0 line 2856 [ 820.582842] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 820.582869] ? graph_lock+0x170/0x170 [ 820.582894] ? find_held_lock+0x36/0x1c0 [ 820.603511] ? __lock_is_held+0xb5/0x140 [ 820.607604] ? check_same_owner+0x320/0x320 [ 820.611939] ? trace_hardirqs_on+0xd/0x10 [ 820.616103] ? rcu_note_context_switch+0x710/0x710 [ 820.618280] binder: 23916:23917 ioctl c0306201 20000240 returned -14 [ 820.621059] __should_failslab+0x124/0x180 [ 820.621082] should_failslab+0x9/0x14 [ 820.621100] __kmalloc_track_caller+0x2c4/0x760 [ 820.621114] ? pointer+0xa10/0xa10 [ 820.621132] ? print_usage_bug+0xc0/0xc0 [ 820.621146] ? kasprintf+0xa2/0xc0 [ 820.621163] kvasprintf+0xa9/0x130 [ 820.654939] ? bust_spinlocks+0xe0/0xe0 [ 820.658921] ? __lockdep_init_map+0x105/0x590 [ 820.663419] kasprintf+0xa2/0xc0 [ 820.666806] ? kvasprintf_const+0x190/0x190 [ 820.671141] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 820.676171] ieee80211_alloc_led_names+0x85/0x410 [ 820.681020] ieee80211_alloc_hw_nm+0x1aee/0x2080 [ 820.685789] ? ieee80211_restart_work+0x1a0/0x1a0 [ 820.690650] ? __lock_acquire+0x7f5/0x5140 [ 820.694890] ? zap_class+0x720/0x720 [ 820.698617] ? graph_lock+0x170/0x170 [ 820.702423] ? debug_check_no_locks_freed+0x310/0x310 [ 820.707610] ? print_usage_bug+0xc0/0xc0 [ 820.711668] ? print_usage_bug+0xc0/0xc0 [ 820.715716] ? find_held_lock+0x36/0x1c0 [ 820.719773] ? lock_downgrade+0x8e0/0x8e0 [ 820.723914] ? mark_held_locks+0xc9/0x160 [ 820.728053] ? kasan_check_read+0x11/0x20 [ 820.732195] ? __local_bh_enable_ip+0x161/0x230 [ 820.736963] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 820.742051] ? trace_hardirqs_on+0xd/0x10 [ 820.746189] ? __local_bh_enable_ip+0x161/0x230 [ 820.750855] mac80211_hwsim_new_radio+0x235/0x3410 [ 820.755773] ? graph_lock+0x170/0x170 [ 820.759570] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 820.765706] ? lock_release+0xa10/0xa10 [ 820.769669] ? check_same_owner+0x320/0x320 [ 820.774000] ? rcu_note_context_switch+0x710/0x710 [ 820.778920] ? __lock_acquire+0x7f5/0x5140 [ 820.783143] ? __might_sleep+0x95/0x190 [ 820.787109] ? kasan_check_write+0x14/0x20 [ 820.791329] ? __mutex_lock+0x7d9/0x17f0 [ 820.795384] ? genl_rcv_msg+0x13a/0x170 [ 820.799349] ? __lock_acquire+0x7f5/0x5140 [ 820.803576] ? mutex_trylock+0x2a0/0x2a0 [ 820.807620] ? perf_trace_lock+0xd6/0x900 [ 820.811761] ? graph_lock+0x170/0x170 [ 820.815553] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 820.820740] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 820.825744] ? validate_nla+0x2d9/0x7b0 [ 820.829719] hwsim_new_radio_nl+0x7b8/0xa60 [ 820.834044] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 820.839228] ? __netlink_ns_capable+0x100/0x130 [ 820.843905] genl_family_rcv_msg+0x889/0x1120 [ 820.848393] ? genl_rcv+0x40/0x40 [ 820.851836] ? lock_downgrade+0x8e0/0x8e0 [ 820.855973] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 820.860988] ? lock_acquire+0x1dc/0x520 [ 820.865066] ? genl_rcv+0x19/0x40 [ 820.868523] genl_rcv_msg+0xc6/0x170 [ 820.872227] netlink_rcv_skb+0x172/0x440 [ 820.876286] ? genl_family_rcv_msg+0x1120/0x1120 [ 820.881038] ? netlink_ack+0xbc0/0xbc0 [ 820.884914] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 820.890094] ? netlink_skb_destructor+0x210/0x210 [ 820.894929] genl_rcv+0x28/0x40 [ 820.898204] netlink_unicast+0x58b/0x740 [ 820.902277] ? netlink_attachskb+0x970/0x970 [ 820.906675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 820.912201] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 820.917206] ? security_netlink_send+0x88/0xb0 [ 820.921782] netlink_sendmsg+0x9f0/0xfa0 [ 820.925839] ? netlink_unicast+0x740/0x740 [ 820.930066] ? security_socket_sendmsg+0x94/0xc0 [ 820.934810] ? netlink_unicast+0x740/0x740 [ 820.939040] sock_sendmsg+0xd5/0x120 [ 820.942746] ___sys_sendmsg+0x805/0x940 [ 820.946724] ? copy_msghdr_from_user+0x560/0x560 [ 820.951567] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 820.957091] ? proc_fail_nth_write+0x96/0x1f0 [ 820.961576] ? __fget_light+0x2ef/0x430 [ 820.965540] ? fget_raw+0x20/0x20 [ 820.968988] ? find_held_lock+0x36/0x1c0 [ 820.973046] ? kasan_check_write+0x14/0x20 [ 820.977285] ? wait_for_completion+0x870/0x870 [ 820.981862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 820.987393] ? sockfd_lookup_light+0xc5/0x160 [ 820.991875] __sys_sendmsg+0x115/0x270 [ 820.995753] ? __ia32_sys_shutdown+0x80/0x80 [ 821.000150] ? __sb_end_write+0xac/0xe0 [ 821.004126] ? fput+0x130/0x1a0 [ 821.007405] ? ksys_write+0x1a6/0x250 [ 821.011208] __x64_sys_sendmsg+0x78/0xb0 [ 821.015273] do_syscall_64+0x1b1/0x800 [ 821.019146] ? finish_task_switch+0x1ca/0x840 [ 821.023631] ? syscall_return_slowpath+0x5c0/0x5c0 [ 821.028547] ? syscall_return_slowpath+0x30f/0x5c0 [ 821.033469] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 821.038823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 821.043661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.048836] RIP: 0033:0x455a09 [ 821.052018] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.059730] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 821.066985] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 821.074240] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 821.081497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x80000040049409, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:14 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f8]}, 0x10) [ 821.088764] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000008 [ 821.104949] binder: 23921:23923 unknown command 1997041965 2033/05/18 03:45:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"e07036746e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 821.159656] binder: 23921:23923 ioctl c0306201 20007000 returned -22 [ 821.177978] binder: 23939:23940 transaction failed 29189/-22, size 0-0 line 2856 [ 821.190632] binder: 23921:23923 ioctl c0306201 20000240 returned -11 2033/05/18 03:45:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa]}, 0x10) 2033/05/18 03:45:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"69e036746e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 821.210712] binder: 23921:23923 unknown command 1997041965 [ 821.228841] binder: 23939:23940 ioctl c0306201 20000240 returned -14 [ 821.232699] binder: 23921:23923 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x608480, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x4a5, 0x24}) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) pause() ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x3ff, 0x10001, 0x23, 0x4}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0x6, 0xffff, 0xbf, 0x9, 0x0, 0x1f, 0x80000, 0x8, 0xfff, 0x7ff, 0x6, 0x7, 0x0, 0xff, 0xcde0, 0x3, 0x0, 0xdf, 0x26cc62a9, 0xfffffffffffffff8, 0x80, 0x7, 0x9, 0x9, 0xfffffffffffffff8, 0x3, 0x100, 0x5ecd, 0x3, 0x1a5a, 0x8, 0x950b, 0x4, 0x401, 0x8, 0x6, 0x0, 0x8, 0x2, @perf_config_ext={0xd1f, 0x6}, 0x8, 0x3ff, 0x6, 0x7, 0xfff, 0x7, 0x5}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x11, @multicast2=0xe0000002, 0x4e23, 0x0, 'wlc\x00', 0x37, 0x100000000, 0x44}, {@multicast1=0xe0000001, 0x4e24, 0x2, 0x6, 0x1, 0x7}}, 0x44) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:15 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xfffffffe, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:15 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x1a0, 0x0, &(0x7f0000000280)="ea46188717350084a375020ab411f89e71f808bb8bf570ad95a03aa75242c5633415937cb1f0c3b72027c3baacc1013ec71a32331ac148b61042ae521473802a4fe59dc8c2b93e700eff96502d9f74b24db5acea9a05acb4526353e9276612a2e5db44d1f6efbda85c2ea7cfd16fe3d01164299d2b3a806f6f0a0c7a5c8a465c1938076303fa07830143382771c3c480bf6b42f1c6747f2af2c6bd7135a7f428ee0d3f814af91e3267202fae627eb8faf33ef11df886861ae4d7355505ae0612d3f5cf55d07a1ba95edee5e2503d9bf7d3d3ff2f079e07949b137f38d256e54100698f81b7d425c0010f8fa4978103958f28b48a16d72abea8b8597dcab285978743a6338ec60b2d7604b047f497eed28fa4113567102dc9d55fd83b7627b65d53e63c334c58767a523e99eaeff191c43968b6a53be83920fce085058a7bdbaf63c761d592e42d96c3ac8f40eb4514af1b810ab7e2491ae4fc5de6328bbb74acd77d1697cd4eaf4b765837718dacdd66f7f89ab8864b375056d9ea3f045c4d8b011425c19f6f8414aaf77aa77bc02944436a69e2ed163d53daf43cd70d9b8301"}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"6970e0746e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:15 executing program 3 (fault-call:3 fault-nth:9): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc805000000000000]}, 0x10) [ 821.533826] binder: 23989:23991 transaction failed 29189/-22, size 0-0 line 2856 [ 821.542412] binder: 23987:23992 transaction failed 29189/-22, size 0-0 line 2856 [ 821.545521] FAULT_INJECTION: forcing a failure. [ 821.545521] name failslab, interval 1, probability 0, space 0, times 0 [ 821.561395] CPU: 1 PID: 23988 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 821.568678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.578145] Call Trace: 2033/05/18 03:45:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 821.578992] binder: 23987:23992 ioctl c0306201 20000240 returned -11 [ 821.580748] dump_stack+0x1b9/0x294 [ 821.580770] ? dump_stack_print_info.cold.2+0x52/0x52 [ 821.580793] ? __save_stack_trace+0x7e/0xd0 [ 821.593007] binder: 23989:23991 ioctl c0306201 20000240 returned -14 [ 821.596092] should_fail.cold.4+0xa/0x1a [ 821.596114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 821.596136] ? save_stack+0x43/0xd0 [ 821.619725] binder: 23987:23992 transaction failed 29189/-22, size 0-0 line 2856 [ 821.619930] ? kasan_kmalloc+0xc4/0xe0 [ 821.631324] ? __kmalloc_track_caller+0x14a/0x760 [ 821.636172] ? kvasprintf+0xa9/0x130 [ 821.639894] ? kasprintf+0xa2/0xc0 [ 821.643440] ? ieee80211_alloc_led_names+0x85/0x410 [ 821.648563] ? graph_lock+0x170/0x170 [ 821.652386] ? genl_rcv_msg+0xc6/0x170 [ 821.656293] ? netlink_rcv_skb+0x172/0x440 [ 821.660532] ? genl_rcv+0x28/0x40 [ 821.663986] ? netlink_unicast+0x58b/0x740 [ 821.668220] ? netlink_sendmsg+0x9f0/0xfa0 [ 821.672456] ? sock_sendmsg+0xd5/0x120 [ 821.676353] ? find_held_lock+0x36/0x1c0 [ 821.680423] ? __lock_is_held+0xb5/0x140 2033/05/18 03:45:15 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:15 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clock_adjtime(0x6, &(0x7f0000000040)={0x9de, 0x1ea7, 0x9, 0xb645, 0x2, 0x6, 0x804b, 0x5, 0x7e9, 0x9, 0x9, 0x8, 0x0, 0x9, 0x7, 0x8001, 0xb1, 0x3ff, 0x10001, 0x0, 0x1, 0x4, 0x7, 0x7, 0x1, 0x2}) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6e, 0x10400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 821.684501] ? check_same_owner+0x320/0x320 [ 821.688836] ? rcu_note_context_switch+0x710/0x710 [ 821.693882] __should_failslab+0x124/0x180 [ 821.698126] should_failslab+0x9/0x14 [ 821.701936] __kmalloc_track_caller+0x2c4/0x760 [ 821.706613] ? pointer+0xa10/0xa10 [ 821.710164] ? print_usage_bug+0xc0/0xc0 [ 821.714228] ? kasprintf+0xa2/0xc0 [ 821.717775] kvasprintf+0xa9/0x130 [ 821.721323] ? bust_spinlocks+0xe0/0xe0 [ 821.725309] ? __lockdep_init_map+0x105/0x590 [ 821.729815] kasprintf+0xa2/0xc0 [ 821.733191] ? kvasprintf_const+0x190/0x190 [ 821.737526] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 821.742558] ieee80211_alloc_led_names+0x118/0x410 [ 821.747576] ieee80211_alloc_hw_nm+0x1aee/0x2080 [ 821.752348] ? ieee80211_restart_work+0x1a0/0x1a0 [ 821.755070] binder: 24008:24010 transaction failed 29189/-22, size 0-0 line 2856 [ 821.757196] ? __lock_acquire+0x7f5/0x5140 [ 821.757214] ? zap_class+0x720/0x720 [ 821.757236] ? graph_lock+0x170/0x170 [ 821.757254] ? debug_check_no_locks_freed+0x310/0x310 2033/05/18 03:45:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 821.781748] ? print_usage_bug+0xc0/0xc0 [ 821.785826] ? print_usage_bug+0xc0/0xc0 [ 821.789893] ? find_held_lock+0x36/0x1c0 [ 821.793969] ? lock_downgrade+0x8e0/0x8e0 [ 821.798126] ? mark_held_locks+0xc9/0x160 [ 821.800718] binder: 24008:24014 transaction failed 29189/-22, size 0-0 line 2856 [ 821.802273] ? kasan_check_read+0x11/0x20 [ 821.802294] ? __local_bh_enable_ip+0x161/0x230 [ 821.802313] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 821.802330] ? trace_hardirqs_on+0xd/0x10 [ 821.827877] ? __local_bh_enable_ip+0x161/0x230 2033/05/18 03:45:15 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 821.832560] mac80211_hwsim_new_radio+0x235/0x3410 [ 821.837499] ? graph_lock+0x170/0x170 [ 821.841319] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 821.847476] ? lock_release+0xa10/0xa10 [ 821.851466] ? check_same_owner+0x320/0x320 [ 821.855807] ? rcu_note_context_switch+0x710/0x710 [ 821.860750] ? __lock_acquire+0x7f5/0x5140 [ 821.864993] ? __might_sleep+0x95/0x190 [ 821.868991] ? kasan_check_write+0x14/0x20 [ 821.873231] ? __mutex_lock+0x7d9/0x17f0 [ 821.877303] ? genl_rcv_msg+0x13a/0x170 [ 821.881288] ? __lock_acquire+0x7f5/0x5140 2033/05/18 03:45:15 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffe, 0xda, 0x3, @scatter={0x6, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/223, 0xdf}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000300)=""/248, 0xf8}]}, &(0x7f0000000480)="517a10b0893d726aa4a76d251d073b480b9bbfb77ba5bf8808c7158bfb1014bb12cd0ef8c7f8ad279115c6d5f995cebdcb147d4ff6bfd081a8038a40a919dad10cf4fe8e048b488fb66f15c2e37e3e2f3447957e278901cbabcf92aca13aabedf9910c56bd051c5cb9f0c13b16f1654b910a594f807f2b14aaeab1520d267e84619c253c11dd4139802288aad49ea85b404a6f45b46af79853e95b04eec4edbb93edf8042bd0e7cfdce879d50753c26f57ece99f84c582dcf8762811c89fa296f8632e8bbe8c563a7aeb0fb027cec9d465530d16236997754445", &(0x7f0000000580)=""/111, 0xfffffffffffffff8, 0x2, 0x3, &(0x7f0000000600)}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7, 0x0, 0x6, 0x5, r3}, 0x10) 2033/05/18 03:45:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 821.883313] binder: undelivered TRANSACTION_ERROR: 29189 [ 821.885538] ? mutex_trylock+0x2a0/0x2a0 [ 821.885554] ? perf_trace_lock+0xd6/0x900 [ 821.885570] ? graph_lock+0x170/0x170 [ 821.885588] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 821.885606] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 821.913202] ? validate_nla+0x2d9/0x7b0 [ 821.917190] hwsim_new_radio_nl+0x7b8/0xa60 [ 821.921526] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 821.926724] ? __netlink_ns_capable+0x100/0x130 [ 821.931405] genl_family_rcv_msg+0x889/0x1120 [ 821.935915] ? genl_rcv+0x40/0x40 [ 821.939378] ? lock_downgrade+0x8e0/0x8e0 [ 821.943533] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 821.948565] ? lock_acquire+0x1dc/0x520 [ 821.952547] ? genl_rcv+0x19/0x40 [ 821.953415] binder: 24021:24022 transaction failed 29189/-22, size 0-0 line 2856 [ 821.956025] genl_rcv_msg+0xc6/0x170 [ 821.956046] netlink_rcv_skb+0x172/0x440 [ 821.956062] ? genl_family_rcv_msg+0x1120/0x1120 [ 821.956079] ? netlink_ack+0xbc0/0xbc0 [ 821.979976] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 821.985191] ? netlink_skb_destructor+0x210/0x210 [ 821.990053] genl_rcv+0x28/0x40 [ 821.993457] netlink_unicast+0x58b/0x740 [ 821.997528] ? netlink_attachskb+0x970/0x970 [ 822.001944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 822.002630] binder: 24021:24022 transaction failed 29189/-22, size 0-0 line 2856 [ 822.007484] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 822.007503] ? security_netlink_send+0x88/0xb0 [ 822.007525] netlink_sendmsg+0x9f0/0xfa0 [ 822.007546] ? netlink_unicast+0x740/0x740 [ 822.032909] ? security_socket_sendmsg+0x94/0xc0 [ 822.037673] ? netlink_unicast+0x740/0x740 [ 822.041916] sock_sendmsg+0xd5/0x120 [ 822.045647] ___sys_sendmsg+0x805/0x940 [ 822.049637] ? copy_msghdr_from_user+0x560/0x560 [ 822.054410] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 822.059953] ? proc_fail_nth_write+0x96/0x1f0 [ 822.064461] ? __fget_light+0x2ef/0x430 [ 822.068444] ? fget_raw+0x20/0x20 [ 822.071900] ? find_held_lock+0x36/0x1c0 [ 822.075972] ? kasan_check_write+0x14/0x20 [ 822.079985] binder: undelivered TRANSACTION_ERROR: 29189 [ 822.080214] ? wait_for_completion+0x870/0x870 [ 822.080240] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 822.095773] ? sockfd_lookup_light+0xc5/0x160 [ 822.100282] __sys_sendmsg+0x115/0x270 [ 822.104180] ? __ia32_sys_shutdown+0x80/0x80 [ 822.108599] ? __sb_end_write+0xac/0xe0 [ 822.112588] ? fput+0x130/0x1a0 [ 822.115867] ? ksys_write+0x1a6/0x250 [ 822.119688] __x64_sys_sendmsg+0x78/0xb0 [ 822.123779] do_syscall_64+0x1b1/0x800 [ 822.127675] ? finish_task_switch+0x1ca/0x840 [ 822.132195] ? syscall_return_slowpath+0x5c0/0x5c0 [ 822.137126] ? syscall_return_slowpath+0x30f/0x5c0 [ 822.142068] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 822.147440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 822.152298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.157481] RIP: 0033:0x455a09 [ 822.160655] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.168355] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 822.175628] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 822.182889] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 822.190143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 822.197406] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000009 2033/05/18 03:45:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5b, 0x100) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ';#bdeveth1'}, {0x20, "5e2d6370757365745e21ae5b76626f786e657431"}, {0x20, 'cpuset]ppp1{keyring'}], 0xa, "245b7542ae8238d4af37f3b236f178111b9014426a599ecc"}, 0x57) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xffffffff, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:16 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0x4}) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48441, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040)) 2033/05/18 03:45:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:16 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036e06e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f80000]}, 0x10) 2033/05/18 03:45:16 executing program 3 (fault-call:3 fault-nth:10): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffffff00000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) [ 822.550861] FAULT_INJECTION: forcing a failure. [ 822.550861] name failslab, interval 1, probability 0, space 0, times 0 [ 822.562338] CPU: 0 PID: 24051 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 822.569628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.578984] Call Trace: [ 822.581597] dump_stack+0x1b9/0x294 [ 822.585245] ? dump_stack_print_info.cold.2+0x52/0x52 [ 822.590442] ? __save_stack_trace+0x7e/0xd0 [ 822.594780] should_fail.cold.4+0xa/0x1a [ 822.598855] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 822.603965] ? save_stack+0x43/0xd0 [ 822.607596] ? kasan_kmalloc+0xc4/0xe0 [ 822.611490] ? __kmalloc_track_caller+0x14a/0x760 [ 822.616330] ? kvasprintf+0xa9/0x130 [ 822.620037] ? kasprintf+0xa2/0xc0 [ 822.623576] ? ieee80211_alloc_led_names+0x118/0x410 [ 822.628677] ? graph_lock+0x170/0x170 [ 822.632553] ? genl_rcv_msg+0xc6/0x170 [ 822.636429] ? netlink_rcv_skb+0x172/0x440 [ 822.640651] ? genl_rcv+0x28/0x40 [ 822.644094] ? netlink_unicast+0x58b/0x740 [ 822.648318] ? netlink_sendmsg+0x9f0/0xfa0 [ 822.652540] ? sock_sendmsg+0xd5/0x120 [ 822.656421] ? find_held_lock+0x36/0x1c0 [ 822.660478] ? __lock_is_held+0xb5/0x140 [ 822.664538] ? check_same_owner+0x320/0x320 [ 822.668852] ? rcu_note_context_switch+0x710/0x710 [ 822.673777] __should_failslab+0x124/0x180 [ 822.678010] should_failslab+0x9/0x14 [ 822.681804] __kmalloc_track_caller+0x2c4/0x760 [ 822.686459] ? pointer+0xa10/0xa10 [ 822.690004] ? print_usage_bug+0xc0/0xc0 [ 822.694058] ? kasprintf+0xa2/0xc0 [ 822.697595] kvasprintf+0xa9/0x130 [ 822.701126] ? bust_spinlocks+0xe0/0xe0 [ 822.705091] ? __lockdep_init_map+0x105/0x590 [ 822.709661] kasprintf+0xa2/0xc0 [ 822.713021] ? kvasprintf_const+0x190/0x190 [ 822.717338] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 822.722349] ieee80211_alloc_led_names+0x1ab/0x410 [ 822.727270] ieee80211_alloc_hw_nm+0x1aee/0x2080 [ 822.732017] ? ieee80211_restart_work+0x1a0/0x1a0 [ 822.736852] ? __lock_acquire+0x7f5/0x5140 [ 822.741077] ? __lock_acquire+0x7f5/0x5140 [ 822.745320] ? kasan_slab_alloc+0x12/0x20 [ 822.749455] ? kmem_cache_alloc+0x12e/0x760 [ 822.753783] ? __d_alloc+0xc0/0xd30 [ 822.757405] ? graph_lock+0x170/0x170 [ 822.761194] ? debug_check_no_locks_freed+0x310/0x310 [ 822.766369] ? print_usage_bug+0xc0/0xc0 [ 822.770424] ? print_usage_bug+0xc0/0xc0 [ 822.774472] ? find_held_lock+0x36/0x1c0 [ 822.778531] ? lock_downgrade+0x8e0/0x8e0 [ 822.782668] ? mark_held_locks+0xc9/0x160 [ 822.786801] ? kasan_check_read+0x11/0x20 [ 822.790938] ? __local_bh_enable_ip+0x161/0x230 [ 822.795599] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 822.800689] ? trace_hardirqs_on+0xd/0x10 [ 822.804825] ? __local_bh_enable_ip+0x161/0x230 [ 822.809488] mac80211_hwsim_new_radio+0x235/0x3410 [ 822.814415] ? graph_lock+0x170/0x170 [ 822.818212] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 822.824355] ? lock_release+0xa10/0xa10 [ 822.828319] ? check_same_owner+0x320/0x320 [ 822.832639] ? rcu_note_context_switch+0x710/0x710 [ 822.837553] ? __lock_acquire+0x7f5/0x5140 [ 822.841790] ? __might_sleep+0x95/0x190 [ 822.845754] ? kasan_check_write+0x14/0x20 [ 822.849976] ? __mutex_lock+0x7d9/0x17f0 [ 822.854034] ? genl_rcv_msg+0x13a/0x170 [ 822.858015] ? __lock_acquire+0x7f5/0x5140 [ 822.862245] ? mutex_trylock+0x2a0/0x2a0 [ 822.866300] ? graph_lock+0x170/0x170 [ 822.870094] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 822.875274] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 822.880277] ? validate_nla+0x2d9/0x7b0 [ 822.884241] hwsim_new_radio_nl+0x7b8/0xa60 [ 822.888554] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 822.893734] ? __netlink_ns_capable+0x100/0x130 [ 822.898395] genl_family_rcv_msg+0x889/0x1120 [ 822.902889] ? genl_rcv+0x40/0x40 [ 822.906340] ? lock_downgrade+0x8e0/0x8e0 [ 822.910475] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 822.915495] ? kasan_check_read+0x11/0x20 [ 822.919632] ? lock_acquire+0x1dc/0x520 [ 822.923591] ? genl_rcv+0x19/0x40 [ 822.927049] genl_rcv_msg+0xc6/0x170 [ 822.930758] netlink_rcv_skb+0x172/0x440 [ 822.934807] ? genl_family_rcv_msg+0x1120/0x1120 [ 822.939637] ? netlink_ack+0xbc0/0xbc0 [ 822.943522] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 822.948701] ? netlink_skb_destructor+0x210/0x210 [ 822.953537] genl_rcv+0x28/0x40 [ 822.956808] netlink_unicast+0x58b/0x740 [ 822.960867] ? netlink_attachskb+0x970/0x970 [ 822.965262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 822.970786] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 822.975792] ? security_netlink_send+0x88/0xb0 [ 822.980361] netlink_sendmsg+0x9f0/0xfa0 [ 822.984415] ? netlink_unicast+0x740/0x740 [ 822.988641] ? security_socket_sendmsg+0x94/0xc0 [ 822.993383] ? netlink_unicast+0x740/0x740 [ 822.997605] sock_sendmsg+0xd5/0x120 [ 823.001310] ___sys_sendmsg+0x805/0x940 [ 823.005279] ? copy_msghdr_from_user+0x560/0x560 [ 823.010037] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 823.015576] ? proc_fail_nth_write+0x96/0x1f0 [ 823.020067] ? __fget_light+0x2ef/0x430 [ 823.024068] ? fget_raw+0x20/0x20 [ 823.027507] ? find_held_lock+0x36/0x1c0 [ 823.031558] ? kasan_check_write+0x14/0x20 [ 823.035789] ? wait_for_completion+0x870/0x870 [ 823.040367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 823.045900] ? sockfd_lookup_light+0xc5/0x160 [ 823.050385] __sys_sendmsg+0x115/0x270 [ 823.054262] ? __ia32_sys_shutdown+0x80/0x80 [ 823.058660] ? __sb_end_write+0xac/0xe0 [ 823.062627] ? fput+0x130/0x1a0 [ 823.065896] ? ksys_write+0x1a6/0x250 [ 823.069697] __x64_sys_sendmsg+0x78/0xb0 [ 823.073746] do_syscall_64+0x1b1/0x800 [ 823.077626] ? finish_task_switch+0x1ca/0x840 [ 823.082109] ? syscall_return_slowpath+0x5c0/0x5c0 [ 823.087033] ? syscall_return_slowpath+0x30f/0x5c0 [ 823.091958] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 823.097314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 823.102147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.107321] RIP: 0033:0x455a09 [ 823.110497] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.118197] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 823.125451] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 823.132705] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 823.139970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:45:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6fb8]}, 0x10) 2033/05/18 03:45:16 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"69703674e06c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 823.147225] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000a [ 823.167739] binder: 24060:24061 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 823.211480] QAT: Invalid ioctl [ 823.229198] binder: 24060:24061 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x730f]}, 0x10) [ 823.256164] QAT: Invalid ioctl 2033/05/18 03:45:17 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x4040, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1=0xe0000001}, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x4, {0x2, 0x4e24, @multicast2=0xe0000002}, 'nr0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x408000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:17 executing program 3 (fault-call:3 fault-nth:11): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 823.313907] binder: undelivered TRANSACTION_ERROR: 29189 [ 823.400483] binder: 24095:24096 transaction failed 29189/-22, size 0-0 line 2856 [ 823.428362] FAULT_INJECTION: forcing a failure. [ 823.428362] name failslab, interval 1, probability 0, space 0, times 0 [ 823.439419] binder: 24095:24096 transaction failed 29189/-22, size 0-0 line 2856 [ 823.439721] CPU: 1 PID: 24100 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 823.454402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.463756] Call Trace: [ 823.466361] dump_stack+0x1b9/0x294 [ 823.470088] ? dump_stack_print_info.cold.2+0x52/0x52 [ 823.475295] ? __save_stack_trace+0x7e/0xd0 [ 823.479635] should_fail.cold.4+0xa/0x1a [ 823.483712] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 823.488831] ? save_stack+0x43/0xd0 [ 823.492478] ? kasan_kmalloc+0xc4/0xe0 [ 823.493253] binder: undelivered TRANSACTION_ERROR: 29189 [ 823.496368] ? __kmalloc_track_caller+0x14a/0x760 [ 823.496384] ? kvasprintf+0xa9/0x130 [ 823.496396] ? kasprintf+0xa2/0xc0 [ 823.496415] ? ieee80211_alloc_led_names+0x1ab/0x410 [ 823.496429] ? graph_lock+0x170/0x170 [ 823.496447] ? genl_rcv_msg+0xc6/0x170 [ 823.526907] ? netlink_rcv_skb+0x172/0x440 [ 823.531129] ? genl_rcv+0x28/0x40 [ 823.534570] ? netlink_unicast+0x58b/0x740 [ 823.538793] ? netlink_sendmsg+0x9f0/0xfa0 [ 823.543017] ? sock_sendmsg+0xd5/0x120 [ 823.546900] ? find_held_lock+0x36/0x1c0 [ 823.550956] ? __lock_is_held+0xb5/0x140 [ 823.555029] ? check_same_owner+0x320/0x320 [ 823.559344] ? rcu_note_context_switch+0x710/0x710 [ 823.564267] __should_failslab+0x124/0x180 [ 823.568492] should_failslab+0x9/0x14 [ 823.572286] __kmalloc_track_caller+0x2c4/0x760 [ 823.576943] ? pointer+0xa10/0xa10 [ 823.580473] ? print_usage_bug+0xc0/0xc0 [ 823.584524] ? kasprintf+0xa2/0xc0 [ 823.588055] kvasprintf+0xa9/0x130 [ 823.591581] ? bust_spinlocks+0xe0/0xe0 [ 823.595541] ? __lockdep_init_map+0x105/0x590 [ 823.600035] kasprintf+0xa2/0xc0 [ 823.603388] ? kvasprintf_const+0x190/0x190 [ 823.607703] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 823.612713] ieee80211_alloc_led_names+0x240/0x410 [ 823.617642] ieee80211_alloc_hw_nm+0x1aee/0x2080 [ 823.622387] ? ieee80211_restart_work+0x1a0/0x1a0 [ 823.627220] ? __lock_acquire+0x7f5/0x5140 [ 823.631444] ? zap_class+0x720/0x720 [ 823.635153] ? graph_lock+0x170/0x170 [ 823.638940] ? debug_check_no_locks_freed+0x310/0x310 [ 823.644120] ? print_usage_bug+0xc0/0xc0 [ 823.648175] ? print_usage_bug+0xc0/0xc0 [ 823.652224] ? find_held_lock+0x36/0x1c0 [ 823.656288] ? lock_downgrade+0x8e0/0x8e0 [ 823.660437] ? mark_held_locks+0xc9/0x160 [ 823.664570] ? kasan_check_read+0x11/0x20 [ 823.668709] ? __local_bh_enable_ip+0x161/0x230 [ 823.673368] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 823.678457] ? trace_hardirqs_on+0xd/0x10 [ 823.682601] ? __local_bh_enable_ip+0x161/0x230 [ 823.687276] mac80211_hwsim_new_radio+0x235/0x3410 [ 823.692201] ? graph_lock+0x170/0x170 [ 823.695997] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 823.702136] ? lock_release+0xa10/0xa10 [ 823.706100] ? check_same_owner+0x320/0x320 [ 823.710414] ? rcu_note_context_switch+0x710/0x710 [ 823.715330] ? __lock_acquire+0x7f5/0x5140 [ 823.719563] ? __might_sleep+0x95/0x190 [ 823.723529] ? kasan_check_write+0x14/0x20 [ 823.727753] ? __mutex_lock+0x7d9/0x17f0 [ 823.731803] ? genl_rcv_msg+0x13a/0x170 [ 823.735766] ? __lock_acquire+0x7f5/0x5140 [ 823.739990] ? mutex_trylock+0x2a0/0x2a0 [ 823.744044] ? perf_trace_lock+0xd6/0x900 [ 823.748179] ? graph_lock+0x170/0x170 [ 823.751969] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 823.757152] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 823.762156] ? validate_nla+0x2d9/0x7b0 [ 823.766119] hwsim_new_radio_nl+0x7b8/0xa60 [ 823.770429] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 823.775616] ? __netlink_ns_capable+0x100/0x130 [ 823.780315] genl_family_rcv_msg+0x889/0x1120 [ 823.784806] ? genl_rcv+0x40/0x40 [ 823.788256] ? lock_downgrade+0x8e0/0x8e0 [ 823.792391] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 823.797402] ? lock_acquire+0x1dc/0x520 [ 823.801373] ? genl_rcv+0x19/0x40 [ 823.804827] genl_rcv_msg+0xc6/0x170 [ 823.808531] netlink_rcv_skb+0x172/0x440 [ 823.812582] ? genl_family_rcv_msg+0x1120/0x1120 [ 823.817352] ? netlink_ack+0xbc0/0xbc0 [ 823.821226] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 823.826589] ? netlink_skb_destructor+0x210/0x210 [ 823.831437] genl_rcv+0x28/0x40 [ 823.834800] netlink_unicast+0x58b/0x740 [ 823.838855] ? netlink_attachskb+0x970/0x970 [ 823.843340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 823.848874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 823.853879] ? security_netlink_send+0x88/0xb0 [ 823.858452] netlink_sendmsg+0x9f0/0xfa0 [ 823.862512] ? netlink_unicast+0x740/0x740 [ 823.866737] ? security_socket_sendmsg+0x94/0xc0 [ 823.871495] ? netlink_unicast+0x740/0x740 [ 823.875723] sock_sendmsg+0xd5/0x120 [ 823.879448] ___sys_sendmsg+0x805/0x940 [ 823.883429] ? copy_msghdr_from_user+0x560/0x560 [ 823.888275] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 823.893820] ? proc_fail_nth_write+0x96/0x1f0 [ 823.898308] ? __fget_light+0x2ef/0x430 [ 823.902272] ? fget_raw+0x20/0x20 [ 823.905812] ? find_held_lock+0x36/0x1c0 [ 823.909866] ? kasan_check_write+0x14/0x20 [ 823.914095] ? wait_for_completion+0x870/0x870 [ 823.918675] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 823.924200] ? sockfd_lookup_light+0xc5/0x160 [ 823.928683] __sys_sendmsg+0x115/0x270 [ 823.932565] ? __ia32_sys_shutdown+0x80/0x80 [ 823.936970] ? __sb_end_write+0xac/0xe0 [ 823.940934] ? fput+0x130/0x1a0 [ 823.944209] ? ksys_write+0x1a6/0x250 [ 823.948008] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 823.952851] __x64_sys_sendmsg+0x78/0xb0 [ 823.956905] do_syscall_64+0x1b1/0x800 [ 823.960793] ? finish_task_switch+0x1ca/0x840 [ 823.965279] ? syscall_return_slowpath+0x5c0/0x5c0 [ 823.970198] ? syscall_return_slowpath+0x30f/0x5c0 [ 823.975121] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 823.980479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 823.985325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.990500] RIP: 0033:0x455a09 [ 823.993678] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.001376] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 824.008639] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 824.015895] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 824.023159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 824.030417] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000b 2033/05/18 03:45:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:17 executing program 3 (fault-call:3 fault-nth:12): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:17 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746ee03000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf0ffffff, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:17 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x9f7e000000000000]}, 0x10) [ 824.154230] binder: 24121:24122 transaction failed 29189/-22, size 0-0 line 2856 [ 824.175846] FAULT_INJECTION: forcing a failure. [ 824.175846] name failslab, interval 1, probability 0, space 0, times 0 [ 824.187315] CPU: 1 PID: 24128 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 824.194603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2033/05/18 03:45:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 824.197322] binder: 24121:24130 transaction failed 29189/-22, size 0-0 line 2856 [ 824.203972] Call Trace: [ 824.204001] dump_stack+0x1b9/0x294 [ 824.204024] ? dump_stack_print_info.cold.2+0x52/0x52 [ 824.204045] ? ieee80211_roc_setup+0x3b7/0x510 [ 824.204067] should_fail.cold.4+0xa/0x1a [ 824.204088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 824.240644] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 824.245683] ? graph_lock+0x170/0x170 [ 824.249508] ? ieee80211_alloc_led_names+0x240/0x410 [ 824.254637] ? find_held_lock+0x36/0x1c0 [ 824.258716] ? __lock_is_held+0xb5/0x140 [ 824.262801] ? check_same_owner+0x320/0x320 [ 824.267135] ? graph_lock+0x170/0x170 [ 824.270955] ? rcu_note_context_switch+0x710/0x710 [ 824.275900] ? print_usage_bug+0xc0/0xc0 [ 824.279980] __should_failslab+0x124/0x180 [ 824.284230] should_failslab+0x9/0x14 [ 824.288040] kmem_cache_alloc_trace+0x2cb/0x780 [ 824.292736] ? find_held_lock+0x36/0x1c0 [ 824.296822] device_create_groups_vargs+0xa7/0x270 2033/05/18 03:45:18 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x404000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x7fff, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x0, 0x1, 0x9, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000280)={0x6591, {{0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, [], 0x1a}, 0x1b3d}}, 0x1, 0x8, [{{0xa, 0x4e21, 0xfffffffffffffffe, @local={0xfe, 0x80, [], 0xaa}, 0x6}}, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x5}}, {{0xa, 0x4e21, 0x7fffffff, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x6601}}, {{0xa, 0x4e24, 0x7f, @ipv4={[], [0xff, 0xff], @rand_addr=0x8001}, 0x8}}, {{0xa, 0x4e21, 0xf000000000000000, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}}, {{0xa, 0x4e21, 0x2b20, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, {{0xa, 0x4e24, 0x1000, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x7}}, {{0xa, 0x4e21, 0x1f, @loopback={0x0, 0x1}, 0x9}}]}, 0x490) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163482d"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 824.301390] binder: undelivered TRANSACTION_ERROR: 29189 [ 824.301773] device_create+0xd3/0x100 [ 824.301794] ? device_create_vargs+0x60/0x60 [ 824.315434] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 824.320544] ? trace_hardirqs_on+0xd/0x10 [ 824.324701] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 824.329641] ? graph_lock+0x170/0x170 [ 824.333532] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 824.339694] ? lock_release+0xa10/0xa10 [ 824.343687] ? check_same_owner+0x320/0x320 [ 824.348019] ? rcu_note_context_switch+0x710/0x710 [ 824.352966] ? __lock_acquire+0x7f5/0x5140 [ 824.357212] ? __might_sleep+0x95/0x190 [ 824.361201] ? kasan_check_write+0x14/0x20 [ 824.365455] ? __mutex_lock+0x7d9/0x17f0 [ 824.369527] ? genl_rcv_msg+0x13a/0x170 [ 824.371724] binder: 24138:24140 unknown command 759718673 [ 824.373505] ? __lock_acquire+0x7f5/0x5140 [ 824.373525] ? mutex_trylock+0x2a0/0x2a0 [ 824.373537] ? perf_trace_lock+0xd6/0x900 [ 824.373553] ? graph_lock+0x170/0x170 [ 824.395292] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 824.400504] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 824.405526] ? validate_nla+0x2d9/0x7b0 [ 824.409511] hwsim_new_radio_nl+0x7b8/0xa60 [ 824.411917] binder: 24138:24140 ioctl c0306201 20007000 returned -22 [ 824.413834] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 824.413858] ? __netlink_ns_capable+0x100/0x130 [ 824.413881] genl_family_rcv_msg+0x889/0x1120 [ 824.413909] ? genl_rcv+0x40/0x40 [ 824.438138] ? lock_downgrade+0x8e0/0x8e0 [ 824.442280] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 824.447295] ? lock_acquire+0x1dc/0x520 [ 824.451260] ? genl_rcv+0x19/0x40 [ 824.454715] genl_rcv_msg+0xc6/0x170 [ 824.458426] netlink_rcv_skb+0x172/0x440 [ 824.462476] ? genl_family_rcv_msg+0x1120/0x1120 [ 824.467222] ? netlink_ack+0xbc0/0xbc0 [ 824.471106] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 824.476284] ? netlink_skb_destructor+0x210/0x210 [ 824.481122] genl_rcv+0x28/0x40 [ 824.484389] netlink_unicast+0x58b/0x740 [ 824.488449] ? netlink_attachskb+0x970/0x970 [ 824.492854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 824.498378] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 824.503399] ? security_netlink_send+0x88/0xb0 [ 824.507976] netlink_sendmsg+0x9f0/0xfa0 [ 824.512040] ? netlink_unicast+0x740/0x740 [ 824.516274] ? security_socket_sendmsg+0x94/0xc0 [ 824.521025] ? netlink_unicast+0x740/0x740 [ 824.525255] sock_sendmsg+0xd5/0x120 [ 824.528961] ___sys_sendmsg+0x805/0x940 [ 824.532929] ? copy_msghdr_from_user+0x560/0x560 [ 824.537683] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 824.543209] ? proc_fail_nth_write+0x96/0x1f0 [ 824.547698] ? __fget_light+0x2ef/0x430 [ 824.551665] ? fget_raw+0x20/0x20 [ 824.555107] ? find_held_lock+0x36/0x1c0 [ 824.559161] ? kasan_check_write+0x14/0x20 [ 824.563391] ? wait_for_completion+0x870/0x870 [ 824.567973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 824.573499] ? sockfd_lookup_light+0xc5/0x160 [ 824.577999] __sys_sendmsg+0x115/0x270 [ 824.581883] ? __ia32_sys_shutdown+0x80/0x80 [ 824.586282] ? __sb_end_write+0xac/0xe0 [ 824.590254] ? fput+0x130/0x1a0 [ 824.593522] ? ksys_write+0x1a6/0x250 [ 824.597330] __x64_sys_sendmsg+0x78/0xb0 [ 824.601385] do_syscall_64+0x1b1/0x800 [ 824.605263] ? finish_task_switch+0x1ca/0x840 [ 824.609834] ? syscall_return_slowpath+0x5c0/0x5c0 [ 824.614755] ? syscall_return_slowpath+0x30f/0x5c0 [ 824.619675] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 824.625065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 824.629900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.635079] RIP: 0033:0x455a09 [ 824.638257] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.645959] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 824.653221] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 824.660476] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 824.667737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 824.674994] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000c 2033/05/18 03:45:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6ce000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x700]}, 0x10) [ 824.702858] binder: 24138:24140 ioctl c0306201 20000240 returned -11 [ 824.722235] binder: 24138:24145 unknown command 759718673 [ 824.764941] binder: 24138:24145 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xcf8f]}, 0x10) 2033/05/18 03:45:18 executing program 3 (fault-call:3 fault-nth:13): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:18 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840605332d2684f8dbbceb11caf4f488d066ddac161929c9396ca3353dda3dfd500930479a0c4ddb2adc1d48e8e9885ab03006e63c55bc3a00244718c2776d09c090087bb5b000000000000008000000000f80200dae0b2b68d99c7e340a05c31d76aed55afa9062502ed197b91cb94dae330e4cce370f351b4f80a"], 0x0, 0x0, &(0x7f0000002000)}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x1, 0xff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x0, 0x7fff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000080)={0x5, 0x62b4, 0x2, 0x100, 0x47f}) 2033/05/18 03:45:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xfeffffff, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:18 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:18 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) r4 = gettid() perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x3, 0x0, 0x7ff, 0x3, 0x0, 0x1, 0x100, 0x3, 0x35, 0xfffffffffffff001, 0x4, 0x8654, 0xc743, 0x8, 0x29b48a96, 0x8001, 0x2, 0x9, 0x5, 0x1, 0x5, 0x63bd6978, 0xec9, 0x8001, 0x2, 0x7fff, 0xfffffffffffffffb, 0xd1, 0x601, 0x5, 0x400, 0xffff, 0x1, 0x1, 0x10002, 0x6, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xb}, 0x2, 0x297, 0x1f, 0x5, 0x0, 0x3, 0x8}, r4, 0x10, r2, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x2, @empty, 0x6}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0xb}, 0x6b}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e23, @rand_addr=0x4c}], 0xfffffef8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 825.095556] binder: 24172:24173 got transaction to invalid handle [ 825.101925] binder: 24172:24173 transaction failed 29201/-22, size -5930433922717907821-264451893404554433 line 2856 [ 825.121602] FAULT_INJECTION: forcing a failure. [ 825.121602] name failslab, interval 1, probability 0, space 0, times 0 [ 825.132937] CPU: 1 PID: 24180 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 825.140221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.149583] Call Trace: [ 825.152192] dump_stack+0x1b9/0x294 [ 825.155839] ? dump_stack_print_info.cold.2+0x52/0x52 [ 825.158237] binder: 24172:24173 got transaction to invalid handle [ 825.161048] should_fail.cold.4+0xa/0x1a [ 825.161071] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 825.161088] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 825.161106] ? __lockdep_init_map+0x105/0x590 [ 825.167362] binder: 24172:24173 transaction failed 29201/-22, size -5930433922717907821-264451893404554433 line 2856 [ 825.171394] ? graph_lock+0x170/0x170 [ 825.171417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 825.171440] ? put_dec_trunc8+0x273/0x300 [ 825.210114] ? find_held_lock+0x36/0x1c0 [ 825.214194] ? __lock_is_held+0xb5/0x140 [ 825.216273] binder: undelivered TRANSACTION_ERROR: 29201 [ 825.218371] ? should_remove_suid+0xe0/0x130 [ 825.218404] ? check_same_owner+0x320/0x320 [ 825.218421] ? device_pm_sleep_init+0xe8/0x200 [ 825.218441] ? rcu_note_context_switch+0x710/0x710 [ 825.218459] __should_failslab+0x124/0x180 [ 825.246545] should_failslab+0x9/0x14 [ 825.250372] __kmalloc_track_caller+0x2c4/0x760 [ 825.255056] ? pointer+0xa10/0xa10 [ 825.258619] ? kvasprintf_const+0x67/0x190 [ 825.262867] kvasprintf+0xa9/0x130 [ 825.266415] ? bust_spinlocks+0xe0/0xe0 [ 825.270402] ? rcu_read_lock_sched_held+0x108/0x120 [ 825.275427] kvasprintf_const+0x67/0x190 [ 825.279496] kobject_set_name_vargs+0x5b/0x150 [ 825.284175] device_create_groups_vargs+0x1ce/0x270 [ 825.289202] device_create+0xd3/0x100 [ 825.293013] ? device_create_vargs+0x60/0x60 [ 825.293458] binder: 24195:24196 transaction failed 29189/-22, size 0-0 line 2856 [ 825.297429] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 825.297447] ? trace_hardirqs_on+0xd/0x10 [ 825.297467] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 825.297483] ? graph_lock+0x170/0x170 [ 825.297508] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 825.297524] ? lock_release+0xa10/0xa10 [ 825.297545] ? check_same_owner+0x320/0x320 [ 825.337412] ? rcu_note_context_switch+0x710/0x710 [ 825.342357] ? __lock_acquire+0x7f5/0x5140 [ 825.343543] binder: 24195:24199 transaction failed 29189/-22, size 0-0 line 2856 [ 825.346599] ? __might_sleep+0x95/0x190 [ 825.346621] ? kasan_check_write+0x14/0x20 [ 825.346639] ? __mutex_lock+0x7d9/0x17f0 [ 825.346659] ? genl_rcv_msg+0x13a/0x170 [ 825.346675] ? __lock_acquire+0x7f5/0x5140 [ 825.346693] ? mutex_trylock+0x2a0/0x2a0 [ 825.378676] ? perf_trace_lock+0xd6/0x900 [ 825.382830] ? graph_lock+0x170/0x170 [ 825.386643] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 825.391868] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 825.396902] ? validate_nla+0x2d9/0x7b0 [ 825.400886] hwsim_new_radio_nl+0x7b8/0xa60 [ 825.405215] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 825.410420] ? __netlink_ns_capable+0x100/0x130 [ 825.415107] genl_family_rcv_msg+0x889/0x1120 [ 825.419622] ? genl_rcv+0x40/0x40 [ 825.423084] ? lock_downgrade+0x8e0/0x8e0 [ 825.427238] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 825.432269] ? lock_acquire+0x1dc/0x520 [ 825.436247] ? genl_rcv+0x19/0x40 [ 825.439752] genl_rcv_msg+0xc6/0x170 [ 825.443468] netlink_rcv_skb+0x172/0x440 [ 825.447533] ? genl_family_rcv_msg+0x1120/0x1120 [ 825.451571] binder: undelivered TRANSACTION_ERROR: 29189 [ 825.452291] ? netlink_ack+0xbc0/0xbc0 [ 825.452308] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 825.452325] ? netlink_skb_destructor+0x210/0x210 [ 825.471650] genl_rcv+0x28/0x40 [ 825.474938] netlink_unicast+0x58b/0x740 [ 825.479009] ? netlink_attachskb+0x970/0x970 [ 825.483430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 825.488972] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 825.493981] ? security_netlink_send+0x88/0xb0 [ 825.498555] netlink_sendmsg+0x9f0/0xfa0 [ 825.502613] ? netlink_unicast+0x740/0x740 [ 825.506859] ? security_socket_sendmsg+0x94/0xc0 [ 825.511604] ? netlink_unicast+0x740/0x740 [ 825.515830] sock_sendmsg+0xd5/0x120 [ 825.519533] ___sys_sendmsg+0x805/0x940 [ 825.523500] ? copy_msghdr_from_user+0x560/0x560 [ 825.528256] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 825.533781] ? proc_fail_nth_write+0x96/0x1f0 [ 825.538266] ? __fget_light+0x2ef/0x430 [ 825.542230] ? fget_raw+0x20/0x20 [ 825.545669] ? find_held_lock+0x36/0x1c0 [ 825.549724] ? kasan_check_write+0x14/0x20 [ 825.553954] ? wait_for_completion+0x870/0x870 [ 825.558534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 825.564057] ? sockfd_lookup_light+0xc5/0x160 [ 825.568542] __sys_sendmsg+0x115/0x270 [ 825.572416] ? __ia32_sys_shutdown+0x80/0x80 [ 825.576815] ? __sb_end_write+0xac/0xe0 [ 825.580779] ? fput+0x130/0x1a0 [ 825.584049] ? ksys_write+0x1a6/0x250 [ 825.587851] __x64_sys_sendmsg+0x78/0xb0 [ 825.591903] do_syscall_64+0x1b1/0x800 [ 825.595779] ? finish_task_switch+0x1ca/0x840 [ 825.600263] ? syscall_return_slowpath+0x5c0/0x5c0 [ 825.605181] ? syscall_return_slowpath+0x30f/0x5c0 [ 825.610104] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 825.615456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 825.620293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 825.625469] RIP: 0033:0x455a09 [ 825.628652] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.636347] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 2033/05/18 03:45:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:18 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x280240, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/54) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:19 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x42000, 0x0) epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x7ff, 0x480, &(0x7f0000000040)="2ce4ff23305b13a895ffb5565cb4840931680211b3b4f38a230c72011c85887cc2e422eb5ffc215375ebfe7f416067962e22e96d6d7735a33087b18224f20f655381e0cd6d8fff6acd01cc2ecb126eb059a0cba2797107b37a2d857b0684b457898fd0ffa8ffd326f744097bd9ec2de4185deec3641a230aa3aa2b753985d1f0cd7dc598476a1c6aeb8e40256b", &(0x7f0000000100)="a4ee0bc03cc3b2fec96eb3af332fb8761b628aec8ff951ef801657", 0x8d, 0x1b}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) [ 825.643611] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 825.650874] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 825.658130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 825.665383] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000d 2033/05/18 03:45:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x221f]}, 0x10) [ 825.719667] binder: 24211:24214 unknown command 0 [ 825.764936] binder: 24211:24214 ioctl c0306201 20007000 returned -22 [ 825.802486] binder: 24211:24214 ioctl c0306201 20000240 returned -11 [ 825.821783] binder: 24211:24214 unknown command 0 [ 825.832323] binder: 24211:24214 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:19 executing program 3 (fault-call:3 fault-nth:14): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:19 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x2fe, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@flat={0x77682a85, 0x101, r2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x0, 0x3, 0x3b}], &(0x7f0000000100)=[0x38, 0x28]}}, @free_buffer={0x40086303, r2}, @request_death={0x400c630e, 0x4, 0x2}, @decrefs={0x40046307}], 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xef5b000000000000]}, 0x10) 2033/05/18 03:45:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:19 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]}) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x3f000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:19 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 826.085252] FAULT_INJECTION: forcing a failure. [ 826.085252] name failslab, interval 1, probability 0, space 0, times 0 [ 826.085879] binder: 24247:24248 transaction failed 29189/-22, size 0-0 line 2856 [ 826.096598] CPU: 1 PID: 24240 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 826.111362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.120733] Call Trace: [ 826.123337] dump_stack+0x1b9/0x294 [ 826.126986] ? dump_stack_print_info.cold.2+0x52/0x52 [ 826.132280] ? finish_task_switch+0x1ca/0x840 [ 826.136785] ? finish_task_switch+0x182/0x840 [ 826.141307] should_fail.cold.4+0xa/0x1a [ 826.142432] binder: 24247:24248 transaction failed 29189/-22, size 0-0 line 2856 [ 826.145374] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 826.145402] ? __schedule+0x809/0x1e30 [ 826.145419] ? save_stack+0xa9/0xd0 [ 826.145438] ? __sched_text_start+0x8/0x8 [ 826.158179] Unknown ioctl -1073172856 [ 826.161931] ? find_held_lock+0x36/0x1c0 [ 826.161952] ? __lock_is_held+0xb5/0x140 [ 826.161978] ? check_same_owner+0x320/0x320 [ 826.161999] ? put_dec+0xf0/0xf0 [ 826.189316] ? print_usage_bug+0xc0/0xc0 [ 826.193377] __should_failslab+0x124/0x180 [ 826.197606] should_failslab+0x9/0x14 [ 826.201398] kmem_cache_alloc_trace+0x2cb/0x780 [ 826.206060] ? refcount_add_not_zero+0x320/0x320 [ 826.210829] device_private_init+0x98/0x230 [ 826.215485] ? virtual_device_parent+0x60/0x60 [ 826.220050] ? retint_kernel+0x10/0x10 [ 826.223931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 826.231333] ? refcount_inc+0x29/0x70 [ 826.235129] device_add+0xe98/0x16d0 [ 826.238834] ? retint_kernel+0x10/0x10 [ 826.242708] ? device_private_init+0x230/0x230 [ 826.247282] ? device_create_groups_vargs+0x1f7/0x270 [ 826.252461] device_create_groups_vargs+0x1ff/0x270 [ 826.257470] device_create+0xd3/0x100 [ 826.261262] ? device_create_vargs+0x60/0x60 [ 826.265666] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 826.270755] ? trace_hardirqs_on+0xd/0x10 [ 826.274895] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 826.279811] ? graph_lock+0x170/0x170 [ 826.283671] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 826.289817] ? lock_release+0xa10/0xa10 [ 826.293782] ? check_same_owner+0x320/0x320 [ 826.298095] ? rcu_note_context_switch+0x710/0x710 [ 826.303016] ? __lock_acquire+0x7f5/0x5140 [ 826.307289] ? __might_sleep+0x95/0x190 [ 826.311264] ? kasan_check_write+0x14/0x20 [ 826.315497] ? __mutex_lock+0x7d9/0x17f0 [ 826.319550] ? genl_rcv_msg+0x13a/0x170 [ 826.323512] ? __lock_acquire+0x7f5/0x5140 [ 826.327821] ? mutex_trylock+0x2a0/0x2a0 [ 826.331888] ? graph_lock+0x170/0x170 [ 826.335692] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 826.340874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 826.345882] ? validate_nla+0x2d9/0x7b0 [ 826.349857] hwsim_new_radio_nl+0x7b8/0xa60 [ 826.354178] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 826.359359] ? __netlink_ns_capable+0x100/0x130 [ 826.364031] genl_family_rcv_msg+0x889/0x1120 [ 826.368522] ? genl_rcv+0x40/0x40 [ 826.371970] ? lock_downgrade+0x8e0/0x8e0 [ 826.376110] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 826.381119] ? kasan_check_read+0x11/0x20 [ 826.385259] ? lock_acquire+0x1dc/0x520 [ 826.389219] ? genl_rcv+0x19/0x40 [ 826.392681] genl_rcv_msg+0xc6/0x170 [ 826.396400] netlink_rcv_skb+0x172/0x440 [ 826.400462] ? genl_family_rcv_msg+0x1120/0x1120 [ 826.405299] ? netlink_ack+0xbc0/0xbc0 [ 826.409180] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 826.414363] ? netlink_skb_destructor+0x210/0x210 [ 826.419198] genl_rcv+0x28/0x40 [ 826.422467] netlink_unicast+0x58b/0x740 [ 826.426522] ? netlink_attachskb+0x970/0x970 [ 826.430926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 826.436451] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 826.441457] ? security_netlink_send+0x88/0xb0 [ 826.446040] netlink_sendmsg+0x9f0/0xfa0 [ 826.450098] ? netlink_unicast+0x740/0x740 [ 826.454326] ? security_socket_sendmsg+0x94/0xc0 [ 826.459069] ? netlink_unicast+0x740/0x740 [ 826.463295] sock_sendmsg+0xd5/0x120 [ 826.466999] ___sys_sendmsg+0x805/0x940 [ 826.470972] ? copy_msghdr_from_user+0x560/0x560 [ 826.475728] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 826.481255] ? proc_fail_nth_write+0x96/0x1f0 [ 826.485744] ? __fget_light+0x2ef/0x430 [ 826.489709] ? fget_raw+0x20/0x20 [ 826.493148] ? find_held_lock+0x36/0x1c0 [ 826.497208] ? kasan_check_write+0x14/0x20 [ 826.501437] ? wait_for_completion+0x870/0x870 [ 826.506022] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 826.511551] ? sockfd_lookup_light+0xc5/0x160 [ 826.516038] __sys_sendmsg+0x115/0x270 [ 826.519914] ? __ia32_sys_shutdown+0x80/0x80 [ 826.524308] ? __sb_end_write+0xac/0xe0 [ 826.528271] ? fput+0x130/0x1a0 [ 826.531539] ? ksys_write+0x1a6/0x250 [ 826.535340] __x64_sys_sendmsg+0x78/0xb0 [ 826.539392] do_syscall_64+0x1b1/0x800 [ 826.543269] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 826.548116] ? syscall_return_slowpath+0x5c0/0x5c0 [ 826.553037] ? syscall_return_slowpath+0x30f/0x5c0 [ 826.557959] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 826.563314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 826.568148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 826.573323] RIP: 0033:0x455a09 [ 826.576499] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2033/05/18 03:45:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 826.584203] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 826.591459] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 826.598713] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 826.605967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 826.613221] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000e [ 826.671124] binder: undelivered TRANSACTION_ERROR: 29189 [ 826.692864] Unknown ioctl -1073172856 2033/05/18 03:45:20 executing program 0: getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) setpgid(r1, r0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0003000000d82c991f09705cc8938a") r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe7e00000]}, 0x10) 2033/05/18 03:45:20 executing program 3 (fault-call:3 fault-nth:15): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:20 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) sendto(r1, &(0x7f00000003c0)="9fe97185e64f9e8608ff466665232466c4ca2eefec9e18ab3fd1aa4d7ff8e8cdf8e099da50", 0x25, 0x0, &(0x7f0000000400)=@rc={0x1f, {0x2, 0x5, 0x8000, 0x3, 0x7, 0xfffffffffffffffe}, 0x8}, 0x80) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r2, 0xb0, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xf63, @loopback={0x0, 0x1}, 0xb80}, @in6={0xa, 0x4e24, 0xffffffff, @loopback={0x0, 0x1}, 0x1}, @in={0x2, 0x4e24, @rand_addr=0x800}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x80, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in6={0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x80000001}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f0000000380)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}], 0x17) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000004c0)={r3, 0xc, "f086d1d173fdaa835c7b34c7"}, &(0x7f0000000500)=0x14) r6 = memfd_create(&(0x7f0000000000)='\x00', 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x9, 0x781, 0x6, "5510153b65c891a5a9234b21d0bd13c5e199e47786dae6100b98db777f2c696411d9ee82dcc68ea593b818d43c51b4e20b8dc8fd3218c836fa35d2bc5f25f396e0f04cc953cc3d880f50c8e0a65d1c03"}, 0xd8) sendto$inet6(r4, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000000ffffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x9703, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:20 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 827.098562] FAULT_INJECTION: forcing a failure. [ 827.098562] name failslab, interval 1, probability 0, space 0, times 0 [ 827.108900] binder: 24284:24291 transaction failed 29189/-22, size 0-0 line 2856 [ 827.109939] CPU: 1 PID: 24287 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 827.124844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.134382] Call Trace: [ 827.135548] binder: 24284:24291 transaction failed 29189/-22, size 0-0 line 2856 [ 827.136983] dump_stack+0x1b9/0x294 2033/05/18 03:45:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 827.137008] ? dump_stack_print_info.cold.2+0x52/0x52 [ 827.137025] ? perf_trace_lock+0xd6/0x900 [ 827.137052] should_fail.cold.4+0xa/0x1a [ 827.137074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 827.166812] ? graph_lock+0x170/0x170 [ 827.170643] ? find_held_lock+0x36/0x1c0 [ 827.174726] ? __lock_is_held+0xb5/0x140 [ 827.178809] ? splice_from_pipe+0x310/0x320 [ 827.183159] ? check_same_owner+0x320/0x320 [ 827.187504] ? rcu_note_context_switch+0x710/0x710 [ 827.192446] ? perf_trace_lock+0xd6/0x900 2033/05/18 03:45:20 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x2, &(0x7f0000000080)="0001000000000000000970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000040)=0x81, 0x8) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x80) 2033/05/18 03:45:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 827.196603] __should_failslab+0x124/0x180 [ 827.200855] should_failslab+0x9/0x14 [ 827.204773] __kmalloc_track_caller+0x2c4/0x760 [ 827.205492] binder: undelivered TRANSACTION_ERROR: 29189 [ 827.209467] ? debug_check_no_locks_freed+0x310/0x310 [ 827.209484] ? kasan_check_write+0x14/0x20 [ 827.209502] ? __mutex_lock+0x7d9/0x17f0 [ 827.209520] ? kstrdup_const+0x66/0x80 [ 827.209539] kstrdup+0x39/0x70 [ 827.209557] kstrdup_const+0x66/0x80 [ 827.209576] __kernfs_new_node+0xa8/0x580 [ 827.209593] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 827.209615] ? lock_downgrade+0x8e0/0x8e0 [ 827.252782] kernfs_new_node+0x80/0xf0 [ 827.256684] kernfs_create_dir_ns+0x3d/0x140 [ 827.261113] sysfs_create_dir_ns+0xbe/0x1d0 [ 827.265453] kobject_add_internal+0x354/0xac0 [ 827.266513] binder: 24300:24301 transaction failed 29189/-22, size 0-0 line 2856 [ 827.269960] ? kobj_ns_type_registered+0x60/0x60 [ 827.269980] ? lock_downgrade+0x8e0/0x8e0 [ 827.270002] ? refcount_add_not_zero+0x320/0x320 [ 827.270024] ? kasan_check_read+0x11/0x20 [ 827.270042] kobject_add+0x13a/0x190 [ 827.270056] ? kset_create_and_add+0x190/0x190 [ 827.270076] ? mutex_unlock+0xd/0x10 [ 827.307342] device_add+0x3a5/0x16d0 [ 827.311077] ? device_private_init+0x230/0x230 [ 827.315668] ? kfree+0x1e9/0x260 [ 827.319044] ? kfree_const+0x5e/0x70 [ 827.322783] device_create_groups_vargs+0x1ff/0x270 [ 827.327557] binder: 24300:24301 transaction failed 29189/-22, size 0-0 line 2856 [ 827.327801] device_create+0xd3/0x100 [ 827.339205] ? device_create_vargs+0x60/0x60 [ 827.343623] ? mac80211_hwsim_new_radio+0x1a9/0x3410 2033/05/18 03:45:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 827.348728] ? trace_hardirqs_on+0xd/0x10 [ 827.352892] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 827.357828] ? graph_lock+0x170/0x170 [ 827.361654] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 827.367815] ? lock_release+0xa10/0xa10 [ 827.371803] ? check_same_owner+0x320/0x320 [ 827.376139] ? rcu_note_context_switch+0x710/0x710 [ 827.381086] ? __lock_acquire+0x7f5/0x5140 [ 827.385331] ? __might_sleep+0x95/0x190 [ 827.389320] ? kasan_check_write+0x14/0x20 [ 827.393550] ? __mutex_lock+0x7d9/0x17f0 [ 827.397612] ? genl_rcv_msg+0x13a/0x170 [ 827.401581] ? __lock_acquire+0x7f5/0x5140 [ 827.405807] ? mutex_trylock+0x2a0/0x2a0 [ 827.409865] ? perf_trace_lock+0xd6/0x900 [ 827.414002] ? graph_lock+0x170/0x170 [ 827.417806] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 827.422986] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 827.428018] ? validate_nla+0x2d9/0x7b0 [ 827.431992] hwsim_new_radio_nl+0x7b8/0xa60 [ 827.436309] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 827.441493] ? __netlink_ns_capable+0x100/0x130 [ 827.446165] genl_family_rcv_msg+0x889/0x1120 [ 827.450665] ? genl_rcv+0x40/0x40 [ 827.454107] ? lock_downgrade+0x8e0/0x8e0 [ 827.458246] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 827.463258] ? lock_acquire+0x1dc/0x520 [ 827.467226] ? genl_rcv+0x19/0x40 [ 827.470688] genl_rcv_msg+0xc6/0x170 [ 827.474409] netlink_rcv_skb+0x172/0x440 [ 827.478460] ? genl_family_rcv_msg+0x1120/0x1120 [ 827.483207] ? netlink_ack+0xbc0/0xbc0 [ 827.487081] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 827.492261] ? netlink_skb_destructor+0x210/0x210 [ 827.497096] genl_rcv+0x28/0x40 [ 827.500372] netlink_unicast+0x58b/0x740 [ 827.504432] ? netlink_attachskb+0x970/0x970 [ 827.508831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 827.514358] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 827.519365] ? security_netlink_send+0x88/0xb0 [ 827.523946] netlink_sendmsg+0x9f0/0xfa0 [ 827.528006] ? netlink_unicast+0x740/0x740 [ 827.532239] ? security_socket_sendmsg+0x94/0xc0 [ 827.536992] ? netlink_unicast+0x740/0x740 [ 827.541219] sock_sendmsg+0xd5/0x120 [ 827.544932] ___sys_sendmsg+0x805/0x940 [ 827.548902] ? copy_msghdr_from_user+0x560/0x560 [ 827.553657] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 827.559183] ? proc_fail_nth_write+0x96/0x1f0 [ 827.563671] ? __fget_light+0x2ef/0x430 [ 827.567638] ? fget_raw+0x20/0x20 [ 827.571079] ? find_held_lock+0x36/0x1c0 [ 827.575131] ? kasan_check_write+0x14/0x20 [ 827.579377] ? wait_for_completion+0x870/0x870 [ 827.583966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 827.589493] ? sockfd_lookup_light+0xc5/0x160 [ 827.593985] __sys_sendmsg+0x115/0x270 [ 827.597865] ? __ia32_sys_shutdown+0x80/0x80 [ 827.602277] ? __sb_end_write+0xac/0xe0 [ 827.606424] ? fput+0x130/0x1a0 [ 827.609698] ? ksys_write+0x1a6/0x250 [ 827.613585] __x64_sys_sendmsg+0x78/0xb0 [ 827.617660] do_syscall_64+0x1b1/0x800 [ 827.621535] ? finish_task_switch+0x1ca/0x840 [ 827.626026] ? syscall_return_slowpath+0x5c0/0x5c0 [ 827.630946] ? syscall_return_slowpath+0x30f/0x5c0 [ 827.635880] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 827.641235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 827.646070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.651246] RIP: 0033:0x455a09 [ 827.654419] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.662117] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 827.669375] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 827.676721] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 827.683978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 827.691234] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000f [ 827.698688] kobject_add_internal failed for hwsim85 (error: -12 parent: mac80211_hwsim) 2033/05/18 03:45:21 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x242000, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047010100000000000070") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a6, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES32], 0x33, 0x0, &(0x7f0000000000)="d27a8a689a7c357dd2520a7b8849548fbe28e01372c5297539342a1e588b3e21217b8b54d5c751298e54431aa4e7a1511614cd"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ftruncate(r0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x208000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x1d3, 0x2, 0x9}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000028c0), &(0x7f0000002900)=0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x8f, &(0x7f00000001c0)="a38db798577dfd89df1280be8ad9aed7828c0f5894ba75d6f1171288c2c4adbcfc0b846047213dc17675ae5f8576644cf86ff6ff79c10be42c303cdf1e1583dc8ace559e91aa615e567010ca1d527c3c7af3d9777e735cc9e6757b44bb9a54a6942d8d2592cdb04f2d2d0e26fed09c8202f60211b3aaa7a45037d8a94c8516754eeb5e18e631d5a478bdd08662acf08e59ad270aa8c3c845b80e3760b11dfb1eac49f32913e86d54224927b6e0f7ac1cdb6445979f2c186d89f7b3bb3cee5eee0d0161b57fc018dfc104f0b92fabbf549d0dd9a68613e9b30a0830a19efd555628e611245abf2e6064475e507a99628f7dcc788efc5bbc9f7f5ffba9c3cc96fd9bd54a457bf1926a1e61f13110cc9656879682a7b9efff4edf4cc76a2374ce0e0c3545cbe3abc0ed40bd4bf0cf0287f917e9d49c951afa584363fef08ab2f9a9fb1cd0c6a5dcbd15833d235e1d63f5c01b73679d25efebc6f49af1cb2dc7b362159848a7b4baf260b3096401c9c09bc5d9c512018a5b3bf7128fa5e39d320b5bc4f80eb44467b2cc443aa85e8f9b239c7d4e31c47d09553c6842ecbf7301c59bce2a57748aa1ac963e99a711b1832c86f8e82809849f36ec9b8802a7acf64ec1fae748e73cd5eff168e1f450a106f187f0f32c703512229a4a7fd5f7009ab84aabeba2d78d32e8806390d23d9125cf26c926909480d5f3f5ab5499b06ade5cf297c2b6c19bdd1bb62022d4b30d7c07dbff2b61737e6a67cd070a5314e014a1c489d10092f96473119888a8fd69e08c3681ed71bef65c3bd8041b7e4d3890bf3918658234f8fc61010675fbd068f1015f6ef7b30d5a36c12cac73fccbfb705a984dd30cbf1a2278cbd974587ba5db9e35ee25f0dd622a91e377c59126c6777d98d05d255923c71db16dc1ef2b59017e03cbbbf88775504bdefd811ac7741378ae6bd2ecc36fdf68acad780c0912ef3e3f8ea7a1d6e8e66a930bb9dd62ac052ac0b4850dbbd635ee641aaaae0077497850b8fcf9fb92e37a4029408b40d6b87c3f724e0b13a20ab79a581a0638a4f02911f7d2f54b9b5677a08e9bf1845a8d447b70bc50a47cee29163fd20a7aa716fb3757dc5956edb44aa5add4dd10a16b6b15dd60e1e133964a28d1f8c482bf9f693ed1627886a6e3177e19c92947fabf36b51d9211cb7e25bda01f636cf9e69a1f3c0591f37f8fb59ce160021fbf9cfeef9d35b83d2effeca1e08e9ea40c9792c7e22ecf7ac5ae1a705817a1df7cf073eaaa6a33f0d3882217d1a0c2b661284d709481a4fabb741d1f60146cb279de53ab7a1f9c819e643365cf1c21df372a69d39322d27011b25ba65c469e433ad0c65153d8d64f5690da461d9c6fbba72248cb0486c6879716112d01f4c08d4c3282a43c49c6b03e6244afbe7ad29f1bdcf954fa8da413881cf8471fdc44da7939698cf73c4f4780ec47ecb63935ada20886143c6498c5d443b3dac59e4179b770f6d8f51f9fc4952bdda6b287a1257f1792f25b0809d116f4553194a8a6efc41d78ea1429733905b98e637b0fec07ba6ccae600dbad2792a1721a68f4b913d6d7428db6febc528e5cab6bbd0334b52c3ba3daefc8962cbb9966b9a9ebe1b28521395650b32f61732a222b09e0c09e495c7caa6b98dcf2e630c3fb1bec1f0feef1e88689f904d8f2b8d51e26d6103c1a6be0b21972d2a9dbd4255f124218ecdba8840120672f928b342a267fd19f1ae9166ffb4078c9b3b18021bebee32e96811fa0e09b62ac20aa5e33c39ac3e3ebe74eb18570f7414e268eae23ad3f9499132e54a8c0cc7a67836785a4f497e94ded6877a91a9fdd262f6656daf87017985aa73247c8c271549c0a3218f56f4d42f100e84790f1189a5679a51dcff312e2fb3794d265aa131d7321abf089afaede93b5468ae1e71fbfd55c302ff21600706148b14556bc2b52a480cb885a3aff33bbedd27ae49358124042a7501991e1455798a6b9b74faa786051e38f8aa1af6472248a7727b22cb6085741a145d3090799089232c7fea9a8700bed631b7f5818f58810248c1aed8368a754b67f28f6d0d8195b7de7d2af01a9c87606eeb1e725846d6f6730f0e1f440a5a5833e20b01b0a5c011a6673689d3cd497f25e80998fbecf8f3462405c6794c87e94d806755dca3af92ca50c79dfb25af47d3fce1fccc37c01e8cb923d8c19de0de1ea92db241eb3baca81f1ee33b70aad7476682bbfbba27237ce8f49086aae37330cb5fc9a7573a5249057a256fd9b296498a1922dbff58c8e6009be9c3a6b68caccce892718fc413ec6312e9fab1c49e76928c4a278e85cedaaef820096575b90279cb4b6a3b1c6c7998457ed3e1ee95ad7bbb7615dea8a02c1c121c06cb683783731917481eb0f9fa09bec316f97babdb032dac47463ef920d75253c49e3265658d4922ef03816c723496c7be0131312bab3de230b7cf34a467eff6a9b0f8120f1d0646c47bdc3bf1b6051551e63d1ae63febff97786076db242664fcd00d0b3df7e908881a656182e66194e1f6ae7a46be94390c9aaed139e78b655b4d8ba07bf58bbfa74487d224ffa24c8c044048db289adc53a8eaffa434aa59fb4d9c86b57a4feadde5b830e997aaff4679e72d2f6efa1e4e826f9151cd1a6c8e5abbed6a32c3ba55b149d4c5bda704103bf105c62b61c77908fa65cdda4575e0602f6425781c01e4aab3025b01b431f0bc86f50ff75dea5b68cf956b9b11fad66e43bb84dea9eb298f1bcf0acd5de95e217a60d28e6102429c876f086c05ac18ea0c6add4b1a33c0d25a9464f39c7c9bc146b819057084e1cc3b2fa5a7b5cadbe87632ca49bf835bbb235ab9af0f65fbc7f9f0cc2a135d691d235eb7247165aac600517826d0658020ab9ce6b5cead65bbb64eb323797861192cbe3321bea81f6742066cc61b91ca92427d5e54d795f1d2bdea8b8a77e4067e3b0ae1231ef656d65c742ad63a5b7213ca8156dace7e2744bcb27ecf134bd7d6e8fe64ff5e144bde5334bd96c4c6b1fe1539e2295b15822da28fea5c3f9fe225dfc69df98678a1f11a0faef3eda3b2a4a5a274ecbd80f68b3766daa83407bc1bde2feb4fa23aecd43fb7b05fc0f54185cb089ae5b071c499048d45ae0175da7257f1cf96a7118004ae173dbb10e28216a063d22b45f06ded78730d598531c256a135336d23a5d2117a4931d450eab00e28a4b7fb2699acba8e13be75bfd562046b5f76dbbb163153ff7d73d5315b6c2a071d5875f7986f1671db64a5c327abbf29dc743919833b98211bdc0c56587be275aee2c9f97cb950986db1aaa84c5999d6e6e53e5b8156f9e4bd0791c13c5fd2ba3cb0e64870ec93f142b416c5c1d3e28a95b58d4fbb5e344ffaaa57c79b664d387bd4d694401aea4899e341dfd16150cf4f116d9ea6531dde1e85760bd6d479f804c63046027cf249e53849c0315c9d9459d71f36b8ce8301fcd12a9311fd645cc7b7864ef8b4d4016f26ba6e0f77b1272cd5b5424edc70766ec01958673714571daf76aac74d711a7442af8289fb7c7c7e3e17a126508d419deb195b79ec7558fc46e7af145269167a408fceac537f93944fc9e60d07e07602f25850d9547dc3662cc4b50937abc4c1fbd4d783e7f3891f896e1210726b814f167ed9940a06539ed000b5b55482503a214c813814a7022b46a884d5653f9352a7612e04078ce49095e4a4574940eab0d71aef3a4973316161225be336ece57979947c55f28f7f715b842aa5771472f32e23c028a482fb6bad938eb3a76cf0a5500ed39a73a3de2da3f903808901085998fd5a02451f74e927e5269ce8d96674cb62a53245272efb34a59d6dfd8b4580bbf4666ae8e662b1c715aa8ac70808bef5fb811ffd9ceb094630cad47c7f0060baffa94a8d06eae51725ef5cb86780b9782043353ea11ef15afb9897b197e42c462f210785baa5443be9228bf89210c6da018500321e882e79f04bba960c7dbbb103de3b5bbc7f930cd3d6451de5c3028d1cc759aa98575b3adf5e8ffdeaee8ea8abb0abeaab3b86fbf3b697c6decb921e723731364d5bba167d32219fe35351d86746900862dc6b6c510ad5ab38be5e8618764b54409099e768babb09b8c85a1f4ccc28151c5be3aa6507664d98204f0f847c4c0b2a21ee25970038043fdaa240084b3d245a9ac36bff7a5a7a7dbe1feb6a39b9e50f5c25cf70561330da2c2a8b91347924dfbcd4787460fb924d75efd8738fdca8115247985b55c5751f91ebf0c5dce270ccebfc76e4e71df24a8d95e6c6c67dc4851bb1255d386c4f025cb9033851afd2d2faf61091a4571ac384c546d9311e7be2826cda7ae1d75ff9f1478138010cb1593b6dd3cc4f283b1c6b4dc5096b055fb2ca1f19a79b23c6286a05a20fa6b2d627069572dc05bf0d4f88d9a7f4159d114397827e9b1818f0dd490c11dd1e8ab0c9d19b840c7a3a1205f645aa39309b0ddbd8f920216a42817ffaba336d9c6e4eed5019f809792d169b07eec8f8d0c62e68ab2bf4601a6bf8add2419b80bc90e30d457886ba7c6567a79282137e1c42ba18eb20b80046b3ab652e953acaa4733d1670bd481b639cf0265395cf07f7370894411868a329d8000540a413a8ac345fa38cffdb171f0d3265c4f1ead46040965eea8ff58a65602efaa4268330d91b8d396e33a65bfa1145b577282bb87aa6c6f1ce2f9badffa1e2504430b9bd4419f4dea449827505a8ef58b8f7431257fe99ac62819eaea0bb973b7d263d6e43e81c4aa7d1450904538b46e1d235e544e553e51861810b63b746f16bcef8c90bab57c687c37ba12700ab11a4231da6ed509948f84b9bdfc710369fc1a74978749c477d7ed5cd06668828447277d6fac736f696489ae946897717f529a08a8994bb6169ffa72faaf7e13ac43fe0c3c2c1f2de3ec76bf5b8ec0c58caf96ae95a0e24b586744781b2e5f1ec69c3a4ada115f8c3cda0582602c66d55c87062d28b200c435487fb7d70196770205440289fe4a75e8181b296db4f133d0d18050a3611849b2112468f6fe4efdded0a8f90bceabe2ae96f2da40c6f2afb61d002c96031af8683d64693fca991ff58402cb44989ec3b57263c94d84a7ab87144b9bd1ff4d8cb8598d96685cc930624c153ed03ec086d280bcd3e7d654355e80ff51a979517b84eeb28f335627e7acbc6b2a829e7878dda33524e5d88770aac59256b1ea3aea9d4a6dc17daf7f22ca1dd96a0b48dc44f119c988d582a3ca0825a14877dad9d5e0d3bbb66fef586c690dec1a49026b60ef8ec6e3237c3e8be83d051bde25d72ccbfda5b786fe2fe124f00a3a429f51c008e7fa478ebf56771e713f7124a0f54e623e7a851af2fed085da7495bb3514e74fe807c5b97dc02154271ffc0e520d7b4a40a086d0340b6cacf9f2b832688cb9d8651ca56d6138044fc72355a353027d49b96b74917996f514f07af0ab0973a43d79c3ef9bdd4a9a7300c53c5508de99fc856f143a3d57ce08d733f9e1d508b37a6059e53cbe5eb9daa5b5494b62f7941cb6ba219289eaaf8cd003bad854e5c09867e76d6f2e744debf0c806fec43ec662213b5d7440667dfb393ac47b31d4d4b0c56457ab8968f3da9c81b04f49caa1ee6f2e19181abb58392648009cc530182767eccc6daa64c88326fc78ab03b7e7c86cc581f59387efa52a6edf8ab32f6bbc4fb762b3f70299dd3e65a1c18b64c998f544caadf641dbbe46eeaf1d98105fb2ebed0eedb1637e2220e21c2e07eb2a864a5b027437906c6552345b282e80f168c1fffb14", 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002680)={0x0, 0xc4, "cb3c7e1735a7b2f3066225bb73542eae7ff6b66aace65e837daac60d00810228a1e3ec17faa9e5b872ea88212923f931787d2ac0ea6e098348255b3afad561a0571f1f43256c9dde8abeb95991d82b8a62c37f0d1fc03cb5d27d7a1a589da7ef7fff93eba09c0865ccc8003c1aba023372f9132a048ffa7ceaba6654a57887febb7ddaca80b929cc005f3a484b9b10574fddf34c05607a2924ecb5f56f3a7e67b25559f21c3930f1ad179ca82b85ce24a4772ed9f80d09e4a6e9acb72bfe319b4a55f6b9"}, &(0x7f0000002780)=0xcc) sendmsg$inet_sctp(r2, &(0x7f0000002880)={&(0x7f00000011c0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000002600)=[{&(0x7f0000001240)="4d6ad1edbc0d9f9d87", 0x9}, {&(0x7f0000001280)="c6eb89e11cecee9247d40bc3c9bd8c2e3e5bccb375bacb40f0db51ee10cf9c21aa4216f06c4f19d83977f27aed41b406d9f7202295911185", 0x38}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="78d97dc1b1df4be99d60484eeb08255db64f8b7050c9a049918cf73b574054f583ac73611ddf28f84a5e517947bb11503f75bd732ffa58065c9ced1e901dbec22f347f8e3c82b9bbaaadafd13cc11453d48c030c53e241d54185cb725fb571c860a25f50783f478596ece8eea12afc9182a659db990341ec7c", 0x79}, {&(0x7f0000002340)="9475869bd9e8208f74142187392848f67cd66ba772d24e6bd875895d4351104afe1356d59224672e9e723123daf70b8d83a8bfb64eb587c6a6e695e1737fb74f545ccf7d19be72567fafa49299195ac3", 0x50}, {&(0x7f00000023c0)="6c37a039b37f91613f368a50fd463ba472f6012afe0358c6aa5650d36088cb39450b3b35cbdbd7320252f2eabdb23ecee2335556a93e7aae38882b1b81b07fdbedd890cf708dcbc3d29509dc7ab22eb28047357c90ac870300e2e267de4ff29d4e526d5d409a9b94b58d397307047e3506152ef0f5d4bbdf8fb7ed95876019b2770107c1fdc3b00674e3", 0x8a}, {&(0x7f0000002480)="9febcfc46add708a6a381237a820fc42b1bd30bdba5b7a2dbeff1017ae053ad73f322e54aa6b528e130d16b9a036bdfa636bda4da6d796cae73954eaaf5be0096815df55ec41f41389045cfc315859142735cc0856e6bd0ac1fea73297991b672466bf09d28685c05d73dd9cc14c90a4418819fc3528b32686e26d44749aa05cc987a85a33127996b746dac687c6767d75ea78053a99b9024b7ffc1bf1b67ca02e2bb16ad134fc3ad2e5a20ea91524ee609c323a2cc5d97db9cad77bb1ad21679c4f2edd3ba7ab0c1743c6ee4a58db434a1f58457dec36a45a2c5c0cd4e812cc62753aeb7b34e10a86", 0xe9}, {&(0x7f0000002580)="58d32243cec459beaf96c1516a6b0a39615c05a8727a558ba59af079e13ebf758f515d802332eed6d7e9c794bf15db89dbd7f2b28939ed147112b0de26a0201df040a6509828b979ea65faaac84c863d1012a6925ae881fbf70c6907cb497575d7a36a058db83a51a0693f16801795583f3d0699dedf999481791f", 0x7b}], 0x8, &(0x7f00000027c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xc1f9}}, @init={0x18, 0x84, 0x0, {0xfff, 0xcc1, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x20}}, @init={0x18, 0x84, 0x0, {0xfff, 0xae34, 0xbd, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}, @sndinfo={0x20, 0x84, 0x2, {0x8b4f, 0x5, 0x9, 0x401, r4}}], 0xc0, 0x4000}, 0x4010) keyctl$join(0x1, 0x0) 2033/05/18 03:45:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x57d5]}, 0x10) 2033/05/18 03:45:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:21 executing program 3 (fault-call:3 fault-nth:16): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf00, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:21 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 828.046554] FAULT_INJECTION: forcing a failure. [ 828.046554] name failslab, interval 1, probability 0, space 0, times 0 [ 828.057997] CPU: 1 PID: 24331 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 828.065281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.074651] Call Trace: [ 828.077272] dump_stack+0x1b9/0x294 [ 828.080915] ? dump_stack_print_info.cold.2+0x52/0x52 [ 828.086227] should_fail.cold.4+0xa/0x1a [ 828.090297] ? __kmalloc_track_caller+0x14a/0x760 2033/05/18 03:45:21 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x100, &(0x7f0000000080)="0047fc2f070001000055226628fc302c3adc5e99390970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) socket(0x1, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1fdb0000]}, 0x10) [ 828.095154] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 828.100269] ? device_add+0x3a5/0x16d0 [ 828.104168] ? device_create_groups_vargs+0x1ff/0x270 [ 828.109368] ? device_create+0xd3/0x100 [ 828.113346] ? mac80211_hwsim_new_radio+0x3c6/0x3410 [ 828.118455] ? hwsim_new_radio_nl+0x7b8/0xa60 [ 828.122963] ? genl_family_rcv_msg+0x889/0x1120 [ 828.127644] ? genl_rcv_msg+0xc6/0x170 [ 828.131544] ? graph_lock+0x170/0x170 [ 828.135357] ? sock_sendmsg+0xd5/0x120 [ 828.139250] ? ___sys_sendmsg+0x805/0x940 [ 828.143404] ? __sys_sendmsg+0x115/0x270 [ 828.147471] ? __x64_sys_sendmsg+0x78/0xb0 [ 828.151713] ? do_syscall_64+0x1b1/0x800 [ 828.155781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.161241] ? find_held_lock+0x36/0x1c0 [ 828.165314] ? __lock_is_held+0xb5/0x140 [ 828.169400] ? check_same_owner+0x320/0x320 [ 828.173415] binder: 24350:24351 transaction failed 29189/-22, size 0-0 line 2856 [ 828.173734] ? rcu_note_context_switch+0x710/0x710 [ 828.186178] ? rcu_read_lock_sched_held+0x108/0x120 [ 828.191200] __should_failslab+0x124/0x180 2033/05/18 03:45:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 828.195444] should_failslab+0x9/0x14 [ 828.199261] kmem_cache_alloc+0x2af/0x760 [ 828.203412] ? memcpy+0x45/0x50 [ 828.205270] binder: 24350:24351 transaction failed 29189/-22, size 0-0 line 2856 [ 828.206709] ? kstrdup+0x59/0x70 [ 828.206731] __kernfs_new_node+0xe7/0x580 [ 828.206750] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 828.206773] ? lock_downgrade+0x8e0/0x8e0 [ 828.206792] kernfs_new_node+0x80/0xf0 [ 828.236270] kernfs_create_dir_ns+0x3d/0x140 [ 828.240698] sysfs_create_dir_ns+0xbe/0x1d0 2033/05/18 03:45:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc9c7]}, 0x10) [ 828.245033] kobject_add_internal+0x354/0xac0 [ 828.249542] ? kobj_ns_type_registered+0x60/0x60 [ 828.254314] ? lock_downgrade+0x8e0/0x8e0 [ 828.258485] ? refcount_add_not_zero+0x320/0x320 [ 828.263498] ? kasan_check_read+0x11/0x20 [ 828.267656] kobject_add+0x13a/0x190 [ 828.271377] ? kset_create_and_add+0x190/0x190 [ 828.275965] ? mutex_unlock+0xd/0x10 [ 828.279685] device_add+0x3a5/0x16d0 [ 828.283408] ? device_private_init+0x230/0x230 [ 828.287997] ? kfree+0x1e9/0x260 [ 828.291370] ? kfree_const+0x5e/0x70 2033/05/18 03:45:22 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 828.295098] device_create_groups_vargs+0x1ff/0x270 [ 828.300126] device_create+0xd3/0x100 [ 828.303934] ? device_create_vargs+0x60/0x60 [ 828.308353] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 828.313461] ? trace_hardirqs_on+0xd/0x10 [ 828.315868] binder: undelivered TRANSACTION_ERROR: 29189 [ 828.317612] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 828.317630] ? graph_lock+0x170/0x170 [ 828.317654] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 828.317674] ? lock_release+0xa10/0xa10 [ 828.317689] ? check_same_owner+0x320/0x320 [ 828.317708] ? rcu_note_context_switch+0x710/0x710 [ 828.351297] ? __lock_acquire+0x7f5/0x5140 [ 828.355553] ? __might_sleep+0x95/0x190 [ 828.359538] ? kasan_check_write+0x14/0x20 [ 828.363782] ? __mutex_lock+0x7d9/0x17f0 [ 828.367858] ? genl_rcv_msg+0x13a/0x170 [ 828.371500] binder: 24366:24367 transaction failed 29189/-22, size 0-0 line 2856 [ 828.371838] ? __lock_acquire+0x7f5/0x5140 [ 828.371858] ? mutex_trylock+0x2a0/0x2a0 [ 828.371871] ? graph_lock+0x170/0x170 [ 828.371892] ? __sanitizer_cov_trace_switch+0x53/0x90 2033/05/18 03:45:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 828.393447] binder: 24366:24367 transaction failed 29189/-22, size 0-0 line 2856 [ 828.396656] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 828.396669] ? validate_nla+0x2d9/0x7b0 [ 828.396682] hwsim_new_radio_nl+0x7b8/0xa60 [ 828.396694] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 828.396710] ? __netlink_ns_capable+0x100/0x130 [ 828.396726] genl_family_rcv_msg+0x889/0x1120 [ 828.396741] ? genl_rcv+0x40/0x40 [ 828.396753] ? lock_downgrade+0x8e0/0x8e0 [ 828.396764] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 828.396785] ? kasan_check_read+0x11/0x20 [ 828.396797] ? lock_acquire+0x1dc/0x520 [ 828.396807] ? genl_rcv+0x19/0x40 [ 828.396828] genl_rcv_msg+0xc6/0x170 [ 828.396844] netlink_rcv_skb+0x172/0x440 [ 828.396859] ? genl_family_rcv_msg+0x1120/0x1120 [ 828.396875] ? netlink_ack+0xbc0/0xbc0 [ 828.396890] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 828.396907] ? netlink_skb_destructor+0x210/0x210 [ 828.396928] genl_rcv+0x28/0x40 [ 828.396942] netlink_unicast+0x58b/0x740 [ 828.396961] ? netlink_attachskb+0x970/0x970 [ 828.480788] binder: undelivered TRANSACTION_ERROR: 29189 [ 828.482774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 828.482792] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 828.482810] ? security_netlink_send+0x88/0xb0 [ 828.482830] netlink_sendmsg+0x9f0/0xfa0 [ 828.482853] ? netlink_unicast+0x740/0x740 [ 828.482870] ? security_socket_sendmsg+0x94/0xc0 [ 828.482886] ? netlink_unicast+0x740/0x740 [ 828.532379] sock_sendmsg+0xd5/0x120 [ 828.536105] ___sys_sendmsg+0x805/0x940 [ 828.540113] ? copy_msghdr_from_user+0x560/0x560 [ 828.544876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 828.550407] ? proc_fail_nth_write+0x96/0x1f0 [ 828.554902] ? __fget_light+0x2ef/0x430 [ 828.558879] ? fget_raw+0x20/0x20 [ 828.562329] ? find_held_lock+0x36/0x1c0 [ 828.566385] ? kasan_check_write+0x14/0x20 [ 828.570617] ? wait_for_completion+0x870/0x870 [ 828.575198] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 828.580736] ? sockfd_lookup_light+0xc5/0x160 [ 828.585226] __sys_sendmsg+0x115/0x270 [ 828.589103] ? __ia32_sys_shutdown+0x80/0x80 [ 828.593499] ? __sb_end_write+0xac/0xe0 [ 828.597466] ? fput+0x130/0x1a0 [ 828.600818] ? ksys_write+0x1a6/0x250 [ 828.604617] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 828.609453] __x64_sys_sendmsg+0x78/0xb0 [ 828.613509] do_syscall_64+0x1b1/0x800 [ 828.617387] ? finish_task_switch+0x1ca/0x840 [ 828.621870] ? syscall_return_slowpath+0x5c0/0x5c0 [ 828.626787] ? syscall_return_slowpath+0x30f/0x5c0 [ 828.631711] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 828.637077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 828.641923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.647099] RIP: 0033:0x455a09 [ 828.650272] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.657988] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 828.665246] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 828.672500] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 828.679754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 828.687029] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000010 [ 828.694707] kobject_add_internal failed for hwsim86 (error: -12 parent: mac80211_hwsim) 2033/05/18 03:45:22 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:22 executing program 3 (fault-call:3 fault-nth:17): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f22000000000000]}, 0x10) 2033/05/18 03:45:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xe, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:22 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:22 executing program 2: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x12b6, 0x2, 0x1ff, 0x80, 0x7fffffff}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r0, 0x7}, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x1, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) clock_adjtime(0x0, &(0x7f0000000500)={0x8, 0x400, 0xc0, 0x80000001, 0x80, 0x7, 0x2, 0x3, 0x4, 0x7, 0x7fff, 0x1, 0x1f, 0x1, 0x7f, 0x9, 0x100, 0xf98d, 0x5aa, 0x2, 0x7, 0x8, 0x2, 0x1, 0x1, 0x80000001}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000680)={0x4, 0xaca, &(0x7f0000000000)="c637067d3accc3", &(0x7f0000000600)="a39caec31244ea0cdbdb2adb50e8e4e595ebc51833686098a1be4809430a048fc4b193e1f4bf443883891dea6d9bef6694b3f7630b50df54ec30f9d125fe043ca0f7ce2fa0f3e8c00058baba", 0x7, 0x4c}) bind$nfc_llcp(r2, &(0x7f00000006c0)={0x27, 0x0, 0x1, 0x6, 0x1, 0x40, "d3b44e8510d523e0ae0d1686fea1a13489692f9967e33d55e05618705f7fe46ecfcbed46de0afe1049d2c6e16007f4377e892e101d5d768bec0462997bbb9a", 0x33}, 0x60) ioctl$TCSETA(r2, 0x5406, &(0x7f00000002c0)={0xfffffffffffffff7, 0xffff, 0x7ff, 0x2, 0x802, 0x7f, 0x5, 0x6, 0x0, 0x8000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000740)={r1, 0x2, 0x1d, "2f63f8dc2a0f279dce68603bb114e7870edf4f30fc8a986b14eeafc807"}, 0x25) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000004c0)=0xbe, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0xff, 0x0, 0x4, 0x500, 0x5, 0x2, r3}) [ 829.168835] binder: 24397:24399 unknown command 25361 [ 829.175760] binder: 24400:24403 transaction failed 29189/-22, size 0-0 line 2856 [ 829.181362] binder: 24397:24399 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="b8", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 829.218280] binder: 24400:24403 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7c90000]}, 0x10) 2033/05/18 03:45:23 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) signalfd(r0, &(0x7f0000000140)={0x7}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840734ff88174595d82b47e1347f90f4ba69820f66102be30de53187ac5464e0f7212e03fb9f95926e6237171ff0f000011f041b8a3d730360cba64c99b4f5dd316ab8ce412"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl(r0, 0x80, &(0x7f0000000080)="e326c6f4a6331283ffe37ec38c1beb5e531aa4af61997544b187d36333744dbb7e4614e458fd91bc83a8dc092e8561392db971fa45ed800bc69073899e3d843aabfb68310aa5e42b769d3a4c73c92e3362e0250f3d047ff8fff1a109bdf403daac2d58f2db9d553ac5d7b65a01a3ed02f896e3ea83a01577f898d115aa42a1956dde8e80eae6f0f1e2492c76e0eeb193ef79720307315dce7d47128dc6361667f2458cf367d8812c0bcd4a877175") 2033/05/18 03:45:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 829.344359] binder: undelivered TRANSACTION_ERROR: 29189 [ 829.349376] FAULT_INJECTION: forcing a failure. [ 829.349376] name failslab, interval 1, probability 0, space 0, times 0 [ 829.361162] CPU: 1 PID: 24431 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 829.368439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.377796] Call Trace: [ 829.380400] dump_stack+0x1b9/0x294 [ 829.384044] ? dump_stack_print_info.cold.2+0x52/0x52 [ 829.389244] ? __lock_acquire+0x7f5/0x5140 [ 829.390809] binder: 24432:24433 got transaction to invalid handle [ 829.393495] should_fail.cold.4+0xa/0x1a [ 829.393516] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 829.399764] binder: 24432:24433 transaction failed 29201/-22, size -1862702466781421550-1224979167354908963 line 2856 [ 829.403794] ? graph_lock+0x170/0x170 [ 829.403814] ? kasan_check_write+0x14/0x20 [ 829.403832] ? find_held_lock+0x36/0x1c0 [ 829.431827] ? __lock_is_held+0xb5/0x140 [ 829.435922] ? check_same_owner+0x320/0x320 [ 829.440251] ? perf_trace_lock+0xd6/0x900 [ 829.444424] ? rcu_note_context_switch+0x710/0x710 [ 829.449364] __should_failslab+0x124/0x180 [ 829.453610] should_failslab+0x9/0x14 [ 829.457418] kmem_cache_alloc+0x2af/0x760 [ 829.457681] binder: 24432:24438 got transaction to invalid handle [ 829.461566] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 829.461584] ? graph_lock+0x170/0x170 [ 829.461602] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 829.461622] __kernfs_new_node+0xe7/0x580 [ 829.468731] binder: 24432:24438 transaction failed 29201/-22, size -1862702466781421550-1224979167354908963 line 2856 [ 829.474247] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 829.474264] ? find_held_lock+0x36/0x1c0 [ 829.474288] ? lock_downgrade+0x8e0/0x8e0 [ 829.510952] kernfs_new_node+0x80/0xf0 [ 829.514839] __kernfs_create_file+0x4d/0x330 [ 829.519237] sysfs_add_file_mode_ns+0x21a/0x560 [ 829.523899] sysfs_create_file_ns+0x8b/0xb0 [ 829.528209] device_create_file+0xf4/0x1e0 [ 829.532435] ? acpi_bind_one+0x8f0/0x8f0 [ 829.536482] device_add+0x3ec/0x16d0 [ 829.540188] ? device_private_init+0x230/0x230 [ 829.544754] ? kfree+0x1e9/0x260 [ 829.548108] ? kfree_const+0x5e/0x70 [ 829.551813] device_create_groups_vargs+0x1ff/0x270 [ 829.556824] device_create+0xd3/0x100 [ 829.560624] ? device_create_vargs+0x60/0x60 [ 829.565033] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 829.570129] ? trace_hardirqs_on+0xd/0x10 [ 829.574276] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 829.579191] ? graph_lock+0x170/0x170 [ 829.582998] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 829.589138] ? lock_release+0xa10/0xa10 [ 829.593100] ? check_same_owner+0x320/0x320 [ 829.597499] ? rcu_note_context_switch+0x710/0x710 [ 829.602414] ? __lock_acquire+0x7f5/0x5140 [ 829.606644] ? __might_sleep+0x95/0x190 [ 829.610611] ? kasan_check_write+0x14/0x20 [ 829.614832] ? __mutex_lock+0x7d9/0x17f0 [ 829.618885] ? genl_rcv_msg+0x13a/0x170 [ 829.622850] ? __lock_acquire+0x7f5/0x5140 [ 829.627075] ? mutex_trylock+0x2a0/0x2a0 [ 829.631120] ? perf_trace_lock+0xd6/0x900 [ 829.635254] ? graph_lock+0x170/0x170 [ 829.639049] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 829.644229] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 829.649268] ? validate_nla+0x2d9/0x7b0 [ 829.653239] hwsim_new_radio_nl+0x7b8/0xa60 [ 829.657553] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 829.662737] ? __netlink_ns_capable+0x100/0x130 [ 829.667399] genl_family_rcv_msg+0x889/0x1120 [ 829.671889] ? genl_rcv+0x40/0x40 [ 829.675331] ? lock_downgrade+0x8e0/0x8e0 [ 829.679488] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 829.684501] ? lock_acquire+0x1dc/0x520 [ 829.688464] ? genl_rcv+0x19/0x40 [ 829.691921] genl_rcv_msg+0xc6/0x170 [ 829.695718] netlink_rcv_skb+0x172/0x440 [ 829.699776] ? genl_family_rcv_msg+0x1120/0x1120 [ 829.704522] ? netlink_ack+0xbc0/0xbc0 [ 829.708396] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 829.713587] ? netlink_skb_destructor+0x210/0x210 [ 829.718426] genl_rcv+0x28/0x40 [ 829.721875] netlink_unicast+0x58b/0x740 [ 829.726192] ? netlink_attachskb+0x970/0x970 [ 829.730592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 829.736116] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 829.741120] ? security_netlink_send+0x88/0xb0 [ 829.745693] netlink_sendmsg+0x9f0/0xfa0 [ 829.749748] ? netlink_unicast+0x740/0x740 [ 829.753976] ? security_socket_sendmsg+0x94/0xc0 [ 829.758720] ? netlink_unicast+0x740/0x740 [ 829.762959] sock_sendmsg+0xd5/0x120 [ 829.766671] ___sys_sendmsg+0x805/0x940 [ 829.770648] ? copy_msghdr_from_user+0x560/0x560 [ 829.775400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 829.780940] ? proc_fail_nth_write+0x96/0x1f0 [ 829.785440] ? __fget_light+0x2ef/0x430 [ 829.789405] ? fget_raw+0x20/0x20 [ 829.792845] ? find_held_lock+0x36/0x1c0 [ 829.796899] ? kasan_check_write+0x14/0x20 [ 829.801136] ? wait_for_completion+0x870/0x870 [ 829.805714] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 829.811238] ? sockfd_lookup_light+0xc5/0x160 [ 829.815721] __sys_sendmsg+0x115/0x270 [ 829.819596] ? __ia32_sys_shutdown+0x80/0x80 [ 829.823998] ? __sb_end_write+0xac/0xe0 [ 829.827971] ? fput+0x130/0x1a0 [ 829.831238] ? ksys_write+0x1a6/0x250 [ 829.835037] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 829.839871] __x64_sys_sendmsg+0x78/0xb0 [ 829.843923] do_syscall_64+0x1b1/0x800 [ 829.847802] ? finish_task_switch+0x1ca/0x840 [ 829.852288] ? syscall_return_slowpath+0x5c0/0x5c0 [ 829.857205] ? syscall_return_slowpath+0x30f/0x5c0 [ 829.862124] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 829.867482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 829.872318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.877502] RIP: 0033:0x455a09 [ 829.880683] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.888379] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 829.895633] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 829.902887] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 829.910141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 829.917397] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000011 [ 829.992249] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:45:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xe00000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe727]}, 0x10) 2033/05/18 03:45:23 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:23 executing program 0: r0 = socket$kcm(0x29, 0x40000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) getsockname(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b78248f840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[@exit_looper={0x630d}, @release={0x40046306}], 0xc6, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:23 executing program 3 (fault-call:3 fault-nth:18): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/22, 0x16) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x14a8f3c44623abcf) ioctl$BLKRRPART(r1, 0x125f, 0x0) [ 830.151907] binder: 24460:24462 unknown command -129465673 [ 830.159807] FAULT_INJECTION: forcing a failure. [ 830.159807] name failslab, interval 1, probability 0, space 0, times 0 [ 830.169782] binder: 24460:24462 ioctl c0306201 20007000 returned -22 [ 830.171292] CPU: 1 PID: 24458 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 830.185016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.193275] binder: 24460:24462 ioctl c0306201 20000240 returned -11 [ 830.194361] Call Trace: [ 830.194389] dump_stack+0x1b9/0x294 [ 830.194409] ? dump_stack_print_info.cold.2+0x52/0x52 [ 830.194434] ? mutex_trylock+0x2a0/0x2a0 [ 830.210263] binder: 24460:24467 unknown command -129465673 [ 830.212288] should_fail.cold.4+0xa/0x1a [ 830.212308] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 830.212334] ? graph_lock+0x170/0x170 [ 830.219788] binder: 24460:24467 ioctl c0306201 20007000 returned -22 [ 830.221995] ? find_held_lock+0x36/0x1c0 [ 830.222015] ? find_held_lock+0x36/0x1c0 [ 830.222035] ? __lock_is_held+0xb5/0x140 [ 830.222060] ? check_same_owner+0x320/0x320 [ 830.259681] ? graph_lock+0x170/0x170 [ 830.263499] ? rcu_note_context_switch+0x710/0x710 [ 830.268428] ? kasan_check_write+0x14/0x20 [ 830.272652] __should_failslab+0x124/0x180 [ 830.276877] should_failslab+0x9/0x14 [ 830.280664] kmem_cache_alloc+0x2af/0x760 [ 830.284804] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 830.289813] __kernfs_new_node+0xe7/0x580 [ 830.293978] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 830.298726] ? lock_downgrade+0x8e0/0x8e0 [ 830.302866] ? kasan_check_read+0x11/0x20 [ 830.307003] ? do_raw_spin_unlock+0x9e/0x2e0 [ 830.311404] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 830.315981] kernfs_new_node+0x80/0xf0 [ 830.319861] kernfs_create_link+0x33/0x180 [ 830.324088] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 830.329358] sysfs_create_link+0x65/0xc0 [ 830.333410] device_add+0x481/0x16d0 [ 830.337118] ? device_private_init+0x230/0x230 [ 830.341686] ? kfree+0x1e9/0x260 [ 830.345045] ? kfree_const+0x5e/0x70 [ 830.348749] device_create_groups_vargs+0x1ff/0x270 [ 830.353756] device_create+0xd3/0x100 [ 830.357553] ? device_create_vargs+0x60/0x60 [ 830.361962] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 830.367054] ? trace_hardirqs_on+0xd/0x10 [ 830.371209] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 830.376134] ? graph_lock+0x170/0x170 [ 830.379967] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 830.386134] ? lock_release+0xa10/0xa10 [ 830.390099] ? check_same_owner+0x320/0x320 [ 830.394434] ? rcu_note_context_switch+0x710/0x710 [ 830.399364] ? __lock_acquire+0x7f5/0x5140 [ 830.403589] ? __might_sleep+0x95/0x190 [ 830.407557] ? kasan_check_write+0x14/0x20 [ 830.411781] ? __mutex_lock+0x7d9/0x17f0 [ 830.415831] ? genl_rcv_msg+0x13a/0x170 [ 830.419796] ? __lock_acquire+0x7f5/0x5140 [ 830.424031] ? mutex_trylock+0x2a0/0x2a0 [ 830.428082] ? graph_lock+0x170/0x170 [ 830.431884] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 830.437088] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 830.442098] ? validate_nla+0x2d9/0x7b0 [ 830.446156] hwsim_new_radio_nl+0x7b8/0xa60 [ 830.450468] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 830.455649] ? __netlink_ns_capable+0x100/0x130 [ 830.460312] genl_family_rcv_msg+0x889/0x1120 [ 830.464809] ? genl_rcv+0x40/0x40 [ 830.468262] ? lock_downgrade+0x8e0/0x8e0 [ 830.472408] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 830.477419] ? kasan_check_read+0x11/0x20 [ 830.481557] ? lock_acquire+0x1dc/0x520 [ 830.485525] ? genl_rcv+0x19/0x40 [ 830.488982] genl_rcv_msg+0xc6/0x170 [ 830.492689] netlink_rcv_skb+0x172/0x440 [ 830.496738] ? genl_family_rcv_msg+0x1120/0x1120 [ 830.501489] ? netlink_ack+0xbc0/0xbc0 [ 830.505372] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 830.510554] ? netlink_skb_destructor+0x210/0x210 [ 830.515389] genl_rcv+0x28/0x40 [ 830.518656] netlink_unicast+0x58b/0x740 [ 830.522709] ? netlink_attachskb+0x970/0x970 [ 830.527110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 830.532636] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 830.537641] ? security_netlink_send+0x88/0xb0 [ 830.542212] netlink_sendmsg+0x9f0/0xfa0 [ 830.546268] ? netlink_unicast+0x740/0x740 [ 830.550495] ? security_socket_sendmsg+0x94/0xc0 [ 830.555244] ? netlink_unicast+0x740/0x740 [ 830.559470] sock_sendmsg+0xd5/0x120 [ 830.563174] ___sys_sendmsg+0x805/0x940 [ 830.567141] ? copy_msghdr_from_user+0x560/0x560 [ 830.571898] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 830.577422] ? proc_fail_nth_write+0x96/0x1f0 [ 830.581910] ? __fget_light+0x2ef/0x430 [ 830.585961] ? fget_raw+0x20/0x20 [ 830.589402] ? find_held_lock+0x36/0x1c0 [ 830.593454] ? kasan_check_write+0x14/0x20 [ 830.597683] ? wait_for_completion+0x870/0x870 [ 830.602263] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 830.607788] ? sockfd_lookup_light+0xc5/0x160 [ 830.612272] __sys_sendmsg+0x115/0x270 [ 830.616148] ? __ia32_sys_shutdown+0x80/0x80 [ 830.620541] ? __sb_end_write+0xac/0xe0 [ 830.624524] ? fput+0x130/0x1a0 [ 830.627792] ? ksys_write+0x1a6/0x250 [ 830.631595] __x64_sys_sendmsg+0x78/0xb0 [ 830.635654] do_syscall_64+0x1b1/0x800 [ 830.639529] ? finish_task_switch+0x1ca/0x840 [ 830.644016] ? syscall_return_slowpath+0x5c0/0x5c0 [ 830.648936] ? syscall_return_slowpath+0x30f/0x5c0 [ 830.653868] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 830.659234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 830.664069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 830.669243] RIP: 0033:0x455a09 [ 830.672418] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.680114] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 830.687367] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 830.694624] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:45:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x571c]}, 0x10) 2033/05/18 03:45:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:24 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x89, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="116348c087e1e7c3dcef553c6befcf1a215099b147a0c6face5e39e8bcba9c971aa232a4be95634b11fc38670efc961b653bdac7cbd87ec6a050d25bbcf9f8235ccd82e908b965e55540b9a05391511ac0bf963a8b9d896cdb643f2700db059e9ae380cdc34814e85f29c1a38742c838ba4f1a0eadb9779034b1e6125c0e5a74079e039c17a4743adccc56201465955aba03863ce96f4c1a76e9935e08b5a56b7ba63c4ef213283e055de2c220d8e56a27ef5ab3fe15474f3366e3143b6b1035a30f5ba199839226456e2aa161fa19faab23d82f71037f6195a35519f56c783557bf73893fdf79cfb96b69fe23af5cd384d8449f2148344f3682b08ea4e92dc04bd1d79be3a4e68c76afff44ba4684e5dfbbdc77e7e9e96d485cd40a95b7d92fe40518247ef433e4f60ae39e513462d1e38383e1a7c868e206f00286e2a51741ae4ed33cc2598c9f4859b4e0c13f57cb3e59beaf6a98548a"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 830.701880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 830.709135] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000012 [ 830.730900] binder: 24456:24459 unknown command 25361 2033/05/18 03:45:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 830.771449] binder: 24456:24459 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:24 executing program 3 (fault-call:3 fault-nth:19): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x27e7]}, 0x10) [ 830.826168] binder: 24481:24483 unknown command -1068997871 [ 830.846946] binder: 24481:24483 ioctl c0306201 20007000 returned -22 [ 830.874714] binder: 24481:24483 ioctl c0306201 20000240 returned -11 [ 830.883725] FAULT_INJECTION: forcing a failure. [ 830.883725] name failslab, interval 1, probability 0, space 0, times 0 [ 830.895115] CPU: 0 PID: 24490 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 830.902399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.911761] Call Trace: [ 830.914376] dump_stack+0x1b9/0x294 [ 830.918025] ? dump_stack_print_info.cold.2+0x52/0x52 [ 830.923238] should_fail.cold.4+0xa/0x1a [ 830.927311] ? perf_trace_lock+0xd6/0x900 [ 830.931475] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 830.936588] ? zap_class+0x720/0x720 [ 830.940323] ? graph_lock+0x170/0x170 [ 830.944137] ? __mutex_lock+0x7d9/0x17f0 [ 830.948216] ? find_held_lock+0x36/0x1c0 [ 830.952296] ? __lock_is_held+0xb5/0x140 [ 830.956387] ? check_same_owner+0x320/0x320 [ 830.960728] ? rcu_note_context_switch+0x710/0x710 [ 830.965675] __should_failslab+0x124/0x180 [ 830.969925] should_failslab+0x9/0x14 2033/05/18 03:45:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:24 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 830.973756] __kmalloc_track_caller+0x2c4/0x760 [ 830.978436] ? graph_lock+0x170/0x170 [ 830.982246] ? graph_lock+0x170/0x170 [ 830.986061] ? kstrdup_const+0x66/0x80 [ 830.989962] kstrdup+0x39/0x70 [ 830.993173] kstrdup_const+0x66/0x80 [ 830.996900] __kernfs_new_node+0xa8/0x580 [ 831.001054] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 831.005820] ? lock_downgrade+0x8e0/0x8e0 [ 831.009981] ? kasan_check_read+0x11/0x20 [ 831.014140] ? do_raw_spin_unlock+0x9e/0x2e0 [ 831.018557] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 831.023151] kernfs_new_node+0x80/0xf0 [ 831.027051] kernfs_create_link+0x33/0x180 [ 831.031298] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 831.036587] sysfs_create_link+0x65/0xc0 [ 831.040661] device_add+0x7a0/0x16d0 [ 831.044411] ? device_private_init+0x230/0x230 [ 831.048985] ? kfree+0x1e9/0x260 [ 831.052353] ? kfree_const+0x5e/0x70 [ 831.056061] device_create_groups_vargs+0x1ff/0x270 [ 831.061068] device_create+0xd3/0x100 [ 831.064867] ? device_create_vargs+0x60/0x60 [ 831.069268] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 831.074360] ? trace_hardirqs_on+0xd/0x10 [ 831.078501] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 831.083416] ? graph_lock+0x170/0x170 [ 831.087215] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 831.093354] ? lock_release+0xa10/0xa10 [ 831.097317] ? check_same_owner+0x320/0x320 [ 831.101633] ? rcu_note_context_switch+0x710/0x710 [ 831.106549] ? __lock_acquire+0x7f5/0x5140 [ 831.110775] ? __might_sleep+0x95/0x190 [ 831.114739] ? kasan_check_write+0x14/0x20 [ 831.118970] ? __mutex_lock+0x7d9/0x17f0 [ 831.123108] ? genl_rcv_msg+0x13a/0x170 [ 831.127070] ? __lock_acquire+0x7f5/0x5140 [ 831.131296] ? mutex_trylock+0x2a0/0x2a0 [ 831.135355] ? perf_trace_lock+0xd6/0x900 [ 831.139487] ? graph_lock+0x170/0x170 [ 831.143278] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 831.148469] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 831.153475] ? validate_nla+0x2d9/0x7b0 [ 831.157443] hwsim_new_radio_nl+0x7b8/0xa60 [ 831.161757] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 831.166948] ? __netlink_ns_capable+0x100/0x130 [ 831.171612] genl_family_rcv_msg+0x889/0x1120 [ 831.176099] ? genl_rcv+0x40/0x40 [ 831.179538] ? lock_downgrade+0x8e0/0x8e0 [ 831.183675] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 831.188684] ? lock_acquire+0x1dc/0x520 [ 831.192645] ? genl_rcv+0x19/0x40 [ 831.196099] genl_rcv_msg+0xc6/0x170 [ 831.199803] netlink_rcv_skb+0x172/0x440 [ 831.203854] ? genl_family_rcv_msg+0x1120/0x1120 [ 831.208598] ? netlink_ack+0xbc0/0xbc0 [ 831.212477] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 831.217745] ? netlink_skb_destructor+0x210/0x210 [ 831.222585] genl_rcv+0x28/0x40 [ 831.225853] netlink_unicast+0x58b/0x740 [ 831.229913] ? netlink_attachskb+0x970/0x970 [ 831.234311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 831.239839] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 831.244847] ? security_netlink_send+0x88/0xb0 [ 831.249420] netlink_sendmsg+0x9f0/0xfa0 [ 831.253477] ? netlink_unicast+0x740/0x740 [ 831.257713] ? security_socket_sendmsg+0x94/0xc0 [ 831.262454] ? netlink_unicast+0x740/0x740 [ 831.266678] sock_sendmsg+0xd5/0x120 [ 831.270381] ___sys_sendmsg+0x805/0x940 [ 831.274353] ? copy_msghdr_from_user+0x560/0x560 [ 831.279192] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 831.284715] ? proc_fail_nth_write+0x96/0x1f0 [ 831.289200] ? __fget_light+0x2ef/0x430 [ 831.293163] ? fget_raw+0x20/0x20 [ 831.296600] ? find_held_lock+0x36/0x1c0 [ 831.300656] ? kasan_check_write+0x14/0x20 [ 831.304887] ? wait_for_completion+0x870/0x870 [ 831.309467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 831.314993] ? sockfd_lookup_light+0xc5/0x160 [ 831.319486] __sys_sendmsg+0x115/0x270 [ 831.323372] ? __ia32_sys_shutdown+0x80/0x80 [ 831.327769] ? __sb_end_write+0xac/0xe0 [ 831.331737] ? fput+0x130/0x1a0 [ 831.335019] ? ksys_write+0x1a6/0x250 [ 831.338825] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 831.343665] __x64_sys_sendmsg+0x78/0xb0 [ 831.347718] do_syscall_64+0x1b1/0x800 [ 831.351612] ? finish_task_switch+0x1ca/0x840 [ 831.356095] ? syscall_return_slowpath+0x5c0/0x5c0 [ 831.361019] ? syscall_return_slowpath+0x30f/0x5c0 [ 831.365946] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 831.371301] ? trace_hardirqs_off_thunk+0x1a/0x1c 2033/05/18 03:45:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xbf95000000000000]}, 0x10) [ 831.376141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.381322] RIP: 0033:0x455a09 [ 831.384499] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.392195] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 831.399471] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 831.406729] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 831.414070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 831.421323] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000013 2033/05/18 03:45:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 831.442531] binder: 24502:24503 unknown command 25361 [ 831.445808] binder: 24481:24483 unknown command -1068997871 [ 831.467397] binder: 24481:24483 ioctl c0306201 20007000 returned -22 [ 831.485303] binder: 24502:24503 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xb804000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:25 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="0047fc2f07d82c992409703e456939789d21587cc61f5431949b13c4367d1b7dec825d444ddcfaaa0ebd3c9dc4bdc14c1e2af598c35008438c36def78889defc1e01202ad0306a76a6ddc64206280611dc0f83517929e64545bd9eeba4893ecab21193071155284894fd6eb91b7b2bf2250f37a7c48be4a8462c247f26ce6706ca5f03de8277d41b3f4bd27c9bd7e1088fff4128") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x100000001, @mcast1={0xff, 0x1, [], 0x1}, 0xf7eb}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xfffffffffffff5b2}}, {{0xa, 0x4e20, 0xfffffffffffffffe, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x210) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x4b) 2033/05/18 03:45:25 executing program 3 (fault-call:3 fault-nth:20): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xaf2d0000]}, 0x10) [ 831.715625] FAULT_INJECTION: forcing a failure. [ 831.715625] name failslab, interval 1, probability 0, space 0, times 0 [ 831.726967] CPU: 0 PID: 24530 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 831.734246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.743613] Call Trace: [ 831.746220] dump_stack+0x1b9/0x294 [ 831.749872] ? dump_stack_print_info.cold.2+0x52/0x52 [ 831.755109] should_fail.cold.4+0xa/0x1a [ 831.759186] ? __kmalloc_track_caller+0x14a/0x760 [ 831.764043] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 831.769153] ? device_create_groups_vargs+0x1ff/0x270 [ 831.774331] ? device_create+0xd3/0x100 [ 831.778301] ? mac80211_hwsim_new_radio+0x3c6/0x3410 [ 831.783399] ? hwsim_new_radio_nl+0x7b8/0xa60 [ 831.787886] ? genl_family_rcv_msg+0x889/0x1120 [ 831.792541] ? genl_rcv_msg+0xc6/0x170 [ 831.796420] ? netlink_rcv_skb+0x172/0x440 [ 831.800656] ? graph_lock+0x170/0x170 [ 831.804445] ? ___sys_sendmsg+0x805/0x940 [ 831.808576] ? __sys_sendmsg+0x115/0x270 [ 831.812635] ? __x64_sys_sendmsg+0x78/0xb0 [ 831.816863] ? do_syscall_64+0x1b1/0x800 [ 831.820914] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.826275] ? find_held_lock+0x36/0x1c0 [ 831.830329] ? __lock_is_held+0xb5/0x140 [ 831.834397] ? check_same_owner+0x320/0x320 [ 831.838716] ? rcu_note_context_switch+0x710/0x710 [ 831.843634] ? rcu_read_lock_sched_held+0x108/0x120 [ 831.848652] __should_failslab+0x124/0x180 [ 831.852886] should_failslab+0x9/0x14 [ 831.856698] kmem_cache_alloc+0x2af/0x760 [ 831.860839] ? memcpy+0x45/0x50 [ 831.864107] ? kstrdup+0x59/0x70 [ 831.867479] __kernfs_new_node+0xe7/0x580 [ 831.871617] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 831.876365] ? lock_downgrade+0x8e0/0x8e0 [ 831.880508] ? kasan_check_read+0x11/0x20 [ 831.884645] ? do_raw_spin_unlock+0x9e/0x2e0 [ 831.889054] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 831.893627] kernfs_new_node+0x80/0xf0 [ 831.897503] kernfs_create_link+0x33/0x180 [ 831.901730] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 831.906997] sysfs_create_link+0x65/0xc0 [ 831.911055] device_add+0x7a0/0x16d0 [ 831.914764] ? device_private_init+0x230/0x230 [ 831.919360] ? kfree+0x1e9/0x260 [ 831.922717] ? kfree_const+0x5e/0x70 [ 831.926423] device_create_groups_vargs+0x1ff/0x270 [ 831.931426] device_create+0xd3/0x100 [ 831.935213] ? device_create_vargs+0x60/0x60 [ 831.939615] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 831.944702] ? trace_hardirqs_on+0xd/0x10 [ 831.948857] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 831.953772] ? graph_lock+0x170/0x170 [ 831.957569] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 831.963706] ? lock_release+0xa10/0xa10 [ 831.967667] ? check_same_owner+0x320/0x320 [ 831.971978] ? rcu_note_context_switch+0x710/0x710 [ 831.976910] ? __lock_acquire+0x7f5/0x5140 [ 831.981134] ? __might_sleep+0x95/0x190 [ 831.985099] ? kasan_check_write+0x14/0x20 [ 831.989322] ? __mutex_lock+0x7d9/0x17f0 [ 831.993375] ? genl_rcv_msg+0x13a/0x170 [ 831.997338] ? __lock_acquire+0x7f5/0x5140 [ 832.001560] ? mutex_trylock+0x2a0/0x2a0 [ 832.005615] ? perf_trace_lock+0xd6/0x900 [ 832.009747] ? graph_lock+0x170/0x170 [ 832.013538] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 832.018716] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 832.023726] ? validate_nla+0x2d9/0x7b0 [ 832.027690] hwsim_new_radio_nl+0x7b8/0xa60 [ 832.032001] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 832.037191] ? __netlink_ns_capable+0x100/0x130 [ 832.041861] genl_family_rcv_msg+0x889/0x1120 [ 832.046370] ? genl_rcv+0x40/0x40 [ 832.049809] ? lock_downgrade+0x8e0/0x8e0 [ 832.053944] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 832.058955] ? lock_acquire+0x1dc/0x520 [ 832.062927] ? genl_rcv+0x19/0x40 [ 832.066381] genl_rcv_msg+0xc6/0x170 [ 832.070094] netlink_rcv_skb+0x172/0x440 [ 832.074152] ? genl_family_rcv_msg+0x1120/0x1120 [ 832.078902] ? netlink_ack+0xbc0/0xbc0 [ 832.082786] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 832.087965] ? netlink_skb_destructor+0x210/0x210 [ 832.092801] genl_rcv+0x28/0x40 [ 832.096067] netlink_unicast+0x58b/0x740 [ 832.100121] ? netlink_attachskb+0x970/0x970 [ 832.104516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 832.110043] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 832.115051] ? security_netlink_send+0x88/0xb0 [ 832.119631] netlink_sendmsg+0x9f0/0xfa0 [ 832.123689] ? netlink_unicast+0x740/0x740 [ 832.127914] ? security_socket_sendmsg+0x94/0xc0 [ 832.132658] ? netlink_unicast+0x740/0x740 [ 832.136883] sock_sendmsg+0xd5/0x120 [ 832.140586] ___sys_sendmsg+0x805/0x940 [ 832.144556] ? copy_msghdr_from_user+0x560/0x560 [ 832.149306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 832.154841] ? proc_fail_nth_write+0x96/0x1f0 [ 832.159328] ? __fget_light+0x2ef/0x430 [ 832.163300] ? fget_raw+0x20/0x20 [ 832.166850] ? find_held_lock+0x36/0x1c0 [ 832.170903] ? kasan_check_write+0x14/0x20 [ 832.175132] ? wait_for_completion+0x870/0x870 [ 832.179721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 832.185250] ? sockfd_lookup_light+0xc5/0x160 [ 832.189733] __sys_sendmsg+0x115/0x270 [ 832.193694] ? __ia32_sys_shutdown+0x80/0x80 [ 832.198089] ? __sb_end_write+0xac/0xe0 [ 832.202053] ? fput+0x130/0x1a0 [ 832.205322] ? ksys_write+0x1a6/0x250 [ 832.209122] __x64_sys_sendmsg+0x78/0xb0 [ 832.213185] do_syscall_64+0x1b1/0x800 [ 832.217058] ? finish_task_switch+0x1ca/0x840 [ 832.221541] ? syscall_return_slowpath+0x5c0/0x5c0 [ 832.226460] ? syscall_return_slowpath+0x30f/0x5c0 [ 832.231395] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 832.236753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 832.241591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 832.246765] RIP: 0033:0x455a09 [ 832.249939] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.257637] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 832.264891] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 832.272144] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 832.279401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 832.286666] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000014 [ 832.299658] binder: 24532:24534 unknown command 859503465 [ 832.321119] binder: 24532:24534 ioctl c0306201 20007000 returned -22 [ 832.344662] binder: 24532:24534 ioctl c0306201 20000240 returned -11 [ 832.364397] binder: 24532:24534 unknown command 859503465 [ 832.378237] binder: 24532:24534 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:26 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x100000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:26 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8000, @ipv4={[], [0xff, 0xff], @rand_addr=0x7ff}}, @in={0x2, 0x4e22, @loopback=0x7f000001}], 0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4fa10000]}, 0x10) 2033/05/18 03:45:26 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) r2 = dup(r0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100)) write(r1, &(0x7f0000000140)="915988b96037d3dde0108518fdde3d186f185fa897d748bb690320ad1d319884231851a8", 0x24) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:26 executing program 3 (fault-call:3 fault-nth:21): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 832.710010] binder: 24567:24569 unknown command 4743953 [ 832.710942] FAULT_INJECTION: forcing a failure. [ 832.710942] name failslab, interval 1, probability 0, space 0, times 0 [ 832.726794] CPU: 1 PID: 24570 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 832.734070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.743425] Call Trace: [ 832.746031] dump_stack+0x1b9/0x294 [ 832.749683] ? dump_stack_print_info.cold.2+0x52/0x52 [ 832.754988] ? rcu_note_context_switch+0x710/0x710 [ 832.760056] should_fail.cold.4+0xa/0x1a [ 832.760465] binder: 24567:24569 ioctl c0306201 20007000 returned -22 [ 832.764123] ? kasan_check_write+0x14/0x20 [ 832.764144] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 832.764167] ? zap_class+0x720/0x720 [ 832.764184] ? graph_lock+0x170/0x170 [ 832.779053] binder: 24556:24557 transaction failed 29189/-22, size 0-0 line 2856 [ 832.780004] ? ___ratelimit.cold.2+0x6a/0x6a [ 832.780022] ? __mutex_lock+0x7d9/0x17f0 [ 832.780044] ? find_held_lock+0x36/0x1c0 2033/05/18 03:45:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 832.807543] ? __lock_is_held+0xb5/0x140 [ 832.811629] ? check_same_owner+0x320/0x320 [ 832.815965] ? rcu_note_context_switch+0x710/0x710 [ 832.820578] binder: 24556:24583 transaction failed 29189/-22, size 0-0 line 2856 [ 832.820895] ? lock_downgrade+0x8e0/0x8e0 [ 832.820913] __should_failslab+0x124/0x180 [ 832.820934] should_failslab+0x9/0x14 [ 832.840649] kmem_cache_alloc+0x2af/0x760 [ 832.845006] ? wait_for_completion+0x870/0x870 [ 832.849604] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 832.854631] __kernfs_new_node+0xe7/0x580 [ 832.858794] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 832.863558] ? __lock_is_held+0xb5/0x140 [ 832.867625] ? wait_for_completion+0x870/0x870 [ 832.872243] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 832.874736] binder: undelivered TRANSACTION_ERROR: 29189 [ 832.877890] ? kernfs_put+0x493/0x750 [ 832.877909] kernfs_new_node+0x80/0xf0 [ 832.877927] kernfs_create_dir_ns+0x3d/0x140 [ 832.877947] internal_create_group+0x110/0x970 [ 832.877974] sysfs_create_group+0x1f/0x30 [ 832.904311] dpm_sysfs_add+0x26/0x210 [ 832.908125] device_add+0xa11/0x16d0 [ 832.911856] ? device_private_init+0x230/0x230 [ 832.916444] ? kfree+0x1e9/0x260 [ 832.919819] ? kfree_const+0x5e/0x70 [ 832.923550] device_create_groups_vargs+0x1ff/0x270 [ 832.928575] device_create+0xd3/0x100 [ 832.932385] ? device_create_vargs+0x60/0x60 [ 832.936809] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 832.942046] ? trace_hardirqs_on+0xd/0x10 [ 832.946207] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 832.951150] ? graph_lock+0x170/0x170 [ 832.954977] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 832.961140] ? lock_release+0xa10/0xa10 [ 832.965122] ? check_same_owner+0x320/0x320 [ 832.969463] ? rcu_note_context_switch+0x710/0x710 [ 832.974401] ? __lock_acquire+0x7f5/0x5140 [ 832.978646] ? __might_sleep+0x95/0x190 [ 832.982631] ? kasan_check_write+0x14/0x20 [ 832.986873] ? __mutex_lock+0x7d9/0x17f0 [ 832.990942] ? genl_rcv_msg+0x13a/0x170 [ 832.994928] ? __lock_acquire+0x7f5/0x5140 [ 832.999170] ? mutex_trylock+0x2a0/0x2a0 [ 833.003232] ? perf_trace_lock+0xd6/0x900 [ 833.007389] ? graph_lock+0x170/0x170 [ 833.011286] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 833.016494] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 833.021513] ? validate_nla+0x2d9/0x7b0 [ 833.025496] hwsim_new_radio_nl+0x7b8/0xa60 [ 833.029922] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 833.035129] ? __netlink_ns_capable+0x100/0x130 [ 833.039819] genl_family_rcv_msg+0x889/0x1120 [ 833.044343] ? genl_rcv+0x40/0x40 [ 833.047806] ? lock_downgrade+0x8e0/0x8e0 [ 833.051961] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 833.057004] ? lock_acquire+0x1dc/0x520 [ 833.060986] ? genl_rcv+0x19/0x40 [ 833.064462] genl_rcv_msg+0xc6/0x170 [ 833.068185] netlink_rcv_skb+0x172/0x440 [ 833.072254] ? genl_family_rcv_msg+0x1120/0x1120 [ 833.077121] ? netlink_ack+0xbc0/0xbc0 [ 833.081016] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 833.086215] ? netlink_skb_destructor+0x210/0x210 [ 833.091072] genl_rcv+0x28/0x40 [ 833.094344] netlink_unicast+0x58b/0x740 [ 833.098402] ? netlink_attachskb+0x970/0x970 [ 833.102802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 833.108329] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 833.113337] ? security_netlink_send+0x88/0xb0 [ 833.117912] netlink_sendmsg+0x9f0/0xfa0 [ 833.121969] ? netlink_unicast+0x740/0x740 [ 833.126197] ? security_socket_sendmsg+0x94/0xc0 [ 833.130939] ? netlink_unicast+0x740/0x740 [ 833.135167] sock_sendmsg+0xd5/0x120 [ 833.138871] ___sys_sendmsg+0x805/0x940 [ 833.142838] ? copy_msghdr_from_user+0x560/0x560 [ 833.147593] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.153116] ? proc_fail_nth_write+0x96/0x1f0 [ 833.157613] ? __fget_light+0x2ef/0x430 [ 833.161575] ? fget_raw+0x20/0x20 [ 833.165018] ? find_held_lock+0x36/0x1c0 [ 833.169073] ? kasan_check_write+0x14/0x20 [ 833.173299] ? wait_for_completion+0x870/0x870 [ 833.177879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.183406] ? sockfd_lookup_light+0xc5/0x160 [ 833.187890] __sys_sendmsg+0x115/0x270 [ 833.191765] ? __ia32_sys_shutdown+0x80/0x80 [ 833.196160] ? __sb_end_write+0xac/0xe0 [ 833.200123] ? fput+0x130/0x1a0 [ 833.203389] ? ksys_write+0x1a6/0x250 [ 833.207183] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 833.212025] __x64_sys_sendmsg+0x78/0xb0 [ 833.216075] do_syscall_64+0x1b1/0x800 [ 833.219949] ? finish_task_switch+0x1ca/0x840 [ 833.224432] ? syscall_return_slowpath+0x5c0/0x5c0 [ 833.229437] ? syscall_return_slowpath+0x30f/0x5c0 [ 833.234366] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 833.239722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 833.244560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.249735] RIP: 0033:0x455a09 [ 833.252908] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.260604] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 833.267859] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 833.275111] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 833.282376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 833.289632] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000015 2033/05/18 03:45:27 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6fb80000]}, 0x10) 2033/05/18 03:45:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/149, 0x95) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x2) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x47, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x9, 0xfd}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="01fed700b660a87c909c148ddb55e2380cd7d55ba9d55355997fb2823fc2d364b3646d9cb99583ad8cded801260d096c7d867fa884d17bedcffa85cbc775799544380808970a484d71f9588e3ca761443ee4bbcdf34d568a957237d76e70827e7a63632bd2b9eb4a824f9ded84f34d73f7676671f3e63220903ea3d42464500e0d9c437d7ab0911b52ec54e22a08ca20ed4c83be9911a1832df60376df7a92cb11bcbe057685fb4c21225974167b93bd3408000b6cc99e54cae66fbf32029b7375cc4064bb1673d2423998be6b3429e2c57442e8ca6cef127b071f"], 0xdf) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:27 executing program 3 (fault-call:3 fault-nth:22): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x200000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:27 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 833.710290] binder: 24606:24616 unknown command 4743953 [ 833.711316] FAULT_INJECTION: forcing a failure. [ 833.711316] name failslab, interval 1, probability 0, space 0, times 0 [ 833.720683] binder: 24603:24611 transaction failed 29189/-22, size 0-0 line 2856 [ 833.727119] CPU: 1 PID: 24615 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 833.727130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.727141] Call Trace: [ 833.753871] dump_stack+0x1b9/0x294 [ 833.754215] binder: 24606:24616 ioctl c0306201 20007000 returned -22 [ 833.757617] ? dump_stack_print_info.cold.2+0x52/0x52 [ 833.757645] should_fail.cold.4+0xa/0x1a [ 833.757666] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 833.778477] ? lock_release+0xa10/0xa10 [ 833.782461] ? graph_lock+0x170/0x170 [ 833.786269] ? rcu_note_context_switch+0x710/0x710 [ 833.791209] ? find_held_lock+0x36/0x1c0 [ 833.793651] binder: 24603:24611 transaction failed 29189/-22, size 0-0 line 2856 [ 833.795280] ? find_held_lock+0x36/0x1c0 [ 833.795302] ? __lock_is_held+0xb5/0x140 [ 833.795330] ? check_same_owner+0x320/0x320 [ 833.815258] ? rcu_note_context_switch+0x710/0x710 [ 833.820199] __should_failslab+0x124/0x180 [ 833.824448] should_failslab+0x9/0x14 [ 833.828259] kmem_cache_alloc+0x2af/0x760 [ 833.832416] ? kasan_check_write+0x14/0x20 [ 833.836660] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 833.841689] __kernfs_new_node+0xe7/0x580 [ 833.845844] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 833.850615] ? kasan_check_write+0x14/0x20 [ 833.854858] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 833.859793] ? graph_lock+0x170/0x170 [ 833.863610] ? wait_for_completion+0x870/0x870 [ 833.868202] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 833.873747] kernfs_new_node+0x80/0xf0 [ 833.877647] __kernfs_create_file+0x4d/0x330 [ 833.882068] sysfs_add_file_mode_ns+0x21a/0x560 [ 833.883289] binder: undelivered TRANSACTION_ERROR: 29189 [ 833.886742] sysfs_add_file+0x4e/0x60 [ 833.886762] sysfs_merge_group+0xfa/0x230 [ 833.886786] dpm_sysfs_add+0x161/0x210 [ 833.886804] device_add+0xa11/0x16d0 [ 833.886825] ? device_private_init+0x230/0x230 [ 833.886842] ? kfree+0x1e9/0x260 [ 833.915706] ? kfree_const+0x5e/0x70 [ 833.919437] device_create_groups_vargs+0x1ff/0x270 [ 833.924466] device_create+0xd3/0x100 [ 833.928274] ? device_create_vargs+0x60/0x60 [ 833.932699] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 833.937810] ? trace_hardirqs_on+0xd/0x10 [ 833.941973] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 833.946911] ? graph_lock+0x170/0x170 [ 833.950720] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 833.956864] ? lock_release+0xa10/0xa10 [ 833.960829] ? check_same_owner+0x320/0x320 [ 833.965142] ? rcu_note_context_switch+0x710/0x710 [ 833.970067] ? __lock_acquire+0x7f5/0x5140 [ 833.974299] ? __might_sleep+0x95/0x190 [ 833.978265] ? kasan_check_write+0x14/0x20 [ 833.982490] ? __mutex_lock+0x7d9/0x17f0 [ 833.986545] ? genl_rcv_msg+0x13a/0x170 [ 833.990515] ? __lock_acquire+0x7f5/0x5140 [ 833.994739] ? mutex_trylock+0x2a0/0x2a0 [ 833.998788] ? perf_trace_lock+0xd6/0x900 [ 834.002921] ? graph_lock+0x170/0x170 [ 834.006714] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 834.011893] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 834.016898] ? validate_nla+0x2d9/0x7b0 [ 834.020866] hwsim_new_radio_nl+0x7b8/0xa60 [ 834.025174] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 834.030356] ? __netlink_ns_capable+0x100/0x130 [ 834.035026] genl_family_rcv_msg+0x889/0x1120 [ 834.039530] ? genl_rcv+0x40/0x40 [ 834.042971] ? lock_downgrade+0x8e0/0x8e0 [ 834.047110] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 834.052123] ? lock_acquire+0x1dc/0x520 [ 834.056099] ? genl_rcv+0x19/0x40 [ 834.059554] genl_rcv_msg+0xc6/0x170 [ 834.063278] netlink_rcv_skb+0x172/0x440 [ 834.067335] ? genl_family_rcv_msg+0x1120/0x1120 [ 834.072079] ? netlink_ack+0xbc0/0xbc0 [ 834.075952] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 834.081132] ? netlink_skb_destructor+0x210/0x210 [ 834.085970] genl_rcv+0x28/0x40 [ 834.089238] netlink_unicast+0x58b/0x740 [ 834.093300] ? netlink_attachskb+0x970/0x970 [ 834.097706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 834.103231] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 834.108236] ? security_netlink_send+0x88/0xb0 [ 834.112808] netlink_sendmsg+0x9f0/0xfa0 [ 834.116862] ? netlink_unicast+0x740/0x740 [ 834.121100] ? security_socket_sendmsg+0x94/0xc0 [ 834.125840] ? netlink_unicast+0x740/0x740 [ 834.130064] sock_sendmsg+0xd5/0x120 [ 834.133771] ___sys_sendmsg+0x805/0x940 [ 834.137740] ? copy_msghdr_from_user+0x560/0x560 [ 834.142493] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 834.148022] ? proc_fail_nth_write+0x96/0x1f0 [ 834.152516] ? __fget_light+0x2ef/0x430 [ 834.156483] ? fget_raw+0x20/0x20 [ 834.159931] ? find_held_lock+0x36/0x1c0 [ 834.163992] ? kasan_check_write+0x14/0x20 [ 834.168223] ? wait_for_completion+0x870/0x870 [ 834.172804] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.178329] ? sockfd_lookup_light+0xc5/0x160 [ 834.182821] __sys_sendmsg+0x115/0x270 [ 834.186696] ? __ia32_sys_shutdown+0x80/0x80 [ 834.191091] ? __sb_end_write+0xac/0xe0 [ 834.195059] ? fput+0x130/0x1a0 [ 834.198325] ? ksys_write+0x1a6/0x250 [ 834.202129] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 834.206966] __x64_sys_sendmsg+0x78/0xb0 [ 834.211021] do_syscall_64+0x1b1/0x800 [ 834.214900] ? finish_task_switch+0x1ca/0x840 [ 834.219383] ? syscall_return_slowpath+0x5c0/0x5c0 [ 834.224308] ? syscall_return_slowpath+0x30f/0x5c0 [ 834.230712] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 834.236073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 834.240908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 834.246095] RIP: 0033:0x455a09 [ 834.249267] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2033/05/18 03:45:27 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="58863e7a"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x8, 0x0, &(0x7f0000000180)="b3"}) getpeername(r0, &(0x7f0000000280)=@ipx, &(0x7f0000000100)=0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSBRK(r0, 0x5427) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r3, r4, 0x353}) 2033/05/18 03:45:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x11000000]}, 0x10) [ 834.257053] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 834.264306] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 834.271575] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 834.278839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 834.286095] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000016 2033/05/18 03:45:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4]}, 0x10) 2033/05/18 03:45:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 834.333339] binder: 24630:24633 unknown command 2050917976 [ 834.357268] binder: 24630:24633 ioctl c0306201 20007000 returned -22 [ 834.385930] binder: 24630:24633 ioctl c0306201 20000140 returned -11 [ 834.423276] binder: 24630:24633 unknown command 2050917976 [ 834.437566] binder: 24630:24633 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa00000000000000]}, 0x10) 2033/05/18 03:45:28 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)="3630c4cd9b47f98adadc1b8f3797def0f0db7a3043b7f03d7eefb887ff47f27ed93166e7111982b0cfbfdde6364c87814a3d540bb3c57369eef8a825c2120adbe82e88b8d08b49156f5d52c20e492ae4d78434408d7e8f9e0156f6bb615508b2fce456338035cfbae3c1323f76f42155fe600def84070006f22e54eca274ed0c5d2358f429248f3bd0cc2e5afd7e5c961633203f807ebf3412fb3b96e791491ddf39126216bfe198c1423d9814ef52c91ebc96891ea5", 0xb6, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0x81, @loopback={0x0, 0x1}, 0x5}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) close(r0) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000001c0)={0x47, 0x3, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000280)=0x106000) 2033/05/18 03:45:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffff7f, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:28 executing program 0: r0 = socket$kcm(0x29, 0x200000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f077a6c4c61345a") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:28 executing program 3 (fault-call:3 fault-nth:23): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:28 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 834.870522] binder: 24669:24670 transaction failed 29189/-22, size 0-0 line 2856 [ 834.878238] FAULT_INJECTION: forcing a failure. [ 834.878238] name failslab, interval 1, probability 0, space 0, times 0 [ 834.889524] CPU: 1 PID: 24677 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 834.896800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.906157] Call Trace: [ 834.908086] binder: 24669:24670 transaction failed 29189/-22, size 0-0 line 2856 [ 834.908754] dump_stack+0x1b9/0x294 [ 834.908776] ? dump_stack_print_info.cold.2+0x52/0x52 [ 834.925090] ? __mutex_lock+0x7d9/0x17f0 [ 834.929164] should_fail.cold.4+0xa/0x1a [ 834.933234] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 834.938349] ? kasan_kmalloc+0xc4/0xe0 [ 834.942251] ? graph_lock+0x170/0x170 [ 834.946063] ? find_held_lock+0x36/0x1c0 [ 834.950169] ? __lock_is_held+0xb5/0x140 [ 834.954240] ? check_same_owner+0x320/0x320 [ 834.958555] ? kasan_check_write+0x14/0x20 [ 834.962787] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 834.967715] ? rcu_note_context_switch+0x710/0x710 [ 834.972641] __should_failslab+0x124/0x180 [ 834.977130] should_failslab+0x9/0x14 [ 834.980932] kmem_cache_alloc+0x2af/0x760 [ 834.985070] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 834.989996] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 834.995010] __kernfs_new_node+0xe7/0x580 [ 834.999164] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 835.003908] ? mutex_unlock+0xd/0x10 [ 835.007618] ? kernfs_activate+0x20e/0x2a0 [ 835.011842] ? kernfs_walk_and_get_ns+0x320/0x320 [ 835.016673] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 835.022196] ? kernfs_link_sibling+0x1d2/0x3b0 [ 835.026772] kernfs_new_node+0x80/0xf0 [ 835.030652] __kernfs_create_file+0x4d/0x330 [ 835.035052] sysfs_add_file_mode_ns+0x21a/0x560 [ 835.039720] sysfs_add_file+0x4e/0x60 [ 835.043511] sysfs_merge_group+0xfa/0x230 [ 835.047660] dpm_sysfs_add+0x161/0x210 [ 835.051537] device_add+0xa11/0x16d0 [ 835.055241] ? device_private_init+0x230/0x230 [ 835.059818] ? kfree+0x1e9/0x260 [ 835.063179] ? kfree_const+0x5e/0x70 [ 835.066884] device_create_groups_vargs+0x1ff/0x270 [ 835.071893] device_create+0xd3/0x100 [ 835.075769] ? device_create_vargs+0x60/0x60 [ 835.080169] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 835.085259] ? trace_hardirqs_on+0xd/0x10 [ 835.089398] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 835.094322] ? graph_lock+0x170/0x170 [ 835.098121] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 835.104265] ? lock_release+0xa10/0xa10 [ 835.108237] ? check_same_owner+0x320/0x320 [ 835.112550] ? rcu_note_context_switch+0x710/0x710 [ 835.117465] ? __lock_acquire+0x7f5/0x5140 [ 835.121694] ? __might_sleep+0x95/0x190 [ 835.125659] ? kasan_check_write+0x14/0x20 [ 835.129882] ? __mutex_lock+0x7d9/0x17f0 [ 835.133941] ? genl_rcv_msg+0x13a/0x170 [ 835.137904] ? __lock_acquire+0x7f5/0x5140 [ 835.142129] ? mutex_trylock+0x2a0/0x2a0 [ 835.146176] ? graph_lock+0x170/0x170 [ 835.149968] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 835.155150] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 835.160157] ? validate_nla+0x2d9/0x7b0 [ 835.164121] hwsim_new_radio_nl+0x7b8/0xa60 [ 835.168434] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 835.173634] ? __netlink_ns_capable+0x100/0x130 [ 835.178305] genl_family_rcv_msg+0x889/0x1120 [ 835.182793] ? genl_rcv+0x40/0x40 [ 835.186236] ? lock_downgrade+0x8e0/0x8e0 [ 835.190458] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 835.195474] ? kasan_check_read+0x11/0x20 [ 835.199613] ? lock_acquire+0x1dc/0x520 [ 835.203572] ? genl_rcv+0x19/0x40 [ 835.207038] genl_rcv_msg+0xc6/0x170 [ 835.210748] netlink_rcv_skb+0x172/0x440 [ 835.214805] ? genl_family_rcv_msg+0x1120/0x1120 [ 835.219550] ? netlink_ack+0xbc0/0xbc0 [ 835.223425] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 835.228603] ? netlink_skb_destructor+0x210/0x210 [ 835.233439] genl_rcv+0x28/0x40 [ 835.236705] netlink_unicast+0x58b/0x740 [ 835.240770] ? netlink_attachskb+0x970/0x970 [ 835.245168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 835.250702] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 835.255716] ? security_netlink_send+0x88/0xb0 [ 835.260298] netlink_sendmsg+0x9f0/0xfa0 [ 835.264368] ? netlink_unicast+0x740/0x740 [ 835.268602] ? security_socket_sendmsg+0x94/0xc0 [ 835.273354] ? netlink_unicast+0x740/0x740 [ 835.277581] sock_sendmsg+0xd5/0x120 [ 835.281372] ___sys_sendmsg+0x805/0x940 [ 835.285341] ? copy_msghdr_from_user+0x560/0x560 [ 835.290093] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 835.295616] ? proc_fail_nth_write+0x96/0x1f0 [ 835.300104] ? __fget_light+0x2ef/0x430 [ 835.304068] ? fget_raw+0x20/0x20 [ 835.307514] ? find_held_lock+0x36/0x1c0 [ 835.311567] ? kasan_check_write+0x14/0x20 [ 835.315794] ? wait_for_completion+0x870/0x870 [ 835.320372] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 835.325894] ? sockfd_lookup_light+0xc5/0x160 [ 835.330380] __sys_sendmsg+0x115/0x270 [ 835.334261] ? __ia32_sys_shutdown+0x80/0x80 [ 835.338669] ? __sb_end_write+0xac/0xe0 [ 835.342719] ? fput+0x130/0x1a0 [ 835.345988] ? ksys_write+0x1a6/0x250 [ 835.349792] __x64_sys_sendmsg+0x78/0xb0 [ 835.353845] do_syscall_64+0x1b1/0x800 [ 835.357718] ? finish_task_switch+0x1ca/0x840 [ 835.362201] ? syscall_return_slowpath+0x5c0/0x5c0 [ 835.367116] ? syscall_return_slowpath+0x30f/0x5c0 [ 835.372043] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 835.377398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 835.382235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 835.387436] RIP: 0033:0x455a09 [ 835.390619] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.398663] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 835.405918] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 835.413173] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:45:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 835.420428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 835.427692] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000017 [ 835.441694] binder: 24675:24676 unknown command 4743953 [ 835.450391] binder: 24675:24676 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:29 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840af4622d53248fb17b474b4087af72b298578e8dcd66c3079f228adcc81f1cf5b7f18e106892946814e4cd05524f999243fbb8dbaf921bdc031ed02721600fa675f2431d62077afe35a16267c4d0780f44667ee1d7c3f373a04f9f136cce38260ccfb83a4dfc75f754d1f47cc44a0016897e6b5a5036cdd93c7a1abdb94f86b879aeccdcc72b40249dd5d9469a23ad085e4f4efa79cf1fe85a4044c2d14ba3bcd3eb23ed3c9eacbb74e38b5"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x10b400) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000140)) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x516, 0x202001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000280)={0x3f, 0x200000000000002, 'client1\x00', 0x0, "3ed3eda25f753a9b", "c3e2b15b226fb000184297ccdf70d2c6585430e072cb0300000000000000d343", 0x20, 0x7f}) 2033/05/18 03:45:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8f16000000000000]}, 0x10) [ 835.471832] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:29 executing program 3 (fault-call:3 fault-nth:24): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 835.543735] binder: 24692:24694 got transaction to invalid handle [ 835.550130] binder: 24692:24694 transaction failed 29201/-22, size -9131565525944428417-2637412991255989326 line 2856 [ 835.563373] FAULT_INJECTION: forcing a failure. [ 835.563373] name failslab, interval 1, probability 0, space 0, times 0 [ 835.574725] CPU: 1 PID: 24698 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 835.582001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.591358] Call Trace: [ 835.593964] dump_stack+0x1b9/0x294 [ 835.597698] ? dump_stack_print_info.cold.2+0x52/0x52 [ 835.602902] ? __mutex_lock+0x7d9/0x17f0 [ 835.606976] ? perf_trace_lock+0xd6/0x900 [ 835.611142] should_fail.cold.4+0xa/0x1a [ 835.611383] binder: 24692:24694 got transaction to invalid handle [ 835.615209] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 835.615236] ? graph_lock+0x170/0x170 [ 835.615261] ? find_held_lock+0x36/0x1c0 [ 835.615282] ? __lock_is_held+0xb5/0x140 [ 835.615306] ? check_same_owner+0x320/0x320 [ 835.621551] binder: 24692:24694 transaction failed 29201/-22, size -9131565525944428417-2637412991255989326 line 2856 [ 835.626617] ? kasan_check_write+0x14/0x20 [ 835.626637] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 835.626657] ? rcu_note_context_switch+0x710/0x710 [ 835.667907] __should_failslab+0x124/0x180 [ 835.672150] should_failslab+0x9/0x14 [ 835.675953] kmem_cache_alloc+0x2af/0x760 [ 835.680105] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 835.685046] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 835.690067] __kernfs_new_node+0xe7/0x580 [ 835.694225] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 835.698986] ? mutex_unlock+0xd/0x10 [ 835.702706] ? kernfs_activate+0x20e/0x2a0 [ 835.703250] binder: undelivered TRANSACTION_ERROR: 29201 [ 835.706944] ? kernfs_walk_and_get_ns+0x320/0x320 [ 835.706966] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 835.706982] ? kernfs_link_sibling+0x1d2/0x3b0 [ 835.707005] kernfs_new_node+0x80/0xf0 [ 835.707026] __kernfs_create_file+0x4d/0x330 [ 835.707046] sysfs_add_file_mode_ns+0x21a/0x560 [ 835.707066] sysfs_add_file+0x4e/0x60 [ 835.744076] sysfs_merge_group+0xfa/0x230 [ 835.748304] dpm_sysfs_add+0x161/0x210 [ 835.752194] device_add+0xa11/0x16d0 [ 835.755906] ? device_private_init+0x230/0x230 [ 835.760476] ? kfree+0x1e9/0x260 [ 835.763832] ? kfree_const+0x5e/0x70 [ 835.767543] device_create_groups_vargs+0x1ff/0x270 [ 835.772546] device_create+0xd3/0x100 [ 835.776334] ? device_create_vargs+0x60/0x60 [ 835.780733] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 835.785823] ? trace_hardirqs_on+0xd/0x10 [ 835.789960] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 835.794873] ? graph_lock+0x170/0x170 [ 835.798667] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 835.804807] ? lock_release+0xa10/0xa10 [ 835.808768] ? check_same_owner+0x320/0x320 [ 835.813079] ? rcu_note_context_switch+0x710/0x710 [ 835.817992] ? __lock_acquire+0x7f5/0x5140 [ 835.822219] ? __might_sleep+0x95/0x190 [ 835.826195] ? kasan_check_write+0x14/0x20 [ 835.830420] ? __mutex_lock+0x7d9/0x17f0 [ 835.834470] ? genl_rcv_msg+0x13a/0x170 [ 835.838459] ? __lock_acquire+0x7f5/0x5140 [ 835.842681] ? mutex_trylock+0x2a0/0x2a0 [ 835.846726] ? perf_trace_lock+0xd6/0x900 [ 835.850955] ? graph_lock+0x170/0x170 [ 835.854747] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 835.859927] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 835.864932] ? validate_nla+0x2d9/0x7b0 [ 835.868902] hwsim_new_radio_nl+0x7b8/0xa60 [ 835.873213] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 835.878393] ? __netlink_ns_capable+0x100/0x130 [ 835.883056] genl_family_rcv_msg+0x889/0x1120 [ 835.887548] ? genl_rcv+0x40/0x40 [ 835.890988] ? lock_downgrade+0x8e0/0x8e0 [ 835.895131] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 835.900138] ? lock_acquire+0x1dc/0x520 [ 835.904116] ? genl_rcv+0x19/0x40 [ 835.907566] genl_rcv_msg+0xc6/0x170 [ 835.911268] netlink_rcv_skb+0x172/0x440 [ 835.915313] ? genl_family_rcv_msg+0x1120/0x1120 [ 835.920053] ? netlink_ack+0xbc0/0xbc0 [ 835.923927] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 835.929105] ? netlink_skb_destructor+0x210/0x210 [ 835.933938] genl_rcv+0x28/0x40 [ 835.937202] netlink_unicast+0x58b/0x740 [ 835.941259] ? netlink_attachskb+0x970/0x970 [ 835.945654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 835.951176] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 835.956186] ? security_netlink_send+0x88/0xb0 [ 835.960758] netlink_sendmsg+0x9f0/0xfa0 [ 835.964817] ? netlink_unicast+0x740/0x740 [ 835.969042] ? security_socket_sendmsg+0x94/0xc0 [ 835.973785] ? netlink_unicast+0x740/0x740 [ 835.978011] sock_sendmsg+0xd5/0x120 [ 835.981724] ___sys_sendmsg+0x805/0x940 [ 835.985687] ? copy_msghdr_from_user+0x560/0x560 [ 835.990435] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 835.995973] ? proc_fail_nth_write+0x96/0x1f0 [ 836.000458] ? __fget_light+0x2ef/0x430 [ 836.004425] ? fget_raw+0x20/0x20 [ 836.007869] ? find_held_lock+0x36/0x1c0 [ 836.011922] ? kasan_check_write+0x14/0x20 [ 836.016148] ? wait_for_completion+0x870/0x870 [ 836.020725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 836.026249] ? sockfd_lookup_light+0xc5/0x160 [ 836.030731] __sys_sendmsg+0x115/0x270 [ 836.034611] ? __ia32_sys_shutdown+0x80/0x80 [ 836.039017] ? __sb_end_write+0xac/0xe0 [ 836.042983] ? fput+0x130/0x1a0 [ 836.046252] ? ksys_write+0x1a6/0x250 [ 836.050049] __x64_sys_sendmsg+0x78/0xb0 [ 836.054109] do_syscall_64+0x1b1/0x800 [ 836.057991] ? finish_task_switch+0x1ca/0x840 [ 836.062474] ? syscall_return_slowpath+0x5c0/0x5c0 [ 836.067406] ? syscall_return_slowpath+0x30f/0x5c0 [ 836.072326] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 836.077675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 836.082515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 836.087687] RIP: 0033:0x455a09 2033/05/18 03:45:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000008000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 836.090862] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.098559] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 836.105819] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 836.114034] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 836.121295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 836.128634] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000018 2033/05/18 03:45:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:30 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:30 executing program 0: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x9, 0x0, &(0x7f0000000040)="6c70b91caab47c76ac1cfbdfe427e6395038574e9038c288bbca1f736685bf5d632398cfe35b88d58cd7e5d5f0e0b4a97ed5df17c7ac636c48c43963515e63ece307bc6dfc38ed17eb9c3131dc4a7be1bdadbb75126ba2d781792f73011aa0e14193c70f126fdf2a2eaeb94158a520ce3c7d2d702e2adbfa2205d726a368d2a9aacacf85a75556f9bbf8b9b326db9758afdc80c9202e99b20b02b340c63e136f44", 0xa1) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x77330000]}, 0x10) 2033/05/18 03:45:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x400180) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x6) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:30 executing program 3 (fault-call:3 fault-nth:25): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x97030000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) [ 836.323287] FAULT_INJECTION: forcing a failure. [ 836.323287] name failslab, interval 1, probability 0, space 0, times 0 [ 836.330329] binder: 24726:24727 transaction failed 29189/-22, size 0-0 line 2856 [ 836.334934] CPU: 0 PID: 24734 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 836.349667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.359023] Call Trace: [ 836.361624] dump_stack+0x1b9/0x294 [ 836.365265] ? dump_stack_print_info.cold.2+0x52/0x52 2033/05/18 03:45:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x37be0000]}, 0x10) 2033/05/18 03:45:30 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 836.370465] ? __mutex_lock+0x7d9/0x17f0 [ 836.374542] should_fail.cold.4+0xa/0x1a [ 836.378612] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 836.379936] binder: undelivered TRANSACTION_ERROR: 29189 [ 836.383718] ? kasan_kmalloc+0xc4/0xe0 [ 836.383741] ? graph_lock+0x170/0x170 [ 836.383763] ? find_held_lock+0x36/0x1c0 [ 836.383783] ? __lock_is_held+0xb5/0x140 [ 836.383807] ? check_same_owner+0x320/0x320 [ 836.383824] ? kasan_check_write+0x14/0x20 [ 836.414973] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 836.419916] ? rcu_note_context_switch+0x710/0x710 [ 836.424973] __should_failslab+0x124/0x180 [ 836.429213] should_failslab+0x9/0x14 [ 836.433022] kmem_cache_alloc+0x2af/0x760 [ 836.437202] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 836.442145] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 836.447175] __kernfs_new_node+0xe7/0x580 [ 836.449793] binder: 24747:24749 transaction failed 29189/-22, size 0-0 line 2856 [ 836.451327] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 836.451348] ? mutex_unlock+0xd/0x10 [ 836.451362] ? kernfs_activate+0x20e/0x2a0 2033/05/18 03:45:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf730000]}, 0x10) 2033/05/18 03:45:30 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 836.451380] ? kernfs_walk_and_get_ns+0x320/0x320 [ 836.451397] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 836.451414] ? kernfs_link_sibling+0x1d2/0x3b0 [ 836.486517] kernfs_new_node+0x80/0xf0 [ 836.490419] __kernfs_create_file+0x4d/0x330 [ 836.494833] sysfs_add_file_mode_ns+0x21a/0x560 [ 836.499514] sysfs_add_file+0x4e/0x60 [ 836.503322] sysfs_merge_group+0xfa/0x230 [ 836.504851] binder: undelivered TRANSACTION_ERROR: 29189 [ 836.507477] dpm_sysfs_add+0x161/0x210 [ 836.507495] device_add+0xa11/0x16d0 [ 836.507516] ? device_private_init+0x230/0x230 [ 836.507531] ? kfree+0x1e9/0x260 [ 836.507550] ? kfree_const+0x5e/0x70 [ 836.507573] device_create_groups_vargs+0x1ff/0x270 [ 836.537202] device_create+0xd3/0x100 [ 836.541031] ? device_create_vargs+0x60/0x60 [ 836.545459] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 836.550575] ? trace_hardirqs_on+0xd/0x10 [ 836.554739] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 836.559678] ? graph_lock+0x170/0x170 [ 836.563489] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 836.564494] binder: 24755:24756 transaction failed 29189/-22, size 0-0 line 2856 [ 836.569640] ? lock_release+0xa10/0xa10 [ 836.569657] ? check_same_owner+0x320/0x320 [ 836.569677] ? rcu_note_context_switch+0x710/0x710 [ 836.569692] ? __lock_acquire+0x7f5/0x5140 [ 836.569710] ? __might_sleep+0x95/0x190 [ 836.569728] ? kasan_check_write+0x14/0x20 [ 836.569748] ? __mutex_lock+0x7d9/0x17f0 [ 836.606926] ? genl_rcv_msg+0x13a/0x170 [ 836.610896] ? __lock_acquire+0x7f5/0x5140 [ 836.615128] ? mutex_trylock+0x2a0/0x2a0 [ 836.619178] ? graph_lock+0x170/0x170 [ 836.622972] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 836.628153] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 836.633163] ? validate_nla+0x2d9/0x7b0 [ 836.637138] hwsim_new_radio_nl+0x7b8/0xa60 [ 836.641450] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 836.646631] ? __netlink_ns_capable+0x100/0x130 [ 836.651300] genl_family_rcv_msg+0x889/0x1120 [ 836.655796] ? genl_rcv+0x40/0x40 [ 836.659235] ? lock_downgrade+0x8e0/0x8e0 [ 836.663370] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 836.668386] ? kasan_check_read+0x11/0x20 [ 836.672525] ? lock_acquire+0x1dc/0x520 [ 836.676489] ? genl_rcv+0x19/0x40 [ 836.679955] genl_rcv_msg+0xc6/0x170 [ 836.683665] netlink_rcv_skb+0x172/0x440 [ 836.687717] ? genl_family_rcv_msg+0x1120/0x1120 [ 836.692465] ? netlink_ack+0xbc0/0xbc0 [ 836.696340] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 836.701519] ? netlink_skb_destructor+0x210/0x210 [ 836.706356] genl_rcv+0x28/0x40 [ 836.709632] netlink_unicast+0x58b/0x740 [ 836.713685] ? netlink_attachskb+0x970/0x970 [ 836.718082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 836.723605] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 836.728613] ? security_netlink_send+0x88/0xb0 [ 836.733186] netlink_sendmsg+0x9f0/0xfa0 [ 836.737243] ? netlink_unicast+0x740/0x740 [ 836.741480] ? security_socket_sendmsg+0x94/0xc0 [ 836.746225] ? netlink_unicast+0x740/0x740 [ 836.750461] sock_sendmsg+0xd5/0x120 [ 836.754177] ___sys_sendmsg+0x805/0x940 [ 836.758151] ? copy_msghdr_from_user+0x560/0x560 [ 836.762942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 836.768469] ? proc_fail_nth_write+0x96/0x1f0 [ 836.772957] ? __fget_light+0x2ef/0x430 [ 836.776922] ? fget_raw+0x20/0x20 [ 836.780369] ? find_held_lock+0x36/0x1c0 [ 836.784432] ? kasan_check_write+0x14/0x20 [ 836.788660] ? wait_for_completion+0x870/0x870 [ 836.793238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 836.798762] ? sockfd_lookup_light+0xc5/0x160 [ 836.803247] __sys_sendmsg+0x115/0x270 [ 836.807124] ? __ia32_sys_shutdown+0x80/0x80 [ 836.811528] ? __sb_end_write+0xac/0xe0 [ 836.815493] ? fput+0x130/0x1a0 [ 836.818770] ? ksys_write+0x1a6/0x250 [ 836.822573] __x64_sys_sendmsg+0x78/0xb0 [ 836.826625] do_syscall_64+0x1b1/0x800 [ 836.830499] ? finish_task_switch+0x1ca/0x840 [ 836.834983] ? syscall_return_slowpath+0x5c0/0x5c0 [ 836.839901] ? syscall_return_slowpath+0x30f/0x5c0 [ 836.844827] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 836.850181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 836.855039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 836.860214] RIP: 0033:0x455a09 [ 836.863397] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.871094] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 836.878349] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 836.885605] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 836.892860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 836.900112] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000019 [ 836.910992] binder: 24735:24736 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8f160000]}, 0x10) 2033/05/18 03:45:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:30 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, &(0x7f0000000180)}) 2033/05/18 03:45:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 836.947883] binder: 24735:24760 transaction failed 29189/-22, size 0-0 line 2856 [ 836.983596] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:30 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/178) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:30 executing program 3 (fault-call:3 fault-nth:26): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 837.030398] binder: undelivered TRANSACTION_ERROR: 29189 [ 837.051653] binder: 24770:24771 transaction failed 29189/-22, size 0-0 line 2856 [ 837.126992] FAULT_INJECTION: forcing a failure. [ 837.126992] name failslab, interval 1, probability 0, space 0, times 0 [ 837.127356] binder: 24779:24782 transaction failed 29189/-22, size 0-0 line 2856 [ 837.138565] CPU: 1 PID: 24780 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 837.153246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.162609] Call Trace: [ 837.165217] dump_stack+0x1b9/0x294 [ 837.168868] ? dump_stack_print_info.cold.2+0x52/0x52 2033/05/18 03:45:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:30 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, &(0x7f0000000180)}) [ 837.174075] ? __mutex_lock+0x7d9/0x17f0 [ 837.178148] ? perf_trace_lock+0xd6/0x900 [ 837.182350] should_fail.cold.4+0xa/0x1a [ 837.186427] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 837.191324] binder: undelivered TRANSACTION_ERROR: 29189 [ 837.191543] ? graph_lock+0x170/0x170 [ 837.191567] ? find_held_lock+0x36/0x1c0 [ 837.204864] ? __lock_is_held+0xb5/0x140 [ 837.208944] ? check_same_owner+0x320/0x320 [ 837.213278] ? kasan_check_write+0x14/0x20 [ 837.217552] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 837.222501] ? rcu_note_context_switch+0x710/0x710 [ 837.227472] __should_failslab+0x124/0x180 [ 837.228163] binder: 24779:24782 transaction failed 29189/-22, size 0-0 line 2856 [ 837.231713] should_failslab+0x9/0x14 [ 837.231730] kmem_cache_alloc+0x2af/0x760 [ 837.231750] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 837.252152] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 837.253820] binder: 24789:24790 transaction failed 29189/-22, size 0-0 line 2856 [ 837.257172] __kernfs_new_node+0xe7/0x580 [ 837.257191] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 837.257210] ? mutex_unlock+0xd/0x10 [ 837.277308] ? kernfs_activate+0x20e/0x2a0 [ 837.281547] ? kernfs_walk_and_get_ns+0x320/0x320 [ 837.286404] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 837.291945] ? kernfs_link_sibling+0x1d2/0x3b0 [ 837.296541] kernfs_new_node+0x80/0xf0 [ 837.300435] __kernfs_create_file+0x4d/0x330 [ 837.304856] sysfs_add_file_mode_ns+0x21a/0x560 [ 837.309538] sysfs_add_file+0x4e/0x60 [ 837.313354] sysfs_merge_group+0xfa/0x230 [ 837.317522] dpm_sysfs_add+0x161/0x210 [ 837.321418] device_add+0xa11/0x16d0 [ 837.325143] ? device_private_init+0x230/0x230 [ 837.329725] ? kfree+0x1e9/0x260 [ 837.332992] binder: undelivered TRANSACTION_ERROR: 29189 [ 837.333094] ? kfree_const+0x5e/0x70 [ 837.333119] device_create_groups_vargs+0x1ff/0x270 [ 837.347304] device_create+0xd3/0x100 [ 837.351131] ? device_create_vargs+0x60/0x60 [ 837.355556] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 837.359502] binder: undelivered TRANSACTION_ERROR: 29189 [ 837.360657] ? trace_hardirqs_on+0xd/0x10 [ 837.360678] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 837.360693] ? graph_lock+0x170/0x170 [ 837.378990] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 837.385147] ? lock_release+0xa10/0xa10 [ 837.389130] ? check_same_owner+0x320/0x320 [ 837.393456] ? rcu_note_context_switch+0x710/0x710 [ 837.398375] ? __lock_acquire+0x7f5/0x5140 [ 837.402613] ? mark_held_locks+0xc9/0x160 [ 837.406750] ? retint_kernel+0x10/0x10 [ 837.410627] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 837.415633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 837.420391] ? retint_kernel+0x10/0x10 [ 837.424278] ? hwsim_new_radio_nl+0x2f1/0xa60 [ 837.428765] hwsim_new_radio_nl+0x7b8/0xa60 [ 837.433077] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 837.438287] ? __netlink_ns_capable+0x100/0x130 [ 837.442959] genl_family_rcv_msg+0x889/0x1120 [ 837.447449] ? genl_rcv+0x40/0x40 [ 837.450889] ? lock_downgrade+0x8e0/0x8e0 [ 837.455032] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 837.460129] ? lock_acquire+0x1dc/0x520 [ 837.464087] ? genl_rcv+0x19/0x40 [ 837.467543] genl_rcv_msg+0xc6/0x170 [ 837.471255] netlink_rcv_skb+0x172/0x440 [ 837.475308] ? genl_family_rcv_msg+0x1120/0x1120 [ 837.480050] ? netlink_ack+0xbc0/0xbc0 [ 837.483931] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 837.489107] ? netlink_skb_destructor+0x210/0x210 [ 837.493945] genl_rcv+0x28/0x40 [ 837.497211] netlink_unicast+0x58b/0x740 [ 837.501265] ? netlink_attachskb+0x970/0x970 [ 837.505666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 837.511199] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 837.516207] ? security_netlink_send+0x88/0xb0 [ 837.520780] netlink_sendmsg+0x9f0/0xfa0 [ 837.524849] ? netlink_unicast+0x740/0x740 [ 837.529075] ? security_socket_sendmsg+0x94/0xc0 [ 837.533815] ? netlink_unicast+0x740/0x740 [ 837.538569] sock_sendmsg+0xd5/0x120 [ 837.542289] ___sys_sendmsg+0x805/0x940 [ 837.546261] ? copy_msghdr_from_user+0x560/0x560 [ 837.551031] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 837.556556] ? proc_fail_nth_write+0x96/0x1f0 [ 837.561042] ? __fget_light+0x2ef/0x430 [ 837.565009] ? fget_raw+0x20/0x20 [ 837.568454] ? find_held_lock+0x36/0x1c0 [ 837.572513] ? kasan_check_write+0x14/0x20 [ 837.576743] ? wait_for_completion+0x870/0x870 [ 837.581322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 837.586849] ? sockfd_lookup_light+0xc5/0x160 [ 837.591332] __sys_sendmsg+0x115/0x270 [ 837.595206] ? __ia32_sys_shutdown+0x80/0x80 [ 837.599605] ? __sb_end_write+0xac/0xe0 [ 837.603573] ? fput+0x130/0x1a0 [ 837.606842] ? ksys_write+0x1a6/0x250 [ 837.610638] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 837.615472] __x64_sys_sendmsg+0x78/0xb0 [ 837.619522] do_syscall_64+0x1b1/0x800 [ 837.623400] ? finish_task_switch+0x1ca/0x840 [ 837.627884] ? syscall_return_slowpath+0x5c0/0x5c0 [ 837.632802] ? syscall_return_slowpath+0x30f/0x5c0 [ 837.637724] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 837.643080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 837.647922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 837.653095] RIP: 0033:0x455a09 [ 837.656268] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.663968] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 837.671231] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 2033/05/18 03:45:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x400) r2 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000001c0)=""/159) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/105) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x4, 0x5, @thr={&(0x7f0000000280)="6004c58ac9e81056afcb0e6f027f62ce6aa4b3769eba310fdb87fe4f1ec1ef5c690a2bbcd1fb276164c5b846b4778f811edbdb7b9bffa3a106845936839da4918d531a62467bc455be3b32429b979e4d3b0a98efac78c348ee36899febdf86ffe558c3e9885c34e04ff28feb62d5e54a069fb8bdfc9dcb1fa9dfad9d43e5132e9473ea19dc51e2d71ff6dbbdd775e7a6d26be9a69738b84144bea110d149b1a400a42ef24f377c5337e5e84f83e72c5bd36ae7156c6f26918b926c9c4ccea450d95a", &(0x7f0000000380)="dd5628c7416ecdc36810b98652a71d3b4978362ce11300f91ab46775b39aa340d1f4c8d443cdc781aecbeb87907e56c8b13da87f5b192d3c2e563668c1de246e76fe35a7e14231678d557c71aa8e8c7d5a543125c60d1ed17e4ba946a6efd8f3041d4acf11317dbab073c9a1584e605f3d07cae14526f8f7bca999e4807ee8caffa3ffaa9334d846d8f88ab0efb0ab0f8c6a0aff258b698c401af335636e2bd7702b38f85ae97220867d28a3de1e6a25ff483dcda2913028005128af69c23542dba2"}}, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:31 executing program 0: r0 = socket$kcm(0x29, 0xfffffffffffffff9, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 837.678503] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 837.685766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 837.693025] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001a 2033/05/18 03:45:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xb8040000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:31 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, &(0x7f0000000180)}) 2033/05/18 03:45:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xdfac]}, 0x10) [ 837.765307] binder: 24799:24801 transaction failed 29189/-22, size 0-0 line 2856 [ 837.799395] binder: 24808:24811 transaction failed 29189/-22, size 0-0 line 2856 [ 837.822725] binder: 24799:24801 transaction failed 29189/-22, size 0-0 line 2856 [ 837.861867] binder: undelivered TRANSACTION_ERROR: 29189 [ 837.914125] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:32 executing program 3 (fault-call:3 fault-nth:27): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:32 executing program 0: r0 = socket$kcm(0x29, 0x4000007, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xa7b20000]}, 0x10) 2033/05/18 03:45:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x9703000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20301, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2d72ee98}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x6, 0x820b, 0xfffffffffffff5c4, 0xf6c, 0x0, 0xfff, 0x8000, r2}, 0x20) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 838.818924] binder: 24837:24838 transaction failed 29189/-22, size 0-0 line 2856 [ 838.832733] FAULT_INJECTION: forcing a failure. [ 838.832733] name failslab, interval 1, probability 0, space 0, times 0 [ 838.844072] CPU: 0 PID: 24842 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 838.851354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.860713] Call Trace: [ 838.863316] dump_stack+0x1b9/0x294 [ 838.866964] ? dump_stack_print_info.cold.2+0x52/0x52 [ 838.872177] should_fail.cold.4+0xa/0x1a [ 838.876259] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 838.881386] ? graph_lock+0x170/0x170 [ 838.885199] ? lock_downgrade+0x8e0/0x8e0 [ 838.889361] ? kasan_check_write+0x14/0x20 [ 838.893609] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 838.898553] ? find_held_lock+0x36/0x1c0 [ 838.902649] ? __lock_is_held+0xb5/0x140 [ 838.906733] ? __vfs_setxattr_noperm+0x220/0x410 [ 838.911516] ? check_same_owner+0x320/0x320 [ 838.915855] ? rcu_note_context_switch+0x710/0x710 [ 838.920795] __should_failslab+0x124/0x180 [ 838.925051] should_failslab+0x9/0x14 [ 838.928866] kmem_cache_alloc_trace+0x2cb/0x780 [ 838.933554] ? device_create_file+0x1e0/0x1e0 [ 838.938046] kobject_uevent_env+0x20f/0xea0 [ 838.942367] ? device_pm_add+0x221/0x340 [ 838.946428] kobject_uevent+0x1f/0x30 [ 838.950215] device_add+0xb01/0x16d0 [ 838.953932] ? device_private_init+0x230/0x230 [ 838.958501] ? kfree+0x1e9/0x260 [ 838.961857] ? kfree_const+0x5e/0x70 [ 838.965565] device_create_groups_vargs+0x1ff/0x270 [ 838.970573] device_create+0xd3/0x100 [ 838.974363] ? device_create_vargs+0x60/0x60 [ 838.978796] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 838.983897] ? trace_hardirqs_on+0xd/0x10 [ 838.988045] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 838.992962] ? graph_lock+0x170/0x170 [ 838.996761] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 839.002906] ? lock_release+0xa10/0xa10 [ 839.006868] ? check_same_owner+0x320/0x320 [ 839.011182] ? rcu_note_context_switch+0x710/0x710 [ 839.016108] ? __lock_acquire+0x7f5/0x5140 [ 839.020332] ? __might_sleep+0x95/0x190 [ 839.024294] ? kasan_check_write+0x14/0x20 [ 839.028519] ? __mutex_lock+0x7d9/0x17f0 [ 839.032571] ? genl_rcv_msg+0x13a/0x170 [ 839.036534] ? __lock_acquire+0x7f5/0x5140 [ 839.040759] ? mutex_trylock+0x2a0/0x2a0 [ 839.044806] ? perf_trace_lock+0xd6/0x900 [ 839.048939] ? graph_lock+0x170/0x170 [ 839.052740] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 839.057921] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 839.062923] ? validate_nla+0x2d9/0x7b0 [ 839.066888] hwsim_new_radio_nl+0x7b8/0xa60 [ 839.071199] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 839.076388] ? __netlink_ns_capable+0x100/0x130 [ 839.081050] genl_family_rcv_msg+0x889/0x1120 [ 839.085539] ? genl_rcv+0x40/0x40 [ 839.088983] ? lock_downgrade+0x8e0/0x8e0 [ 839.093119] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 839.098130] ? lock_acquire+0x1dc/0x520 [ 839.102091] ? genl_rcv+0x19/0x40 [ 839.105545] genl_rcv_msg+0xc6/0x170 [ 839.109251] netlink_rcv_skb+0x172/0x440 [ 839.113300] ? genl_family_rcv_msg+0x1120/0x1120 [ 839.118046] ? netlink_ack+0xbc0/0xbc0 [ 839.121921] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 839.127123] ? netlink_skb_destructor+0x210/0x210 [ 839.131961] genl_rcv+0x28/0x40 [ 839.135235] netlink_unicast+0x58b/0x740 [ 839.139289] ? netlink_attachskb+0x970/0x970 [ 839.143692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 839.150692] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 839.155697] ? security_netlink_send+0x88/0xb0 [ 839.160277] netlink_sendmsg+0x9f0/0xfa0 [ 839.164334] ? netlink_unicast+0x740/0x740 [ 839.168561] ? security_socket_sendmsg+0x94/0xc0 [ 839.173305] ? netlink_unicast+0x740/0x740 [ 839.177528] sock_sendmsg+0xd5/0x120 [ 839.181234] ___sys_sendmsg+0x805/0x940 [ 839.185211] ? copy_msghdr_from_user+0x560/0x560 [ 839.189974] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 839.195498] ? proc_fail_nth_write+0x96/0x1f0 [ 839.199988] ? __fget_light+0x2ef/0x430 [ 839.203952] ? fget_raw+0x20/0x20 [ 839.207397] ? find_held_lock+0x36/0x1c0 [ 839.211884] ? kasan_check_write+0x14/0x20 [ 839.216111] ? wait_for_completion+0x870/0x870 [ 839.220690] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 839.226216] ? sockfd_lookup_light+0xc5/0x160 [ 839.230699] __sys_sendmsg+0x115/0x270 [ 839.234593] ? __ia32_sys_shutdown+0x80/0x80 [ 839.239000] ? __sb_end_write+0xac/0xe0 [ 839.242971] ? fput+0x130/0x1a0 [ 839.246236] ? ksys_write+0x1a6/0x250 [ 839.250040] __x64_sys_sendmsg+0x78/0xb0 [ 839.254090] do_syscall_64+0x1b1/0x800 [ 839.257965] ? finish_task_switch+0x1ca/0x840 [ 839.262448] ? syscall_return_slowpath+0x5c0/0x5c0 [ 839.267365] ? syscall_return_slowpath+0x30f/0x5c0 [ 839.272297] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 839.277655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 839.282491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 839.287665] RIP: 0033:0x455a09 [ 839.292149] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.299845] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 839.307099] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 839.314356] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 839.321616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 839.328869] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001b [ 839.343429] binder: 24837:24838 transaction failed 29189/-22, size 0-0 line 2856 [ 839.390812] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x7000000]}, 0x10) 2033/05/18 03:45:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1ff, 0x1, 0x10001, 0x0, 0x1}, 0xc) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8100) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:33 executing program 3 (fault-call:3 fault-nth:28): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair(0x0, 0x0, 0x7fff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0x6}) r4 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffff7f00000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x5627]}, 0x10) [ 839.825475] binder: 24863:24865 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 839.882777] binder: 24863:24865 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:33 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='qn\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0xe3b9, 0x4) [ 839.953696] FAULT_INJECTION: forcing a failure. [ 839.953696] name failslab, interval 1, probability 0, space 0, times 0 [ 839.960831] binder: undelivered TRANSACTION_ERROR: 29189 [ 839.965008] CPU: 1 PID: 24870 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 839.977705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.987062] Call Trace: [ 839.989671] dump_stack+0x1b9/0x294 [ 839.993312] ? dump_stack_print_info.cold.2+0x52/0x52 [ 839.998511] ? kernel_text_address+0x79/0xf0 [ 840.002932] ? __unwind_start+0x166/0x330 [ 840.007094] should_fail.cold.4+0xa/0x1a [ 840.011164] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 840.016284] ? save_stack+0xa9/0xd0 [ 840.019930] ? graph_lock+0x170/0x170 [ 840.023747] ? kasan_kmalloc+0xc4/0xe0 [ 840.027734] ? kmem_cache_alloc_trace+0x152/0x780 [ 840.032471] binder: 24904:24905 unknown command 28273 [ 840.032599] ? kobject_uevent_env+0x20f/0xea0 [ 840.042285] ? kobject_uevent+0x1f/0x30 [ 840.046268] ? device_add+0xb01/0x16d0 2033/05/18 03:45:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.047869] binder: 24904:24905 ioctl c0306201 20007000 returned -22 [ 840.050157] ? device_create_groups_vargs+0x1ff/0x270 [ 840.050179] ? find_held_lock+0x36/0x1c0 [ 840.050204] ? __lock_is_held+0xb5/0x140 [ 840.069964] ? check_same_owner+0x320/0x320 [ 840.074295] ? rcu_note_context_switch+0x710/0x710 [ 840.079313] __should_failslab+0x124/0x180 [ 840.083556] should_failslab+0x9/0x14 [ 840.087360] __kmalloc+0x2c8/0x760 [ 840.090908] ? kobject_uevent_env+0x20f/0xea0 [ 840.093672] binder: 24904:24905 unknown command 28273 2033/05/18 03:45:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.095407] ? rcu_read_lock_sched_held+0x108/0x120 [ 840.095424] ? kobject_get_path+0xc2/0x1a0 [ 840.095444] kobject_get_path+0xc2/0x1a0 [ 840.095463] kobject_uevent_env+0x234/0xea0 [ 840.118316] ? device_pm_add+0x221/0x340 [ 840.122395] kobject_uevent+0x1f/0x30 [ 840.126207] device_add+0xb01/0x16d0 [ 840.127741] binder: 24904:24905 ioctl c0306201 20007000 returned -22 [ 840.129973] ? device_private_init+0x230/0x230 [ 840.129990] ? kfree+0x1e9/0x260 [ 840.130011] ? kfree_const+0x5e/0x70 [ 840.130031] device_create_groups_vargs+0x1ff/0x270 2033/05/18 03:45:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 840.130065] device_create+0xd3/0x100 [ 840.157147] ? device_create_vargs+0x60/0x60 [ 840.161571] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 840.166681] ? trace_hardirqs_on+0xd/0x10 [ 840.170841] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 840.175784] ? graph_lock+0x170/0x170 [ 840.179602] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 840.185757] ? lock_release+0xa10/0xa10 [ 840.189742] ? check_same_owner+0x320/0x320 [ 840.194083] ? rcu_note_context_switch+0x710/0x710 [ 840.199019] ? __lock_acquire+0x7f5/0x5140 [ 840.203263] ? __might_sleep+0x95/0x190 [ 840.207243] ? kasan_check_write+0x14/0x20 [ 840.211484] ? __mutex_lock+0x7d9/0x17f0 [ 840.215553] ? genl_rcv_msg+0x13a/0x170 [ 840.219534] ? __lock_acquire+0x7f5/0x5140 [ 840.223773] ? mutex_trylock+0x2a0/0x2a0 [ 840.229438] ? perf_trace_lock+0xd6/0x900 [ 840.233592] ? graph_lock+0x170/0x170 [ 840.237405] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 840.242058] binder: 24920:24921 unknown command 0 [ 840.242618] ? __sanitizer_cov_trace_cmp4+0x16/0x20 2033/05/18 03:45:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.242635] ? validate_nla+0x2d9/0x7b0 [ 840.242655] hwsim_new_radio_nl+0x7b8/0xa60 [ 840.242673] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 840.256881] binder: 24920:24921 ioctl c0306201 20007000 returned -22 [ 840.257523] ? __netlink_ns_capable+0x100/0x130 [ 840.257547] genl_family_rcv_msg+0x889/0x1120 [ 840.271966] binder: 24920:24921 ioctl c0306201 20000240 returned -11 [ 840.273636] ? genl_rcv+0x40/0x40 [ 840.273656] ? lock_downgrade+0x8e0/0x8e0 [ 840.273674] ? __sanitizer_cov_trace_cmp4+0x16/0x20 2033/05/18 03:45:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.273696] ? lock_acquire+0x1dc/0x520 [ 840.287408] binder: 24920:24921 unknown command 0 [ 840.289335] ? genl_rcv+0x19/0x40 [ 840.289372] genl_rcv_msg+0xc6/0x170 [ 840.289390] netlink_rcv_skb+0x172/0x440 [ 840.289408] ? genl_family_rcv_msg+0x1120/0x1120 [ 840.299641] binder: 24920:24921 ioctl c0306201 20007000 returned -22 [ 840.301982] ? netlink_ack+0xbc0/0xbc0 [ 840.302002] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 840.302026] ? netlink_skb_destructor+0x210/0x210 [ 840.302050] genl_rcv+0x28/0x40 [ 840.302069] netlink_unicast+0x58b/0x740 [ 840.354468] ? netlink_attachskb+0x970/0x970 [ 840.358894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 840.364451] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 840.369481] ? security_netlink_send+0x88/0xb0 [ 840.374075] netlink_sendmsg+0x9f0/0xfa0 [ 840.378161] ? netlink_unicast+0x740/0x740 [ 840.382408] ? security_socket_sendmsg+0x94/0xc0 [ 840.387177] ? netlink_unicast+0x740/0x740 [ 840.391421] sock_sendmsg+0xd5/0x120 [ 840.395150] ___sys_sendmsg+0x805/0x940 [ 840.399131] ? copy_msghdr_from_user+0x560/0x560 [ 840.403897] ? __schedule+0x809/0x1e30 [ 840.407799] ? __sched_text_start+0x8/0x8 [ 840.411952] ? retint_kernel+0x10/0x10 [ 840.415849] ? __fget_light+0x2ef/0x430 [ 840.419842] ? fget_raw+0x20/0x20 [ 840.423312] ? lock_release+0x512/0xa10 [ 840.427298] ? kasan_check_write+0x14/0x20 [ 840.431552] ? wait_for_completion+0x870/0x870 [ 840.436157] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 840.441701] ? sockfd_lookup_light+0xc5/0x160 [ 840.446208] __sys_sendmsg+0x115/0x270 [ 840.450100] ? __ia32_sys_shutdown+0x80/0x80 [ 840.454514] ? __sb_end_write+0xac/0xe0 [ 840.458509] ? exit_to_usermode_loop+0x87/0x310 [ 840.463196] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 840.468051] __x64_sys_sendmsg+0x78/0xb0 [ 840.472122] do_syscall_64+0x1b1/0x800 [ 840.476024] ? finish_task_switch+0x1ca/0x840 [ 840.480530] ? syscall_return_slowpath+0x5c0/0x5c0 [ 840.485468] ? syscall_return_slowpath+0x30f/0x5c0 [ 840.490408] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 840.495783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 840.500641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 840.505824] RIP: 0033:0x455a09 [ 840.508996] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.516712] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 840.523973] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 840.531249] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 840.538503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 840.545767] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001c 2033/05/18 03:45:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:34 executing program 3 (fault-call:3 fault-nth:29): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x1000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4) 2033/05/18 03:45:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x100, @loopback={0x0, 0x1}, 0x3ff}}, 0x20, 0x1ff, 0x8000, "5c7ef55c2eea49e389ce3153620951245910f74a62e414ca8ffdb78bf87e50cae0333710123fc8204ad7006f4b1d8344ef56fa0d1ff9ae6fae046819edc31bad311d44e074bf1a0eeecfed29aa1e0e0b"}, 0xd8) 2033/05/18 03:45:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x44cf]}, 0x10) 2033/05/18 03:45:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.786911] binder: 24951:24952 transaction failed 29189/-22, size 0-0 line 2856 [ 840.795906] FAULT_INJECTION: forcing a failure. [ 840.795906] name failslab, interval 1, probability 0, space 0, times 0 [ 840.807640] CPU: 1 PID: 24955 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 840.814922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.820727] binder: 24951:24952 transaction failed 29189/-22, size 0-0 line 2856 [ 840.824277] Call Trace: 2033/05/18 03:45:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x4000000]}, 0x10) [ 840.834476] dump_stack+0x1b9/0x294 [ 840.838124] ? dump_stack_print_info.cold.2+0x52/0x52 [ 840.843325] ? kobject_uevent_env+0x62e/0xea0 [ 840.847930] should_fail.cold.4+0xa/0x1a [ 840.852006] ? debug_check_no_locks_freed+0x310/0x310 [ 840.857214] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 840.862337] ? __might_sleep+0x95/0x190 [ 840.866328] ? graph_lock+0x170/0x170 [ 840.870137] ? __mutex_lock+0x7d9/0x17f0 [ 840.874292] ? unwind_get_return_address+0x61/0xa0 [ 840.879233] ? find_held_lock+0x36/0x1c0 [ 840.883307] ? __lock_is_held+0xb5/0x140 2033/05/18 03:45:34 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000c0ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.887396] ? check_same_owner+0x320/0x320 [ 840.891734] ? rcu_note_context_switch+0x710/0x710 [ 840.896495] binder: undelivered TRANSACTION_ERROR: 29189 [ 840.896681] ? put_dec+0xf0/0xf0 [ 840.905464] ? format_decode+0x1a9/0xae0 [ 840.909529] __should_failslab+0x124/0x180 [ 840.913773] should_failslab+0x9/0x14 [ 840.917578] kmem_cache_alloc_node+0x272/0x780 [ 840.922176] __alloc_skb+0x111/0x780 [ 840.925901] ? skb_scrub_packet+0x580/0x580 [ 840.930229] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 840.935441] ? netlink_has_listeners+0x2ff/0x4c0 [ 840.940209] ? netlink_tap_init_net+0x3c0/0x3c0 [ 840.942531] binder: 24965:24967 transaction failed 29189/-22, size 0-0 line 2856 [ 840.944888] kobject_uevent_env+0x801/0xea0 [ 840.944905] ? device_pm_add+0x221/0x340 [ 840.944929] kobject_uevent+0x1f/0x30 [ 840.944943] device_add+0xb01/0x16d0 [ 840.944961] ? device_private_init+0x230/0x230 [ 840.944986] ? kfree+0x1e9/0x260 [ 840.976458] ? kfree_const+0x5e/0x70 [ 840.980187] device_create_groups_vargs+0x1ff/0x270 2033/05/18 03:45:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 840.985211] device_create+0xd3/0x100 [ 840.989030] ? device_create_vargs+0x60/0x60 [ 840.989569] binder: 24965:24972 transaction failed 29189/-22, size 0-0 line 2856 [ 840.993446] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 840.993462] ? trace_hardirqs_on+0xd/0x10 [ 840.993483] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 840.993499] ? graph_lock+0x170/0x170 [ 840.993524] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 840.993541] ? lock_release+0xa10/0xa10 [ 840.993562] ? check_same_owner+0x320/0x320 [ 841.033521] ? rcu_note_context_switch+0x710/0x710 [ 841.038459] ? __lock_acquire+0x7f5/0x5140 [ 841.042703] ? __might_sleep+0x95/0x190 [ 841.046723] ? kasan_check_write+0x14/0x20 [ 841.050974] ? __mutex_lock+0x7d9/0x17f0 [ 841.055040] ? genl_rcv_msg+0x13a/0x170 [ 841.059006] ? __lock_acquire+0x7f5/0x5140 [ 841.063236] ? mutex_trylock+0x2a0/0x2a0 [ 841.067289] ? perf_trace_lock+0xd6/0x900 [ 841.071435] ? graph_lock+0x170/0x170 [ 841.075230] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 841.080412] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 841.085424] ? validate_nla+0x2d9/0x7b0 [ 841.089390] hwsim_new_radio_nl+0x7b8/0xa60 [ 841.093702] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 841.098883] ? __netlink_ns_capable+0x100/0x130 [ 841.103548] genl_family_rcv_msg+0x889/0x1120 [ 841.108044] ? genl_rcv+0x40/0x40 [ 841.111487] ? lock_downgrade+0x8e0/0x8e0 [ 841.115620] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 841.120630] ? lock_acquire+0x1dc/0x520 [ 841.124588] ? genl_rcv+0x19/0x40 [ 841.128051] genl_rcv_msg+0xc6/0x170 [ 841.131756] netlink_rcv_skb+0x172/0x440 [ 841.135807] ? genl_family_rcv_msg+0x1120/0x1120 [ 841.140556] ? netlink_ack+0xbc0/0xbc0 [ 841.144429] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 841.149606] ? netlink_skb_destructor+0x210/0x210 [ 841.154441] genl_rcv+0x28/0x40 [ 841.157709] netlink_unicast+0x58b/0x740 [ 841.161765] ? netlink_attachskb+0x970/0x970 [ 841.166168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 841.171694] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 841.176697] ? security_netlink_send+0x88/0xb0 [ 841.181268] netlink_sendmsg+0x9f0/0xfa0 [ 841.185324] ? netlink_unicast+0x740/0x740 [ 841.189550] ? security_socket_sendmsg+0x94/0xc0 [ 841.194307] ? netlink_unicast+0x740/0x740 [ 841.198546] sock_sendmsg+0xd5/0x120 [ 841.202251] ___sys_sendmsg+0x805/0x940 [ 841.206219] ? copy_msghdr_from_user+0x560/0x560 [ 841.210982] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 841.216517] ? proc_fail_nth_write+0x96/0x1f0 [ 841.221005] ? __fget_light+0x2ef/0x430 [ 841.224988] ? fget_raw+0x20/0x20 [ 841.228429] ? find_held_lock+0x36/0x1c0 [ 841.232485] ? kasan_check_write+0x14/0x20 [ 841.236713] ? wait_for_completion+0x870/0x870 [ 841.241291] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 841.246815] ? sockfd_lookup_light+0xc5/0x160 [ 841.251302] __sys_sendmsg+0x115/0x270 [ 841.255181] ? __ia32_sys_shutdown+0x80/0x80 [ 841.259586] ? __sb_end_write+0xac/0xe0 [ 841.263551] ? fput+0x130/0x1a0 [ 841.266819] ? ksys_write+0x1a6/0x250 [ 841.270620] __x64_sys_sendmsg+0x78/0xb0 [ 841.274672] do_syscall_64+0x1b1/0x800 [ 841.278549] ? finish_task_switch+0x1ca/0x840 [ 841.283040] ? syscall_return_slowpath+0x5c0/0x5c0 [ 841.287959] ? syscall_return_slowpath+0x30f/0x5c0 [ 841.292889] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 841.298246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 841.303089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 841.308262] RIP: 0033:0x455a09 [ 841.311438] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.319137] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 841.326398] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 2033/05/18 03:45:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x8fcf0000]}, 0x10) [ 841.333676] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 841.340938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 841.348195] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001d 2033/05/18 03:45:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:35 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 841.430807] binder: undelivered TRANSACTION_ERROR: 29189 [ 841.493880] binder: 24989:24990 transaction failed 29189/-22, size 0-0 line 2856 [ 841.522902] binder: 24989:24990 transaction failed 29189/-22, size 0-0 line 2856 [ 841.589943] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xf73]}, 0x10) 2033/05/18 03:45:35 executing program 3 (fault-call:3 fault-nth:30): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:35 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r2, 0x3}, @exit_looper={0x630d}, @register_looper={0x630b}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x30, 0x48, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r1}, @flat={0x77622a85, 0xa, r2, 0x2}], &(0x7f0000000040)=[0x78, 0x0, 0x0, 0x78, 0x70, 0x18, 0x68, 0x18, 0x48]}, 0x80000000}}], 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xe000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:35 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80) inotify_rm_watch(r0, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) sendto$inet6(r2, &(0x7f00000001c0)="8f55356dd8f7d579880a70602016b543e41aead7e2e8a7329db790cc1cee22c3e76aef3c373dd647cca42eb913ca61b6e14b7f46419b8a96046b6b9aa1fdb9612c5edc295a73a6fcd99127143d057c14bc5cd3ee1517fb63f4a9a4bb2ba3c88b198bad54f4105fc87ff957f288802a34133646d85c0778507d2f", 0x64, 0x0, &(0x7f0000000100)={0xa, 0x4c20, 0x9, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}, 0x3}, 0x1c) 2033/05/18 03:45:35 executing program 7 (fault-call:4 fault-nth:0): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 841.982089] binder: 25016:25018 transaction failed 29189/-22, size 0-0 line 2856 [ 841.982656] binder: 25015:25020 transaction failed 29189/-22, size 0-0 line 2856 [ 842.002077] FAULT_INJECTION: forcing a failure. [ 842.002077] name failslab, interval 1, probability 0, space 0, times 0 [ 842.013427] CPU: 0 PID: 25014 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 842.020709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.030068] Call Trace: [ 842.032672] dump_stack+0x1b9/0x294 [ 842.036326] ? dump_stack_print_info.cold.2+0x52/0x52 [ 842.041525] ? kobject_uevent_env+0x62e/0xea0 [ 842.046040] should_fail.cold.4+0xa/0x1a [ 842.050114] ? debug_check_no_locks_freed+0x310/0x310 [ 842.055320] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 842.060448] ? __might_sleep+0x95/0x190 [ 842.064456] ? graph_lock+0x170/0x170 [ 842.068264] ? __mutex_lock+0x7d9/0x17f0 [ 842.072341] ? unwind_get_return_address+0x61/0xa0 [ 842.077299] ? find_held_lock+0x36/0x1c0 [ 842.081387] ? __lock_is_held+0xb5/0x140 [ 842.085472] ? check_same_owner+0x320/0x320 [ 842.089917] ? rcu_note_context_switch+0x710/0x710 [ 842.094837] ? put_dec+0xf0/0xf0 [ 842.098237] ? format_decode+0x1a9/0xae0 [ 842.102322] __should_failslab+0x124/0x180 [ 842.106549] should_failslab+0x9/0x14 [ 842.110338] kmem_cache_alloc_node+0x272/0x780 [ 842.114921] __alloc_skb+0x111/0x780 [ 842.118627] ? skb_scrub_packet+0x580/0x580 [ 842.122939] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 842.128126] ? netlink_has_listeners+0x2ff/0x4c0 [ 842.132870] ? netlink_tap_init_net+0x3c0/0x3c0 [ 842.137536] kobject_uevent_env+0x801/0xea0 [ 842.141844] ? device_pm_add+0x221/0x340 [ 842.145916] kobject_uevent+0x1f/0x30 [ 842.149705] device_add+0xb01/0x16d0 [ 842.153497] ? device_private_init+0x230/0x230 [ 842.158067] ? kfree+0x1e9/0x260 [ 842.161425] ? kfree_const+0x5e/0x70 [ 842.165131] device_create_groups_vargs+0x1ff/0x270 [ 842.170141] device_create+0xd3/0x100 [ 842.173931] ? device_create_vargs+0x60/0x60 [ 842.178341] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 842.183450] ? trace_hardirqs_on+0xd/0x10 [ 842.187589] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 842.192507] ? graph_lock+0x170/0x170 [ 842.196326] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 842.202460] ? lock_release+0xa10/0xa10 [ 842.206422] ? check_same_owner+0x320/0x320 [ 842.210744] ? rcu_note_context_switch+0x710/0x710 [ 842.215658] ? __lock_acquire+0x7f5/0x5140 [ 842.219884] ? __might_sleep+0x95/0x190 [ 842.223858] ? kasan_check_write+0x14/0x20 [ 842.228104] ? __mutex_lock+0x7d9/0x17f0 [ 842.232165] ? genl_rcv_msg+0x13a/0x170 [ 842.236134] ? __lock_acquire+0x7f5/0x5140 [ 842.240362] ? mutex_trylock+0x2a0/0x2a0 [ 842.244410] ? perf_trace_lock+0xd6/0x900 [ 842.248545] ? graph_lock+0x170/0x170 [ 842.252345] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 842.257535] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 842.262539] ? validate_nla+0x2d9/0x7b0 [ 842.266515] hwsim_new_radio_nl+0x7b8/0xa60 [ 842.270834] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 842.276022] ? __netlink_ns_capable+0x100/0x130 [ 842.280687] genl_family_rcv_msg+0x889/0x1120 [ 842.285178] ? genl_rcv+0x40/0x40 [ 842.288620] ? lock_downgrade+0x8e0/0x8e0 [ 842.292755] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 842.297764] ? lock_acquire+0x1dc/0x520 [ 842.301724] ? genl_rcv+0x19/0x40 [ 842.305179] genl_rcv_msg+0xc6/0x170 [ 842.308881] netlink_rcv_skb+0x172/0x440 [ 842.312930] ? genl_family_rcv_msg+0x1120/0x1120 [ 842.317672] ? netlink_ack+0xbc0/0xbc0 [ 842.321546] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 842.326722] ? netlink_skb_destructor+0x210/0x210 [ 842.331565] genl_rcv+0x28/0x40 [ 842.334838] netlink_unicast+0x58b/0x740 [ 842.338898] ? netlink_attachskb+0x970/0x970 [ 842.343298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 842.348823] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 842.353833] ? security_netlink_send+0x88/0xb0 [ 842.358404] netlink_sendmsg+0x9f0/0xfa0 [ 842.362460] ? netlink_unicast+0x740/0x740 [ 842.366685] ? security_socket_sendmsg+0x94/0xc0 [ 842.371427] ? netlink_unicast+0x740/0x740 [ 842.375655] sock_sendmsg+0xd5/0x120 [ 842.379364] ___sys_sendmsg+0x805/0x940 [ 842.383331] ? copy_msghdr_from_user+0x560/0x560 [ 842.388089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 842.393613] ? proc_fail_nth_write+0x96/0x1f0 [ 842.399083] ? __fget_light+0x2ef/0x430 [ 842.403046] ? fget_raw+0x20/0x20 [ 842.406488] ? find_held_lock+0x36/0x1c0 [ 842.410559] ? kasan_check_write+0x14/0x20 [ 842.414791] ? wait_for_completion+0x870/0x870 [ 842.419373] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 842.424900] ? sockfd_lookup_light+0xc5/0x160 [ 842.429384] __sys_sendmsg+0x115/0x270 [ 842.433261] ? __ia32_sys_shutdown+0x80/0x80 [ 842.437662] ? __sb_end_write+0xac/0xe0 [ 842.441641] ? fput+0x130/0x1a0 [ 842.444908] ? ksys_write+0x1a6/0x250 [ 842.448708] __x64_sys_sendmsg+0x78/0xb0 [ 842.452778] do_syscall_64+0x1b1/0x800 [ 842.456750] ? finish_task_switch+0x1ca/0x840 [ 842.461254] ? syscall_return_slowpath+0x5c0/0x5c0 [ 842.466174] ? syscall_return_slowpath+0x30f/0x5c0 [ 842.471099] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 842.476456] ? trace_hardirqs_off_thunk+0x1a/0x1c 2033/05/18 03:45:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xf78f]}, 0x10) 2033/05/18 03:45:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 842.481293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.486465] RIP: 0033:0x455a09 [ 842.489640] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.497344] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 842.504599] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 842.511854] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 842.519126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 842.526381] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001e 2033/05/18 03:45:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:36 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 842.541544] binder: 25015:25031 transaction failed 29189/-22, size 0-0 line 2856 [ 842.546639] binder: 25016:25018 ioctl c0306201 20000240 returned -14 2033/05/18 03:45:36 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x6fb8]}, 0x10) 2033/05/18 03:45:36 executing program 3 (fault-call:3 fault-nth:31): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 842.627011] binder: undelivered TRANSACTION_ERROR: 29189 [ 842.657415] binder: 25047:25048 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00?', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 842.710433] binder: 25052:25053 transaction failed 29189/-22, size 0-0 line 2856 [ 842.730195] binder: 25047:25048 ioctl c0306201 20000240 returned -14 [ 842.758478] FAULT_INJECTION: forcing a failure. [ 842.758478] name failslab, interval 1, probability 0, space 0, times 0 [ 842.769805] CPU: 0 PID: 25059 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 842.777090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.786451] Call Trace: [ 842.789051] dump_stack+0x1b9/0x294 [ 842.792693] ? dump_stack_print_info.cold.2+0x52/0x52 [ 842.797892] ? kobject_uevent_env+0x62e/0xea0 [ 842.802398] should_fail.cold.4+0xa/0x1a 2033/05/18 03:45:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x95bf]}, 0x10) [ 842.806466] ? debug_check_no_locks_freed+0x310/0x310 [ 842.811849] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 842.816968] ? __might_sleep+0x95/0x190 [ 842.820953] ? graph_lock+0x170/0x170 [ 842.824764] ? __mutex_lock+0x7d9/0x17f0 [ 842.828834] ? unwind_get_return_address+0x61/0xa0 [ 842.833774] ? find_held_lock+0x36/0x1c0 [ 842.837845] ? __lock_is_held+0xb5/0x140 [ 842.841927] ? check_same_owner+0x320/0x320 [ 842.846269] ? rcu_note_context_switch+0x710/0x710 [ 842.851223] ? put_dec+0xf0/0xf0 [ 842.854598] ? format_decode+0x1a9/0xae0 [ 842.858670] __should_failslab+0x124/0x180 [ 842.862916] should_failslab+0x9/0x14 [ 842.866725] kmem_cache_alloc_node+0x272/0x780 [ 842.871330] __alloc_skb+0x111/0x780 [ 842.875056] ? skb_scrub_packet+0x580/0x580 [ 842.879392] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 842.884689] ? netlink_has_listeners+0x2ff/0x4c0 [ 842.889445] ? netlink_tap_init_net+0x3c0/0x3c0 [ 842.894103] kobject_uevent_env+0x801/0xea0 [ 842.898411] ? device_pm_add+0x221/0x340 [ 842.902477] kobject_uevent+0x1f/0x30 [ 842.906273] device_add+0xb01/0x16d0 [ 842.909978] ? device_private_init+0x230/0x230 [ 842.914554] ? kfree+0x1e9/0x260 [ 842.917907] ? kfree_const+0x5e/0x70 [ 842.921609] device_create_groups_vargs+0x1ff/0x270 [ 842.926623] device_create+0xd3/0x100 [ 842.930419] ? device_create_vargs+0x60/0x60 [ 842.934813] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 842.939899] ? trace_hardirqs_on+0xd/0x10 [ 842.944041] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 842.948968] ? graph_lock+0x170/0x170 [ 842.952758] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 842.958897] ? lock_release+0xa10/0xa10 [ 842.962859] ? check_same_owner+0x320/0x320 [ 842.967177] ? rcu_note_context_switch+0x710/0x710 [ 842.972094] ? __lock_acquire+0x7f5/0x5140 [ 842.976331] ? __might_sleep+0x95/0x190 [ 842.980311] ? kasan_check_write+0x14/0x20 [ 842.984551] ? __mutex_lock+0x7d9/0x17f0 [ 842.988605] ? genl_rcv_msg+0x13a/0x170 [ 842.992571] ? __lock_acquire+0x7f5/0x5140 [ 842.996790] ? mutex_trylock+0x2a0/0x2a0 [ 843.000843] ? graph_lock+0x170/0x170 [ 843.004625] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 843.009813] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.014815] ? validate_nla+0x2d9/0x7b0 [ 843.018780] hwsim_new_radio_nl+0x7b8/0xa60 [ 843.023094] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 843.028293] ? __netlink_ns_capable+0x100/0x130 [ 843.032952] genl_family_rcv_msg+0x889/0x1120 [ 843.037431] ? genl_rcv+0x40/0x40 [ 843.040877] ? lock_downgrade+0x8e0/0x8e0 [ 843.045012] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.050036] ? kasan_check_read+0x11/0x20 [ 843.054176] ? lock_acquire+0x1dc/0x520 [ 843.058150] ? genl_rcv+0x19/0x40 [ 843.061601] genl_rcv_msg+0xc6/0x170 [ 843.065315] netlink_rcv_skb+0x172/0x440 [ 843.069371] ? genl_family_rcv_msg+0x1120/0x1120 [ 843.074111] ? netlink_ack+0xbc0/0xbc0 [ 843.077995] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 843.083201] ? netlink_skb_destructor+0x210/0x210 [ 843.088040] genl_rcv+0x28/0x40 [ 843.091319] netlink_unicast+0x58b/0x740 [ 843.095373] ? netlink_attachskb+0x970/0x970 [ 843.099775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.105310] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.110316] ? security_netlink_send+0x88/0xb0 [ 843.114881] netlink_sendmsg+0x9f0/0xfa0 [ 843.118929] ? netlink_unicast+0x740/0x740 [ 843.123149] ? security_socket_sendmsg+0x94/0xc0 [ 843.127888] ? netlink_unicast+0x740/0x740 [ 843.132114] sock_sendmsg+0xd5/0x120 [ 843.135814] ___sys_sendmsg+0x805/0x940 [ 843.139779] ? copy_msghdr_from_user+0x560/0x560 [ 843.144527] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 843.150049] ? proc_fail_nth_write+0x96/0x1f0 [ 843.154534] ? __fget_light+0x2ef/0x430 [ 843.158505] ? fget_raw+0x20/0x20 [ 843.161943] ? find_held_lock+0x36/0x1c0 [ 843.165991] ? kasan_check_write+0x14/0x20 [ 843.170226] ? wait_for_completion+0x870/0x870 [ 843.174800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 843.181458] ? sockfd_lookup_light+0xc5/0x160 [ 843.185947] __sys_sendmsg+0x115/0x270 [ 843.189837] ? __ia32_sys_shutdown+0x80/0x80 [ 843.194251] ? __sb_end_write+0xac/0xe0 [ 843.198220] ? fput+0x130/0x1a0 [ 843.201480] ? ksys_write+0x1a6/0x250 [ 843.205281] __x64_sys_sendmsg+0x78/0xb0 [ 843.209335] do_syscall_64+0x1b1/0x800 [ 843.213221] ? finish_task_switch+0x1ca/0x840 [ 843.217700] ? syscall_return_slowpath+0x5c0/0x5c0 [ 843.222701] ? syscall_return_slowpath+0x30f/0x5c0 [ 843.227628] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 843.232978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 843.237820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 843.243011] RIP: 0033:0x455a09 [ 843.246188] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.253880] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 843.261133] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 843.268387] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 843.275643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 843.282906] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001f [ 843.299094] binder: 25052:25053 transaction failed 29189/-22, size 0-0 line 2856 [ 843.360693] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:37 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000080", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x77330000]}, 0x10) 2033/05/18 03:45:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x7ee}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x1d97}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0xa77f, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="06f9e17588cb2c39e8b4e2e18c580e", 0xf, 0x9}, {&(0x7f00000000c0)="0b8c865108dc901559bbc4551892ef8e5fec3f0a01e6095b6bf8b73cd07f4688f7ce2b1bb265802e5d50dc54fe9e35b198f0187e8d387a8192b30d60a8603696615cef0a38695efda097a48ff4ed06e0353d4a3a", 0x54, 0x7}], 0x2002000, &(0x7f0000000200)='ppp0vboxnet0/bdev.}^ppp1\x00') 2033/05/18 03:45:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:37 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$bt_hidp(0x1f, 0x3, 0x6) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="028c28e2f63bf8cee6b106aed4de10"], 0x3) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="06000000"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) fsync(r0) 2033/05/18 03:45:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffff9e, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:37 executing program 3 (fault-call:3 fault-nth:32): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 843.540681] FAULT_INJECTION: forcing a failure. [ 843.540681] name failslab, interval 1, probability 0, space 0, times 0 [ 843.552097] CPU: 0 PID: 25098 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 843.559382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.568741] Call Trace: [ 843.571347] dump_stack+0x1b9/0x294 [ 843.574413] binder: 25087:25089 transaction failed 29189/-22, size 0-0 line 2856 [ 843.574986] ? dump_stack_print_info.cold.2+0x52/0x52 [ 843.575006] ? lock_downgrade+0x8e0/0x8e0 [ 843.591871] should_fail.cold.4+0xa/0x1a [ 843.595944] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 843.596416] binder: 25087:25089 transaction failed 29189/-22, size 0-0 line 2856 [ 843.601061] ? graph_lock+0x170/0x170 [ 843.601080] ? kernel_text_address+0x79/0xf0 [ 843.601099] ? __unwind_start+0x166/0x330 [ 843.601119] ? find_held_lock+0x36/0x1c0 [ 843.601138] ? __lock_is_held+0xb5/0x140 [ 843.601157] ? cik_sdma_enable+0x2e0/0x3f0 [ 843.633314] ? check_same_owner+0x320/0x320 2033/05/18 03:45:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 2033/05/18 03:45:37 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 843.637640] ? device_create_groups_vargs+0x1ff/0x270 [ 843.642837] ? device_create+0xd3/0x100 [ 843.646817] ? rcu_note_context_switch+0x710/0x710 [ 843.651470] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.651747] ? netlink_rcv_skb+0x172/0x440 [ 843.651762] ? genl_rcv+0x28/0x40 [ 843.651775] ? netlink_unicast+0x58b/0x740 [ 843.651794] __should_failslab+0x124/0x180 [ 843.657904] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.661476] should_failslab+0x9/0x14 [ 843.661493] kmem_cache_alloc+0x2af/0x760 [ 843.661522] skb_clone+0x1ed/0x4f0 [ 843.661541] ? refcount_add_not_zero+0x250/0x320 [ 843.661558] ? skb_split+0x11d0/0x11d0 [ 843.661576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.661589] ? netlink_trim+0x1b2/0x370 [ 843.661606] ? netlink_skb_destructor+0x210/0x210 [ 843.697406] binder: 25108:25110 transaction failed 29189/-22, size 0-0 line 2856 [ 843.698994] ? cleanup_uevent_env+0x40/0x40 [ 843.699021] netlink_broadcast_filtered+0x1024/0x1580 [ 843.699046] ? __netlink_sendskb+0xd0/0xd0 [ 843.699076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2033/05/18 03:45:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x1fdb0000]}, 0x10) [ 843.699097] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 843.718241] binder: 25108:25110 transaction failed 29189/-22, size 0-0 line 2856 [ 843.720416] ? refcount_add_not_zero+0x320/0x320 [ 843.720448] ? cleanup_uevent_env+0x40/0x40 [ 843.720468] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.720486] kobject_uevent_env+0x6e4/0xea0 [ 843.720505] ? device_pm_add+0x221/0x340 [ 843.774534] kobject_uevent+0x1f/0x30 [ 843.778345] device_add+0xb01/0x16d0 [ 843.782072] ? device_private_init+0x230/0x230 [ 843.786663] ? kfree+0x1e9/0x260 [ 843.790041] ? kfree_const+0x5e/0x70 [ 843.791818] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.793763] device_create_groups_vargs+0x1ff/0x270 [ 843.793783] device_create+0xd3/0x100 [ 843.793801] ? device_create_vargs+0x60/0x60 [ 843.793824] ? mac80211_hwsim_new_radio+0x1a9/0x3410 [ 843.793840] ? trace_hardirqs_on+0xd/0x10 [ 843.793863] mac80211_hwsim_new_radio+0x3c6/0x3410 [ 843.809218] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.812493] ? graph_lock+0x170/0x170 [ 843.812522] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 843.812544] ? lock_release+0xa10/0xa10 [ 843.812563] ? check_same_owner+0x320/0x320 [ 843.812587] ? rcu_note_context_switch+0x710/0x710 [ 843.855266] ? __lock_acquire+0x7f5/0x5140 [ 843.859540] ? __might_sleep+0x95/0x190 [ 843.863523] ? kasan_check_write+0x14/0x20 [ 843.867769] ? __mutex_lock+0x7d9/0x17f0 [ 843.871840] ? genl_rcv_msg+0x13a/0x170 [ 843.875815] ? __lock_acquire+0x7f5/0x5140 [ 843.880042] ? mutex_trylock+0x2a0/0x2a0 [ 843.884094] ? perf_trace_lock+0xd6/0x900 [ 843.888245] ? graph_lock+0x170/0x170 [ 843.892042] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 843.897254] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.902258] ? validate_nla+0x2d9/0x7b0 [ 843.906240] hwsim_new_radio_nl+0x7b8/0xa60 [ 843.910563] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 843.915776] ? __netlink_ns_capable+0x100/0x130 [ 843.920452] genl_family_rcv_msg+0x889/0x1120 [ 843.924946] ? genl_rcv+0x40/0x40 [ 843.928385] ? lock_downgrade+0x8e0/0x8e0 [ 843.932520] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.937719] ? lock_acquire+0x1dc/0x520 [ 843.941687] ? genl_rcv+0x19/0x40 [ 843.945135] genl_rcv_msg+0xc6/0x170 [ 843.948834] netlink_rcv_skb+0x172/0x440 [ 843.952892] ? genl_family_rcv_msg+0x1120/0x1120 [ 843.957636] ? netlink_ack+0xbc0/0xbc0 [ 843.961507] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 843.966695] ? netlink_skb_destructor+0x210/0x210 [ 843.971531] genl_rcv+0x28/0x40 [ 843.974803] netlink_unicast+0x58b/0x740 [ 843.978852] ? netlink_attachskb+0x970/0x970 [ 843.983249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.988780] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 843.993782] ? security_netlink_send+0x88/0xb0 [ 843.998351] netlink_sendmsg+0x9f0/0xfa0 [ 844.002406] ? netlink_unicast+0x740/0x740 [ 844.006629] ? security_socket_sendmsg+0x94/0xc0 [ 844.011369] ? netlink_unicast+0x740/0x740 [ 844.015590] sock_sendmsg+0xd5/0x120 [ 844.019292] ___sys_sendmsg+0x805/0x940 [ 844.023257] ? copy_msghdr_from_user+0x560/0x560 [ 844.028008] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 844.033539] ? proc_fail_nth_write+0x96/0x1f0 [ 844.038031] ? __fget_light+0x2ef/0x430 [ 844.042003] ? fget_raw+0x20/0x20 [ 844.045448] ? find_held_lock+0x36/0x1c0 [ 844.049496] ? kasan_check_write+0x14/0x20 [ 844.053722] ? wait_for_completion+0x870/0x870 [ 844.058293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 844.063824] ? sockfd_lookup_light+0xc5/0x160 [ 844.068312] __sys_sendmsg+0x115/0x270 [ 844.072232] ? __ia32_sys_shutdown+0x80/0x80 [ 844.076647] ? __sb_end_write+0xac/0xe0 [ 844.080614] ? fput+0x130/0x1a0 [ 844.083876] ? ksys_write+0x1a6/0x250 [ 844.087680] __x64_sys_sendmsg+0x78/0xb0 [ 844.091741] do_syscall_64+0x1b1/0x800 [ 844.095632] ? finish_task_switch+0x1ca/0x840 [ 844.100121] ? syscall_return_slowpath+0x5c0/0x5c0 [ 844.105044] ? syscall_return_slowpath+0x30f/0x5c0 [ 844.109973] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 844.115329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 844.120168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 844.125351] RIP: 0033:0x455a09 [ 844.128532] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.136223] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 844.143562] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 844.150846] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 844.158101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 844.165362] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000020 [ 844.175924] binder: 25085:25097 unknown command 6 [ 844.187326] binder: 25085:25097 ioctl c0306201 20007000 returned -22 [ 844.203498] binder: 25085:25097 ioctl c0306201 20000240 returned -11 [ 844.224691] binder: 25085:25122 unknown command 6 [ 844.229680] binder: 25085:25122 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:38 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x879b]}, 0x10) 2033/05/18 03:45:38 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+30000}, 0x10) r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x4b8, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:38 executing program 3 (fault-call:3 fault-nth:33): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:38 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x4e23}], 0x10) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) getdents64(r2, &(0x7f0000000040)=""/144, 0x90) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) [ 844.518773] binder: 25127:25129 transaction failed 29189/-22, size 0-0 line 2856 [ 844.543906] FAULT_INJECTION: forcing a failure. [ 844.543906] name failslab, interval 1, probability 0, space 0, times 0 [ 844.555222] CPU: 0 PID: 25135 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 2033/05/18 03:45:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xffc3]}, 0x10) 2033/05/18 03:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 844.562504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.571866] Call Trace: [ 844.574469] dump_stack+0x1b9/0x294 [ 844.578110] ? dump_stack_print_info.cold.2+0x52/0x52 [ 844.583330] should_fail.cold.4+0xa/0x1a [ 844.587402] ? __kmalloc_track_caller+0x14a/0x760 [ 844.592254] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 844.597371] ? device_bind_driver+0x19/0xd0 [ 844.601702] ? mac80211_hwsim_new_radio+0x451/0x3410 [ 844.606816] ? hwsim_new_radio_nl+0x7b8/0xa60 [ 844.611321] ? genl_family_rcv_msg+0x889/0x1120 [ 844.616000] ? genl_rcv_msg+0xc6/0x170 [ 844.619893] ? netlink_rcv_skb+0x172/0x440 [ 844.624135] ? genl_rcv+0x28/0x40 [ 844.627609] ? graph_lock+0x170/0x170 [ 844.631418] ? __sys_sendmsg+0x115/0x270 [ 844.635485] ? __x64_sys_sendmsg+0x78/0xb0 [ 844.639729] ? do_syscall_64+0x1b1/0x800 [ 844.643796] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 844.649184] ? find_held_lock+0x36/0x1c0 [ 844.653259] ? __lock_is_held+0xb5/0x140 [ 844.657345] ? check_same_owner+0x320/0x320 [ 844.661680] ? rcu_note_context_switch+0x710/0x710 [ 844.666623] ? rcu_read_lock_sched_held+0x108/0x120 [ 844.671655] __should_failslab+0x124/0x180 [ 844.675909] should_failslab+0x9/0x14 [ 844.679728] kmem_cache_alloc+0x2af/0x760 [ 844.683886] ? memcpy+0x45/0x50 [ 844.687178] ? kstrdup+0x59/0x70 [ 844.690560] __kernfs_new_node+0xe7/0x580 [ 844.694721] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 844.699494] ? lock_downgrade+0x8e0/0x8e0 [ 844.703766] ? kasan_check_read+0x11/0x20 [ 844.707931] ? do_raw_spin_unlock+0x9e/0x2e0 [ 844.712355] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 844.716950] kernfs_new_node+0x80/0xf0 [ 844.720847] kernfs_create_link+0x33/0x180 [ 844.725095] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 844.730384] sysfs_create_link+0x65/0xc0 [ 844.734452] driver_sysfs_add+0x107/0x2a0 [ 844.738610] device_bind_driver+0x19/0xd0 [ 844.742766] mac80211_hwsim_new_radio+0x451/0x3410 [ 844.747700] ? graph_lock+0x170/0x170 [ 844.751517] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 844.757667] ? lock_release+0xa10/0xa10 [ 844.761646] ? check_same_owner+0x320/0x320 2033/05/18 03:45:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x73f000000000000]}, 0x10) 2033/05/18 03:45:38 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 844.765977] ? rcu_note_context_switch+0x710/0x710 [ 844.770914] ? __lock_acquire+0x7f5/0x5140 [ 844.775167] ? __might_sleep+0x95/0x190 [ 844.779161] ? kasan_check_write+0x14/0x20 [ 844.783411] ? __mutex_lock+0x7d9/0x17f0 [ 844.787480] ? genl_rcv_msg+0x13a/0x170 [ 844.791473] ? __lock_acquire+0x7f5/0x5140 [ 844.795843] ? mutex_trylock+0x2a0/0x2a0 [ 844.800032] ? perf_trace_lock+0xd6/0x900 [ 844.801173] binder: undelivered TRANSACTION_ERROR: 29189 [ 844.804181] ? graph_lock+0x170/0x170 [ 844.804203] ? __sanitizer_cov_trace_switch+0x53/0x90 2033/05/18 03:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 844.804222] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 844.804239] ? validate_nla+0x2d9/0x7b0 [ 844.804262] hwsim_new_radio_nl+0x7b8/0xa60 [ 844.831943] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 844.837157] ? __netlink_ns_capable+0x100/0x130 [ 844.841843] genl_family_rcv_msg+0x889/0x1120 [ 844.846356] ? genl_rcv+0x40/0x40 [ 844.849820] ? lock_downgrade+0x8e0/0x8e0 [ 844.853980] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 844.859011] ? lock_acquire+0x1dc/0x520 [ 844.862993] ? genl_rcv+0x19/0x40 [ 844.866469] genl_rcv_msg+0xc6/0x170 [ 844.870198] netlink_rcv_skb+0x172/0x440 [ 844.874264] ? genl_family_rcv_msg+0x1120/0x1120 [ 844.879026] ? netlink_ack+0xbc0/0xbc0 [ 844.882921] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 844.888128] ? netlink_skb_destructor+0x210/0x210 [ 844.892984] genl_rcv+0x28/0x40 [ 844.896266] netlink_unicast+0x58b/0x740 [ 844.900336] ? netlink_attachskb+0x970/0x970 [ 844.904756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 844.910300] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 844.915322] ? security_netlink_send+0x88/0xb0 [ 844.919912] netlink_sendmsg+0x9f0/0xfa0 [ 844.923986] ? netlink_unicast+0x740/0x740 [ 844.928234] ? security_socket_sendmsg+0x94/0xc0 [ 844.932998] ? netlink_unicast+0x740/0x740 [ 844.938193] sock_sendmsg+0xd5/0x120 [ 844.941916] ___sys_sendmsg+0x805/0x940 [ 844.945885] ? copy_msghdr_from_user+0x560/0x560 [ 844.950645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 844.956177] ? proc_fail_nth_write+0x96/0x1f0 [ 844.960753] ? __fget_light+0x2ef/0x430 [ 844.964719] ? fget_raw+0x20/0x20 [ 844.968157] ? find_held_lock+0x36/0x1c0 [ 844.972211] ? kasan_check_write+0x14/0x20 [ 844.976442] ? wait_for_completion+0x870/0x870 [ 844.981029] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 844.986559] ? sockfd_lookup_light+0xc5/0x160 [ 844.991475] __sys_sendmsg+0x115/0x270 [ 844.995350] ? __ia32_sys_shutdown+0x80/0x80 [ 844.999747] ? __sb_end_write+0xac/0xe0 [ 845.003714] ? fput+0x130/0x1a0 [ 845.006989] ? ksys_write+0x1a6/0x250 [ 845.010801] __x64_sys_sendmsg+0x78/0xb0 [ 845.014854] do_syscall_64+0x1b1/0x800 [ 845.019088] ? finish_task_switch+0x1ca/0x840 [ 845.023580] ? syscall_return_slowpath+0x5c0/0x5c0 [ 845.028497] ? syscall_return_slowpath+0x30f/0x5c0 [ 845.033418] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 845.038782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 845.043620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.048794] RIP: 0033:0x455a09 [ 845.051980] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.059678] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 845.066932] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 845.074188] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 845.081440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 845.088702] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000021 [ 845.101175] binder: 25138:25141 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00)', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xef5b000000000000]}, 0x10) [ 845.126485] binder: 25157:25167 transaction failed 29189/-22, size 0-0 line 2856 [ 845.136206] binder: 25138:25141 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:38 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x6, &(0x7f0000000080)="bd2a33b4ebc886a254954a928a720c0047fc2f07d82c99640970") r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0xffffffffffff7ee4, 0x5}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="046748c0"], 0x0, 0x0, &(0x7f0000002000)}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$setsig(r3, 0xa, 0x4) fcntl$setsig(r2, 0xa, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:38 executing program 3 (fault-call:3 fault-nth:34): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 845.176371] binder: 25157:25167 transaction failed 29189/-22, size 0-0 line 2856 [ 845.205074] binder: undelivered TRANSACTION_ERROR: 29189 [ 845.265926] FAULT_INJECTION: forcing a failure. [ 845.265926] name failslab, interval 1, probability 0, space 0, times 0 [ 845.275457] binder: 25183:25184 unknown command -1068996860 [ 845.277272] CPU: 1 PID: 25182 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 845.288105] binder: undelivered TRANSACTION_ERROR: 29189 [ 845.290199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.290205] Call Trace: [ 845.290230] dump_stack+0x1b9/0x294 [ 845.290251] ? dump_stack_print_info.cold.2+0x52/0x52 [ 845.304391] binder: undelivered TRANSACTION_ERROR: 29189 [ 845.305036] ? __mutex_lock+0x7d9/0x17f0 [ 845.305061] should_fail.cold.4+0xa/0x1a [ 845.321048] binder: 25183:25184 ioctl c0306201 20007000 returned -22 [ 845.321858] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 845.341513] ? kasan_kmalloc+0xc4/0xe0 [ 845.345415] ? graph_lock+0x170/0x170 [ 845.349228] ? debug_check_no_locks_freed+0x310/0x310 [ 845.354426] ? find_held_lock+0x36/0x1c0 [ 845.358496] ? __lock_is_held+0xb5/0x140 [ 845.362569] ? check_same_owner+0x320/0x320 [ 845.366896] ? kasan_check_write+0x14/0x20 [ 845.371133] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 845.376175] ? rcu_note_context_switch+0x710/0x710 [ 845.381372] __should_failslab+0x124/0x180 [ 845.385614] should_failslab+0x9/0x14 [ 845.389436] kmem_cache_alloc+0x2af/0x760 [ 845.393588] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 845.398520] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 845.403562] __kernfs_new_node+0xe7/0x580 [ 845.407742] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 845.412508] ? lock_downgrade+0x8e0/0x8e0 [ 845.416663] ? kasan_check_read+0x11/0x20 [ 845.420823] ? do_raw_spin_unlock+0x9e/0x2e0 [ 845.425240] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 845.429825] kernfs_new_node+0x80/0xf0 [ 845.433726] kernfs_create_link+0x33/0x180 [ 845.437964] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 845.443248] sysfs_create_link+0x65/0xc0 [ 845.447330] driver_sysfs_add+0x188/0x2a0 [ 845.451479] device_bind_driver+0x19/0xd0 [ 845.455630] mac80211_hwsim_new_radio+0x451/0x3410 [ 845.460558] ? graph_lock+0x170/0x170 [ 845.464372] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 845.470520] ? lock_release+0xa10/0xa10 [ 845.474504] ? check_same_owner+0x320/0x320 [ 845.478827] ? rcu_note_context_switch+0x710/0x710 [ 845.483757] ? __lock_acquire+0x7f5/0x5140 [ 845.487994] ? __might_sleep+0x95/0x190 [ 845.491976] ? kasan_check_write+0x14/0x20 [ 845.496213] ? __mutex_lock+0x7d9/0x17f0 [ 845.500276] ? genl_rcv_msg+0x13a/0x170 [ 845.504257] ? __lock_acquire+0x7f5/0x5140 [ 845.508497] ? mutex_trylock+0x2a0/0x2a0 [ 845.512565] ? graph_lock+0x170/0x170 [ 845.516368] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 845.521569] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 845.526590] ? validate_nla+0x2d9/0x7b0 [ 845.530571] hwsim_new_radio_nl+0x7b8/0xa60 [ 845.534896] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 845.540092] ? __netlink_ns_capable+0x100/0x130 [ 845.544768] genl_family_rcv_msg+0x889/0x1120 [ 845.549272] ? genl_rcv+0x40/0x40 [ 845.552726] ? lock_downgrade+0x8e0/0x8e0 [ 845.556875] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 845.561896] ? kasan_check_read+0x11/0x20 [ 845.566044] ? lock_acquire+0x1dc/0x520 [ 845.570018] ? genl_rcv+0x19/0x40 [ 845.573487] genl_rcv_msg+0xc6/0x170 [ 845.577203] netlink_rcv_skb+0x172/0x440 [ 845.581264] ? genl_family_rcv_msg+0x1120/0x1120 [ 845.586023] ? netlink_ack+0xbc0/0xbc0 [ 845.589908] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 845.595099] ? netlink_skb_destructor+0x210/0x210 [ 845.599948] genl_rcv+0x28/0x40 [ 845.603229] netlink_unicast+0x58b/0x740 [ 845.607300] ? netlink_attachskb+0x970/0x970 [ 845.611721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.617269] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 845.622301] ? security_netlink_send+0x88/0xb0 [ 845.626892] netlink_sendmsg+0x9f0/0xfa0 [ 845.630965] ? netlink_unicast+0x740/0x740 [ 845.635210] ? security_socket_sendmsg+0x94/0xc0 [ 845.639966] ? netlink_unicast+0x740/0x740 [ 845.644206] sock_sendmsg+0xd5/0x120 [ 845.647925] ___sys_sendmsg+0x805/0x940 [ 845.651908] ? copy_msghdr_from_user+0x560/0x560 [ 845.656677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 845.662211] ? proc_fail_nth_write+0x96/0x1f0 [ 845.666717] ? __fget_light+0x2ef/0x430 [ 845.670693] ? fget_raw+0x20/0x20 [ 845.674146] ? find_held_lock+0x36/0x1c0 [ 845.678210] ? kasan_check_write+0x14/0x20 [ 845.682451] ? wait_for_completion+0x870/0x870 [ 845.687043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 845.692583] ? sockfd_lookup_light+0xc5/0x160 [ 845.697087] __sys_sendmsg+0x115/0x270 [ 845.700971] ? __ia32_sys_shutdown+0x80/0x80 [ 845.705378] ? __sb_end_write+0xac/0xe0 [ 845.709353] ? fput+0x130/0x1a0 [ 845.712632] ? ksys_write+0x1a6/0x250 [ 845.716439] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 845.721283] __x64_sys_sendmsg+0x78/0xb0 [ 845.725352] do_syscall_64+0x1b1/0x800 [ 845.729239] ? finish_task_switch+0x1ca/0x840 [ 845.733735] ? syscall_return_slowpath+0x5c0/0x5c0 [ 845.738664] ? syscall_return_slowpath+0x30f/0x5c0 [ 845.743598] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 845.748965] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 845.753814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.758998] RIP: 0033:0x455a09 [ 845.762180] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.769890] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 845.777157] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 845.784423] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 845.791690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 845.798965] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000022 2033/05/18 03:45:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xafe6]}, 0x10) 2033/05/18 03:45:39 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306248, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) 2033/05/18 03:45:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x397, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:39 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa9d717553838e573, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x3333, 0x5f44, 0x4, 0x80, 0x2, 0x4}, 0x43f}, 0xa) 2033/05/18 03:45:39 executing program 3 (fault-call:3 fault-nth:35): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 845.823199] binder: 25183:25184 ioctl c0306201 20000240 returned -11 [ 845.844473] binder: 25183:25184 unknown command -1068996860 [ 845.850741] binder: 25183:25184 ioctl c0306201 20007000 returned -22 [ 845.906232] binder: 25200:25203 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xc9c7]}, 0x10) [ 845.948505] binder: 25200:25203 ioctl c0306248 20000240 returned -22 [ 845.952887] binder: 25212:25214 transaction failed 29189/-22, size 0-0 line 2856 [ 845.984614] binder: 25200:25216 ioctl c0306248 20000240 returned -22 [ 845.984626] binder: 25200:25203 transaction failed 29189/-22, size 0-0 line 2856 [ 846.019149] binder: 25212:25214 transaction failed 29189/-22, size 0-0 line 2856 [ 846.083237] FAULT_INJECTION: forcing a failure. [ 846.083237] name failslab, interval 1, probability 0, space 0, times 0 [ 846.094590] CPU: 1 PID: 25197 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 846.101872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.104750] binder: undelivered TRANSACTION_ERROR: 29189 [ 846.111240] Call Trace: [ 846.111268] dump_stack+0x1b9/0x294 [ 846.111291] ? dump_stack_print_info.cold.2+0x52/0x52 [ 846.111314] should_fail.cold.4+0xa/0x1a 2033/05/18 03:45:39 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e23, 0x81, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e20, 0x7fff, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xffffffffffff5bdf}, @in6={0xa, 0x4e21, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xae4}], 0xe8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002480)={0x0, 0x9, 0xffffffffffff0001, 0x3ab814c9, 0x80000000, 0x5dc}, &(0x7f00000024c0)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000025c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000002500)=0xd2f) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001240)={r3, 0x7b, "7fbc1a2cc22600bc0c772edd7e99beffffd5b7dc31288ffdcbefb949fa4584c9111f1631f3f3c7b74913081ffcd445c1c9be44e8dbf058dc82b1e6f569336dc16e029fec4926a301622dd4e762d910bdd9f62582dbaa3ffea34245b9e12cc984f5d342a281dffadcdc8f8eb74286c4542bca73d1a93725e6da50d7"}, &(0x7f0000001300)=0x83) r4 = dup2(r0, r0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x6}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffffffa}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, @in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x701}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x3ff, @empty, 0xbaa}], 0xc0) sendto$inet6(r1, &(0x7f0000000040)="b8", 0xfffffffffffffffd, 0x4040010, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x20}, 0x1c) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x22) ioctl$sock_netrom_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, [], 0x15}, 0xfffffffffffffff8}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @rand_addr=0xe39}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x4c) setsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f00000002c0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 846.132291] ? __kmalloc_track_caller+0x14a/0x760 [ 846.137155] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 846.142641] ? device_bind_driver+0x19/0xd0 [ 846.146985] ? mac80211_hwsim_new_radio+0x451/0x3410 [ 846.152098] ? hwsim_new_radio_nl+0x7b8/0xa60 [ 846.156604] ? genl_family_rcv_msg+0x889/0x1120 [ 846.161308] ? genl_rcv_msg+0xc6/0x170 [ 846.165205] ? netlink_rcv_skb+0x172/0x440 [ 846.169444] ? genl_rcv+0x28/0x40 [ 846.172908] ? graph_lock+0x170/0x170 [ 846.176727] ? __sys_sendmsg+0x115/0x270 [ 846.180928] ? __x64_sys_sendmsg+0x78/0xb0 [ 846.185174] ? do_syscall_64+0x1b1/0x800 [ 846.189242] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.194615] ? find_held_lock+0x36/0x1c0 [ 846.198680] ? __lock_is_held+0xb5/0x140 [ 846.202774] ? check_same_owner+0x320/0x320 [ 846.207106] ? rcu_note_context_switch+0x710/0x710 [ 846.212040] ? rcu_read_lock_sched_held+0x108/0x120 [ 846.217061] __should_failslab+0x124/0x180 [ 846.221302] should_failslab+0x9/0x14 [ 846.225103] kmem_cache_alloc+0x2af/0x760 [ 846.231178] ? memcpy+0x45/0x50 [ 846.234460] ? kstrdup+0x59/0x70 [ 846.237832] __kernfs_new_node+0xe7/0x580 [ 846.241983] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 846.246742] ? lock_downgrade+0x8e0/0x8e0 [ 846.250895] ? kasan_check_read+0x11/0x20 [ 846.255042] ? do_raw_spin_unlock+0x9e/0x2e0 [ 846.259453] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 846.264039] kernfs_new_node+0x80/0xf0 [ 846.267931] kernfs_create_link+0x33/0x180 [ 846.272172] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 846.277453] sysfs_create_link+0x65/0xc0 [ 846.281524] driver_sysfs_add+0x107/0x2a0 [ 846.285676] device_bind_driver+0x19/0xd0 [ 846.289825] mac80211_hwsim_new_radio+0x451/0x3410 [ 846.294756] ? graph_lock+0x170/0x170 [ 846.298571] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 846.304717] ? lock_release+0xa10/0xa10 [ 846.308689] ? check_same_owner+0x320/0x320 [ 846.313010] ? rcu_note_context_switch+0x710/0x710 [ 846.317938] ? __lock_acquire+0x7f5/0x5140 [ 846.322173] ? __might_sleep+0x95/0x190 [ 846.326152] ? kasan_check_write+0x14/0x20 [ 846.330390] ? __mutex_lock+0x7d9/0x17f0 [ 846.334451] ? genl_rcv_msg+0x13a/0x170 [ 846.338426] ? __lock_acquire+0x7f5/0x5140 [ 846.342668] ? mutex_trylock+0x2a0/0x2a0 [ 846.346727] ? graph_lock+0x170/0x170 [ 846.350530] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 846.355725] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 846.360740] ? validate_nla+0x2d9/0x7b0 [ 846.364731] hwsim_new_radio_nl+0x7b8/0xa60 [ 846.369059] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 846.374431] ? __netlink_ns_capable+0x100/0x130 [ 846.379112] genl_family_rcv_msg+0x889/0x1120 [ 846.383617] ? genl_rcv+0x40/0x40 [ 846.387070] ? lock_downgrade+0x8e0/0x8e0 [ 846.391241] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 846.396285] ? kasan_check_read+0x11/0x20 [ 846.400438] ? lock_acquire+0x1dc/0x520 [ 846.404415] ? genl_rcv+0x19/0x40 [ 846.407884] genl_rcv_msg+0xc6/0x170 [ 846.411604] netlink_rcv_skb+0x172/0x440 [ 846.415663] ? genl_family_rcv_msg+0x1120/0x1120 [ 846.420419] ? netlink_ack+0xbc0/0xbc0 [ 846.424304] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 846.429497] ? netlink_skb_destructor+0x210/0x210 [ 846.434344] genl_rcv+0x28/0x40 [ 846.437621] netlink_unicast+0x58b/0x740 [ 846.441696] ? netlink_attachskb+0x970/0x970 [ 846.446109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.451647] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 846.456688] ? security_netlink_send+0x88/0xb0 [ 846.461275] netlink_sendmsg+0x9f0/0xfa0 [ 846.465342] ? netlink_unicast+0x740/0x740 [ 846.469585] ? security_socket_sendmsg+0x94/0xc0 [ 846.474340] ? netlink_unicast+0x740/0x740 [ 846.478580] sock_sendmsg+0xd5/0x120 [ 846.482296] ___sys_sendmsg+0x805/0x940 [ 846.486276] ? copy_msghdr_from_user+0x560/0x560 [ 846.491216] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 846.496755] ? proc_fail_nth_write+0x96/0x1f0 [ 846.501258] ? __fget_light+0x2ef/0x430 [ 846.505243] ? fget_raw+0x20/0x20 [ 846.508692] ? find_held_lock+0x36/0x1c0 [ 846.512758] ? kasan_check_write+0x14/0x20 [ 846.517003] ? wait_for_completion+0x870/0x870 [ 846.521600] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 846.527141] ? sockfd_lookup_light+0xc5/0x160 [ 846.531649] __sys_sendmsg+0x115/0x270 [ 846.535542] ? __ia32_sys_shutdown+0x80/0x80 [ 846.539952] ? __sb_end_write+0xac/0xe0 [ 846.543940] ? fput+0x130/0x1a0 [ 846.547215] ? ksys_write+0x1a6/0x250 [ 846.551021] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 846.555870] __x64_sys_sendmsg+0x78/0xb0 [ 846.559944] do_syscall_64+0x1b1/0x800 [ 846.563838] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 846.568681] ? syscall_return_slowpath+0x5c0/0x5c0 [ 846.573611] ? syscall_return_slowpath+0x30f/0x5c0 [ 846.578546] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 846.583913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 846.588765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.593958] RIP: 0033:0x455a09 [ 846.597142] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.604847] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 846.612112] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 846.619378] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 846.626647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:45:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000c3ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x7f670000]}, 0x10) 2033/05/18 03:45:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 846.634007] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000023 [ 846.663169] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:40 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x800]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 846.684864] binder: 25232:25236 transaction failed 29189/-22, size 0-0 line 2856 [ 846.685586] binder: undelivered TRANSACTION_ERROR: 29189 [ 846.754219] binder: 25232:25236 transaction failed 29189/-22, size 0-0 line 2856 [ 846.767595] binder: 25243:25244 transaction failed 29189/-22, size 0-0 line 2856 [ 846.793757] binder: 25243:25244 transaction failed 29189/-22, size 0-0 line 2856 [ 846.814188] binder: undelivered TRANSACTION_ERROR: 29189 [ 846.833783] Unknown ioctl -1073172816 [ 846.852777] Unknown ioctl -1073172816 [ 846.852925] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x54b]}, 0x10) [ 846.874793] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:40 executing program 3 (fault-call:3 fault-nth:36): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000000000000000f", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:40 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010001dd00000000fe5743"], 0x0, 0x0, &(0x7f0000002000)}) socket$kcm(0x29, 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x1}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x42b, 0x4400) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffe3c, 0x0, &(0x7f00000003c0)="b1f63642130c6ab63e7bc8703701023f42d4f5c41bbd06eeba686739830dda703b822806b107de57c4e28cf89438d1ffd819933876c60725221f5c11ecd4a6b97714acb6aad0e38f7fa6c6e1060000000000000094a74a953a1aa6cfbafe46d2eeed996bd302335e7ac699de1e6b159b6c9b43b7551d7bf6554c17c5b7c244b65bd17382f7c20d4437d079eabe5f2a0c97936ebea9629a7f1c6df44510459c3a2e5322b975f88313dcaa5c88126615590e298c7cd3a268d7bd27820f2ad14a2931d161fbbf9732e2532bc3a93431d4c115090f6da4eab19d4bc3ecb459d9ff2d09630cb53ed4186c10c24d26c5ce8165c8094cf4cd885c0a26694a943dcb1344904a28ef1ca64597"}) 2033/05/18 03:45:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x4040) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14) sendto$packet(r0, &(0x7f0000000040)="e1e8d2fd44c8f48beb92b377419d893fa25d9bf2ff09c986c680b3b2b01512194a", 0x21, 0x50, &(0x7f0000000100)={0x11, 0x1f, r2, 0x1, 0x1f, 0x6}, 0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) close(r1) sendto$inet6(r3, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) fcntl$setpipe(r0, 0x407, 0x10000) recvfrom$ipx(r0, &(0x7f0000000280)=""/98, 0x62, 0x40012000, &(0x7f0000000300)={0x4, 0x6, 0x1a2000, "d053e6053fec", 0x3}, 0x10) setsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000240)=0x8, 0x4) [ 846.955550] binder: 25254:25256 transaction failed 29189/-22, size 0-0 line 2856 [ 846.962873] binder: 25260:25263 unknown command -587137023 [ 846.966176] FAULT_INJECTION: forcing a failure. [ 846.966176] name failslab, interval 1, probability 0, space 0, times 0 [ 846.980286] CPU: 1 PID: 25257 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 846.983661] binder: 25260:25263 ioctl c0306201 20007000 returned -22 [ 846.987558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2033/05/18 03:45:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 846.987565] Call Trace: [ 846.987593] dump_stack+0x1b9/0x294 [ 846.987614] ? dump_stack_print_info.cold.2+0x52/0x52 [ 846.987634] ? kasan_check_write+0x14/0x20 [ 847.019057] ? finish_task_switch+0x28b/0x840 [ 847.020446] binder: 25260:25269 unknown command -587137023 [ 847.023564] should_fail.cold.4+0xa/0x1a [ 847.023585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 847.023609] ? __schedule+0x809/0x1e30 [ 847.023630] ? kasan_check_write+0x14/0x20 [ 847.038264] binder: 25260:25269 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20400) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x10000, 0x80000001, 0x5, 0xff, 0x39}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0xa4}, 0x8) r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 847.038413] ? __sched_text_start+0x8/0x8 [ 847.057362] ? find_held_lock+0x36/0x1c0 [ 847.061444] ? __lock_is_held+0xb5/0x140 [ 847.065516] ? check_same_owner+0x320/0x320 [ 847.069846] ? mark_held_locks+0xc9/0x160 [ 847.074002] __should_failslab+0x124/0x180 [ 847.078250] should_failslab+0x9/0x14 [ 847.082146] kmem_cache_alloc_trace+0x2cb/0x780 [ 847.086820] ? trace_hardirqs_on+0xd/0x10 [ 847.090978] ? queue_work_on+0x12c/0x1e0 [ 847.095049] ? device_create_file+0x1e0/0x1e0 [ 847.099558] kobject_uevent_env+0x20f/0xea0 [ 847.103879] ? _raw_spin_unlock_irq+0x27/0x70 [ 847.108385] kobject_uevent+0x1f/0x30 [ 847.112187] driver_bound+0x1a3/0x220 [ 847.116105] device_bind_driver+0xb3/0xd0 [ 847.120262] mac80211_hwsim_new_radio+0x451/0x3410 [ 847.125204] ? graph_lock+0x170/0x170 [ 847.129018] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 847.135164] ? lock_release+0xa10/0xa10 [ 847.139138] ? check_same_owner+0x320/0x320 [ 847.143464] ? rcu_note_context_switch+0x710/0x710 [ 847.148393] ? __lock_acquire+0x7f5/0x5140 [ 847.152637] ? __might_sleep+0x95/0x190 [ 847.156618] ? kasan_check_write+0x14/0x20 [ 847.160856] ? __mutex_lock+0x7d9/0x17f0 [ 847.164925] ? genl_rcv_msg+0x13a/0x170 [ 847.168909] ? __lock_acquire+0x7f5/0x5140 [ 847.173161] ? mutex_trylock+0x2a0/0x2a0 [ 847.177222] ? graph_lock+0x170/0x170 [ 847.181024] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 847.186223] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 847.191240] ? validate_nla+0x2d9/0x7b0 [ 847.195217] hwsim_new_radio_nl+0x7b8/0xa60 [ 847.199538] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 847.204732] ? __netlink_ns_capable+0x100/0x130 [ 847.209421] genl_family_rcv_msg+0x889/0x1120 [ 847.213924] ? genl_rcv+0x40/0x40 [ 847.217389] ? lock_downgrade+0x8e0/0x8e0 [ 847.221545] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 847.226570] ? kasan_check_read+0x11/0x20 [ 847.230723] ? lock_acquire+0x1dc/0x520 [ 847.234697] ? genl_rcv+0x19/0x40 [ 847.238164] genl_rcv_msg+0xc6/0x170 [ 847.241885] netlink_rcv_skb+0x172/0x440 [ 847.245950] ? genl_family_rcv_msg+0x1120/0x1120 [ 847.250707] ? netlink_ack+0xbc0/0xbc0 [ 847.254594] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 847.259783] ? netlink_skb_destructor+0x210/0x210 [ 847.264632] genl_rcv+0x28/0x40 [ 847.267913] netlink_unicast+0x58b/0x740 [ 847.271986] ? netlink_attachskb+0x970/0x970 [ 847.276396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.281946] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 847.286965] ? security_netlink_send+0x88/0xb0 [ 847.291552] netlink_sendmsg+0x9f0/0xfa0 [ 847.295618] ? netlink_unicast+0x740/0x740 [ 847.299861] ? security_socket_sendmsg+0x94/0xc0 [ 847.304619] ? netlink_unicast+0x740/0x740 [ 847.308869] sock_sendmsg+0xd5/0x120 [ 847.312677] ___sys_sendmsg+0x805/0x940 [ 847.316666] ? copy_msghdr_from_user+0x560/0x560 [ 847.321461] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 847.326998] ? proc_fail_nth_write+0x96/0x1f0 [ 847.331499] ? __fget_light+0x2ef/0x430 [ 847.335483] ? fget_raw+0x20/0x20 [ 847.338945] ? find_held_lock+0x36/0x1c0 [ 847.343011] ? kasan_check_write+0x14/0x20 [ 847.347252] ? wait_for_completion+0x870/0x870 [ 847.351858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 847.357401] ? sockfd_lookup_light+0xc5/0x160 [ 847.361909] __sys_sendmsg+0x115/0x270 [ 847.365797] ? __ia32_sys_shutdown+0x80/0x80 [ 847.370205] ? __sb_end_write+0xac/0xe0 [ 847.374184] ? fput+0x130/0x1a0 [ 847.377470] ? ksys_write+0x1a6/0x250 [ 847.381284] __x64_sys_sendmsg+0x78/0xb0 [ 847.385346] do_syscall_64+0x1b1/0x800 [ 847.389234] ? finish_task_switch+0x1ca/0x840 [ 847.393732] ? syscall_return_slowpath+0x5c0/0x5c0 [ 847.398665] ? syscall_return_slowpath+0x30f/0x5c0 [ 847.403597] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 847.408978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 847.413826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 847.419010] RIP: 0033:0x455a09 [ 847.422195] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.429907] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 847.437180] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 847.444447] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 847.451715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 847.458996] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000024 [ 847.492332] binder: BINDER_SET_CONTEXT_MGR already set [ 847.497752] binder_alloc: 25254: binder_alloc_buf, no vma [ 847.503514] binder: 25254:25270 transaction failed 29189/-3, size 0-0 line 2971 [ 847.523371] binder_alloc: 25254: binder_alloc_buf, no vma [ 847.529103] binder: 25272:25276 transaction failed 29189/-3, size 0-0 line 2971 2033/05/18 03:45:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x5f50000000000000]}, 0x10) [ 847.560635] binder: 25254:25271 ioctl 40046207 20000240 returned -16 [ 847.582483] binder_alloc: 25254: binder_alloc_buf, no vma [ 847.588160] binder: 25272:25282 transaction failed 29189/-3, size 0-0 line 2971 2033/05/18 03:45:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:41 executing program 3 (fault-call:3 fault-nth:37): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:41 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc3", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 847.693817] binder: undelivered TRANSACTION_ERROR: 29189 [ 847.701131] binder: undelivered TRANSACTION_ERROR: 29189 [ 847.715367] FAULT_INJECTION: forcing a failure. [ 847.715367] name failslab, interval 1, probability 0, space 0, times 0 [ 847.726857] CPU: 0 PID: 25296 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 847.734153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.743511] Call Trace: [ 847.746108] dump_stack+0x1b9/0x294 [ 847.749731] ? dump_stack_print_info.cold.2+0x52/0x52 [ 847.754913] ? kobject_uevent_env+0x62e/0xea0 [ 847.759419] should_fail.cold.4+0xa/0x1a [ 847.763478] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 847.768488] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 847.773588] ? __might_sleep+0x95/0x190 [ 847.777555] ? graph_lock+0x170/0x170 [ 847.781870] ? __mutex_lock+0x7d9/0x17f0 [ 847.785919] ? string+0x21d/0x2c0 [ 847.789359] ? kobject_uevent_env+0x62e/0xea0 [ 847.793853] ? find_held_lock+0x36/0x1c0 [ 847.797918] ? __lock_is_held+0xb5/0x140 [ 847.801992] ? check_same_owner+0x320/0x320 [ 847.806310] ? rcu_note_context_switch+0x710/0x710 [ 847.811238] ? put_dec+0xf0/0xf0 [ 847.814612] ? format_decode+0x1a9/0xae0 [ 847.818665] __should_failslab+0x124/0x180 [ 847.822893] should_failslab+0x9/0x14 [ 847.826681] kmem_cache_alloc_node+0x272/0x780 [ 847.831262] __alloc_skb+0x111/0x780 [ 847.834987] ? skb_scrub_packet+0x580/0x580 [ 847.839304] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 847.844497] ? netlink_has_listeners+0x2ff/0x4c0 [ 847.849243] ? netlink_tap_init_net+0x3c0/0x3c0 [ 847.853915] kobject_uevent_env+0x801/0xea0 [ 847.858236] ? _raw_spin_unlock_irq+0x27/0x70 [ 847.862742] kobject_uevent+0x1f/0x30 [ 847.866533] driver_bound+0x1a3/0x220 [ 847.870325] device_bind_driver+0xb3/0xd0 [ 847.874474] mac80211_hwsim_new_radio+0x451/0x3410 [ 847.879396] ? graph_lock+0x170/0x170 [ 847.883194] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 847.889335] ? lock_release+0xa10/0xa10 [ 847.893299] ? check_same_owner+0x320/0x320 [ 847.897613] ? rcu_note_context_switch+0x710/0x710 [ 847.902531] ? __lock_acquire+0x7f5/0x5140 [ 847.906764] ? __might_sleep+0x95/0x190 [ 847.910729] ? kasan_check_write+0x14/0x20 [ 847.914962] ? __mutex_lock+0x7d9/0x17f0 [ 847.919026] ? genl_rcv_msg+0x13a/0x170 [ 847.922993] ? __lock_acquire+0x7f5/0x5140 [ 847.927225] ? mutex_trylock+0x2a0/0x2a0 [ 847.931271] ? perf_trace_lock+0xd6/0x900 [ 847.935407] ? graph_lock+0x170/0x170 [ 847.939201] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 847.944382] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 847.949481] ? validate_nla+0x2d9/0x7b0 [ 847.953447] hwsim_new_radio_nl+0x7b8/0xa60 [ 847.957759] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 847.962950] ? __netlink_ns_capable+0x100/0x130 [ 847.967612] genl_family_rcv_msg+0x889/0x1120 [ 847.972106] ? genl_rcv+0x40/0x40 [ 847.975565] ? lock_downgrade+0x8e0/0x8e0 [ 847.979711] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 847.984723] ? lock_acquire+0x1dc/0x520 [ 847.988691] ? genl_rcv+0x19/0x40 [ 847.992148] genl_rcv_msg+0xc6/0x170 [ 847.995860] netlink_rcv_skb+0x172/0x440 [ 847.999909] ? genl_family_rcv_msg+0x1120/0x1120 [ 848.004656] ? netlink_ack+0xbc0/0xbc0 [ 848.008531] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 848.013720] ? netlink_skb_destructor+0x210/0x210 [ 848.018646] genl_rcv+0x28/0x40 [ 848.021913] netlink_unicast+0x58b/0x740 [ 848.025968] ? netlink_attachskb+0x970/0x970 [ 848.030368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.035903] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 848.040909] ? security_netlink_send+0x88/0xb0 [ 848.045482] netlink_sendmsg+0x9f0/0xfa0 [ 848.049541] ? netlink_unicast+0x740/0x740 [ 848.053785] ? security_socket_sendmsg+0x94/0xc0 [ 848.058541] ? netlink_unicast+0x740/0x740 [ 848.062767] sock_sendmsg+0xd5/0x120 [ 848.066471] ___sys_sendmsg+0x805/0x940 [ 848.070450] ? copy_msghdr_from_user+0x560/0x560 [ 848.075300] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 848.080828] ? proc_fail_nth_write+0x96/0x1f0 [ 848.085332] ? __fget_light+0x2ef/0x430 [ 848.089298] ? fget_raw+0x20/0x20 [ 848.092738] ? find_held_lock+0x36/0x1c0 [ 848.096791] ? kasan_check_write+0x14/0x20 [ 848.101024] ? wait_for_completion+0x870/0x870 [ 848.105608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 848.111134] ? sockfd_lookup_light+0xc5/0x160 [ 848.115620] __sys_sendmsg+0x115/0x270 [ 848.119498] ? __ia32_sys_shutdown+0x80/0x80 [ 848.123909] ? __sb_end_write+0xac/0xe0 [ 848.127875] ? fput+0x130/0x1a0 [ 848.131152] ? ksys_write+0x1a6/0x250 [ 848.135054] __x64_sys_sendmsg+0x78/0xb0 [ 848.139111] do_syscall_64+0x1b1/0x800 [ 848.142998] ? finish_task_switch+0x1ca/0x840 [ 848.147487] ? syscall_return_slowpath+0x5c0/0x5c0 [ 848.152405] ? syscall_return_slowpath+0x30f/0x5c0 [ 848.157336] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 848.162779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 848.167614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 848.172786] RIP: 0033:0x455a09 [ 848.175960] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.183657] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 2033/05/18 03:45:41 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xb4801, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x2, 0x5, [0x24, 0x2, 0x8, 0x1ff, 0x1]}, &(0x7f0000000340)=0x12) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r2, 0x800, 0x20, 0x4, 0x5, 0x80}, &(0x7f00000003c0)=0x14) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x78) r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "8ac0cb2c717c64a8ad5c133c6df7cd5ffa674cc837134a3b9ab5115b2a4993e4ba195480d774acd5c4212fb93b2256922c6a4876e36128e30c8d06e07ca4a1cc182e0a001492aa97791c5f32621a44"}, 0x53) [ 848.190910] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 848.198173] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 848.205437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 848.212691] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000025 [ 848.234388] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.245636] binder: 25298:25300 transaction failed 29189/-22, size 0-0 line 2856 [ 848.278785] binder: 25305:25306 transaction failed 29189/-22, size 0-0 line 2856 [ 848.308955] binder: 25305:25310 transaction failed 29189/-22, size 0-0 line 2856 [ 848.337894] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x7733000000000000]}, 0x10) 2033/05/18 03:45:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:42 executing program 3 (fault-call:3 fault-nth:38): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x3f00000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:42 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:42 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x73d694a, 0x30001) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xb1ba, 0x4, 0x620, 0x10001, 0x8, 0x3, 0x7, 0x80000000, 0x244, 0x38, 0x2af, 0x8000, 0x9, 0x20, 0x1, 0x7, 0x6, 0x2}, [{0x2, 0xf8, 0x3, 0xbeb, 0x9, 0x3f, 0xff, 0x65f912b0}, {0x4, 0x9c, 0xc5, 0x5, 0x100, 0x2, 0x7, 0x800}], "3688fd8ac2d05a6777fc0568c19a33bacd602a937599737f56361817ca4eb221ab113b014680dcac3bc5c5c195d79e1dbf006a7d22b58d7ae262b0cbc67f83b4658665351f0dfac500955f4ce80573dfcc82f660b892a1c8226ffa19240ac3b9dede20ee81354e097ce861294ff66ef3f2719847b2116669b6001000a7570020a45ed726030dfa2ff3e54f9cbebf975f94ed758414b24c0c2eb0e92ab75288f37aec190ad378d96e29a913d47bddd0b6f4a20af958f5d8c3948d1483d141a64e25477a141e144e2fc57396df672f18ce047b1ca2a4a86bf36bb842e8cef3ed3c677643588d446aa6b24471155a8cca9669e33000ef1f0e5a85d696ac8e23bfe9d6fa24b6c3f05ab173333ea0a7e2886ac772ab531def3aa2dd5b5e2d4bce273a9b4905cb5f8ec77e7f6ac8c3ae436a11530d2c7f024ee18bf5223e0b4ceae1abbe396ca18d2043ce11a95badbc3f78409eabb8ec6797685186d1fd191d2a6fe385768cf0ac2ee5802a4720a937568d9a31f49786211744a59c2b72891c591a868f5401eb498d2e737c28db1b1bb72e63379d3bccde15a7df12eb535cd7f9e44f9d7d25786339b5f912920aab9907f51eeab70045b351248e6c437bddc00a40b1d2530d37c9754223ea9b81a60dae92c6a8a9e5a3d53af456f1cdbd112c7d9019af4fd7ced552bc585441c6c196c9769817b5647c4fff879f6962c9ca245f369de02e628fe3a8299f32cbe14ceb450a1f96fc70dcf5f3bac704d7fff676f5c6b36ccbd7ff7b1020648286211481f383ea725088bf753b159a72311ca7313170e049869c50260f0a800e5776c8152465b186e218a2e2ea149f98057c7913f74daec99b367bbcc2fee04d8c39beb451e53c43af0a028920ad3bb6425feaf7e97738ab6cf5de06fdc47f6a61ed0860bb77d986fad123a1d60710d52df3a29b9e6b94e99dd25ad9d9daa77571383b614ad8b1d293dddd0a0401d7690dac2eb55cc1d3fc0aa6827b025ba176ce6dcbd42ffd33226a9bc0482fdff923fa9b28fe0ece372480d0e8b1cf6ae83b416a7cd1c4dc250625d3eb81215fea083e6b7e141ebdf08430c038f4296db1487d3744a8f5152a40ea27bb84bb6bbd2c474eb28d9193306610118ef14422803a9ab666268fc4cb2f886d7ca8e6038c1cc56fef076f2feb60b5a81604dfe1c8dee3477733fcc7dac47a868b6f35699056a50404ebd40e3cacab98dc923c9c87d3d6a6245c9c62142074ef536af764dc3bacb9858cdb8b8186497a6a91519e2da57e060d2e61fbcb45d8ebf72ce788b9a1a96d39f242663513f39b5f44e5a519ba30daafe213de0a3fa28939f2422a6178728b5666d12e5d275e848a0bf0852c1f8ab6e48443f6f2c79390c89abfa7f8cce9578925efb58d872456e44e77a25c21ff16b7df2c7106d4604caffd58af7cd38e9d4175b5137aa32b9d3725361b717d12e90485093ca7a88576738a19b7daf5c45af74ee9a6e87e4d22f031c6de5658aeed5c6120583bd94bb3e6c9e59a144df8ace3e4b7a9731a065742ce643e58cde38605b97d0747a1c531f8158c7f4b2aa8ae6bd66a99a7082609693499d49c5b38f1ef49f6f3a4391c888ecf4d04a15ed2cd1d192350cedff8736b648b5be7635dc03b7810c5fed10f08f0a5a6eb105ec226373e9e424551e2281207376797111771825e58f3ed182c957e4958843d1f37aaeea630c1a7a6761d46fbf02278edb2313fa74b0e710c32610eaab82b3b6e7e75adcefb7ba25fbc7197c55e3e1259baf1b7459cc93b885948f7ba5688788914a1b2554bc15aa3a6bb2688d80025ee0ccaff8c4d66e50d8109a83c260e847f29419f6146dd38b14e08f176e5ba2ea9628f2f264c1dc953190e6b1f10c00251f4d6ec6a2f577cbcaa3464b633ced655b7747da7c0dcb098edf2d8642d4f479738619a24766d8c7761fd2621833ec7c861ed5761ec95da922fe28e249f5601e3aaeb7f81dd2659b44aaa79d2f1cd3e3b1539f3acddee7f574d741b52681778acd34cc7aba8fc26b47a250dd0866ecaf4a6395a33067907bfd76d984771c7be3c151c5d566d94a099b00828bae6e05814c65b078a0844e21c96ca883d60cd5e24a738be1b33cc94ba879cf25f48e6d0ba758ca30fc9c6c17a4bb49d7e4e18e0bbc7f4e3f9acd2dc2e24b88ddc606f43a964c384c5345601fd2ce0ad68b33a79987a6230d0baab8e44920b1499c1532e0f350dc5e25839a4cc4216a2b01ddd871700ecb51edbdaa5eeaafd5de3c26ce10168abb619db352bdc095932bd66b0a165f3f9ea33bb3a7fdc3625180f7f9fcc5a803de7a4611d1511eed58740d95e338c23593c4008d51428b51f135502f6aeafd1064ca0d91800a56831745f6c051b36e8f91daa56510986af90428090c1e45b33d80544b2f09debe6723b994fd29873a31210c4cdae812dc940a1311b0d23f62d0466534a12cdbc213ed775bf873e2ae1e4742bdbd724da90012e13994831bbe4e2b0cfe1319ea3c37841984b594592e0acca42520e18a3a35dbbd4e6e529f72c49533bed99ea08c4a202e6619d8f7a54536ab487dcfc771a72dc9e8b2c272cc9b90a7cde2bb8c0a5a1b6cdc4fcc1ad84e3dbc15efb99613ed9dc00ef2f374208b83151e71762fe36a1b8b36b3af6f6a31a0102da36d9d2972fe20bbd8c9fad2ff2853799a14800e5df613f1e041ef59b209f2e819acf6419df4b6dfb0807961c537f885ed1282d36203f24150448a386be707bf755d5aadacde8a72d425bd3ab66a0dd8706e9f77988f470cfd8581dbdcdfd7cb23f67fee80c94bfd7179bfa60fa73fc5aa841b010576441881cf1cde2ad85437aa4c718679b11c843fdc35463d490521a5a2e714eac53962a11f40407ac8e59cb07e618c9d048c806164eebcc3ae0d1bb59ceef113ca42d9ca4223f1489a0c0d08d339b10ec5de8c6b9b255d55cde73f869f89241a2b03d6be951cf6488d43d4973e6405c9800ffb395b6373927f2a5881f75e415dc572a19cfeafe36ecb2dd23c44686b7c47e1823afe45aba27df3558db3305b3459896453724191060c33fe328e5db0cfa7822924c1354036103f7682566117abc90694a82200882d1715b6303c0d22b94030191f606b04f3cd74cb12332de040c8a4f58cfa84ecc95995c1806e2201c9197730f9c33d95ba5715e99c75155d3704d6e1d0ba3be539c3a7bd26ed0f6d024ac673837cbc3d32e4d5e5c7a492f4adbfa7dce5f34ac4d807fe6a323e0dd02912ce4570f6d27dc0df0404968f2cc8b0469989b9f89f1fddcffae7f3d87972fb36dbf3bbf9b50447adcebd39e4a55d9e8621c7005e4933a4a87b94a1d44889470b649859da536b11557b66fe717aab89e304c58f92897e3046a45b4a0c31941d1b03e1042c6174889289f770dcd0a29b9aadfb6b22938ad24db661155534e788fe324c36d63eed21adca26b9be88b7cc2c73c1e54f99837df2361f20186a5eb56bd7f9881c428c0b4225972c502f774e3476f3c87eca9ca503eb1828af6ca0ee61848dbf77dd74052cd33fd6107c7ff7dd0b5772d92cef9fad4f2f9692b6a351edd487625a1bf12d325994dfb9c07160f48c26c80da518144aa44b4312523fc338328c02932df12ee5e06ed8d1a5965f601fcbcb02d2bf5da89a280b166dbd91fc341b03699e9eb70d95a56c0ed97ef94f5f6dc2c8c7dfdc9bd568f9ab7b1f0ebb1a61934594868ca9ca213798f9234e706e05b7aa1ade2406e22bd55ffe17a01663762a7e4f4d2c4d5269e8290d555e5fe4de33381dba0e94af92daba9def686a270996808ff958b98d4d00ae894f029cd4f0d143cc776a758251652db45247dc17bd2d58b32bf2a85ac8168e59c814381d64f8380fb157292451eb84cbabbf2fc6a1e21e2a6d0a985978cb590a90fa77d5e7fff108d370492b05be33c13c2789f62028b829630fcf23c185f7ba627c68728cb962d2491832e889d0dcec79b1911d9b97230298e58905b68e71029308782dbf76878ff75ac4a760dcfae37eafd6a1099ef8988d16738236ad1073a4c268de14c54f5ed8626ecabc926b6bebc9cfc2d2da8f060ab4a281ad1d8c9028deb687f054ee0a7c8e8b140c6f357912461cb5ef0c9a17ebad380b88bb0218ae5e49a01d6ec98e2d1d1725463261ac088c3a5390c7e83c6557dd41d97770083c659a213767dfc42491d44e2f214937c05a67252ecb34aeedccd5dc70c2dfc93e354ca1a75fa6c6e362a6f394c4581266d32819218169ac8843e120a53ebc3767365d2b31d485a90cbac1097ece0030939f2cb40cbe3ede2a714a6fd4b446fb8d689b5beb6fb23b975535ee43d9f0566fde44520aa90bfedd8b3dda14e9f0442abe2884e61a61bfa7acd0a13e65eb11f1048cf5ed27440b95143df48d81597aeb4bbb3e23e2bbe8283a559318d963c3d592a6e0406ee1407c0abbf39a7652dcdce045e68ad07fa72a5568fdd4cf7fcc635101329a9382ef39527ee9fcde14dbd88255e880e1df497584476016af28cfaaaa9254a3870d68352aa2cc91550bd0a547db9826699fc818f13d463b74e29f16e77ffbc47cfc6650de6bf585c81a7c7640b87cecc8d602c2e4bf01a1d0c0e77954a8b2cc159ef3e330c500ebcdc1ad70c6b7f64c69af13bb1cf3740b5fdc9bafc16d66b1b2547ef1b6381e1a2d574f4320641d95408aa63890039bc502689933697058793412ee3e3fb00e04d223b86a97fba94a42a8bd4606bf9fb5a9b59bf35a74ca76f434ceca4006497c97708c0c68da64f5de20278bde3f33b2b14285926541db56dc1c1ef7f75e17291083c6303e052399a3312a58bef335c46752cc8e6dfde17dade3188cb36b1f8c45c202c4db8eb0b922137a39fe09efc6e7c1838baf236f77898a6c5fe9068e0d2712cd821388a729e2d5e5caa3e56f5f0cc0f79a751abe62a56f9a8ccb82da53c8151b6ddd6f6040b28778f4dbf26864cb313cb29306a77976e0b1a00af047bcb3f96f45b2f4c6219593bc010a661b334d79ca39ab2a58be3496046b885ecceb8b68090139f294ce91868910c604673f63552799ba5592d8c9ef78731e7c746ea4cba6de800b17a8200b0650d53344c25cf49a9b82b12d3aa3ef20f1273754de71d11cd25075a69efc9d41898b5975177cc8142b391cd72324bc5aa8c64e13f7f9bcdffe3db13d4b1917a3743de5a1e11966f39484901fcca5a21eb58689182fc4bb8d7ab6f2d40bdf6d9ab55d5499857757b30751d17be80d3da89e77f287611062accf36ed47523371b2a6a57c2f5770fae8503903c9060b2341f076a78fd5a1d99dd7e06b959ee24c89efe5c96799c384787c6f100a03c391b0cb63c5ef46799709bf188b979958b05645f76b06e6d573a419d817984d3efdd8e6a3c6f7604f2e1f12153340b25e0caf0598ce9a41de1a8ee07125c711caf7e7577ccb9a2f49efdb685237326bbeccb25d22102e552f9c44fb7742d73d4713ee3715e61f12940a656153790d86e9c79a4df49b42b4ab1d70ee4fb73768f36b8ef7c1a973926ecc1b348f56a227addaf4faac6203166092e0396e963a716df745d3243bea7414d1c19b802dda527552f81565264ec1d560aed7ff7169d840ae27eacba6c120f5f3642be1b6d75a1824b986cdbba548a3a60502111234136e5269a9f4cca54feb372b26655cad7c47258bf0e3bc6bf7387e680bc5d1d943720ad93d5b0545ad6bd64953fb2fc93c174ddbaed5439cd707fd22b8d277f31113b5103f5c85783df99305b7928f418b1314b88cdc1325f42136c", [[], []]}, 0x1278) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000100)={&(0x7f0000001500)=ANY=[@ANYBLOB="d6000000", @ANYRES16=r3, @ANYBLOB="00002cbd7000fedbdf250200000050000200080005000700000008000900000800001400010000000000000000000000000000000000080006000180000008000700000000000800070007000000080009000100000008000b000a00000064000300080007004e23000014000200726f73653000000000000000000000000800050000000000080007004e220000080007004e2300001400020076657468315f746f5f626f6e6400000008000800fe0000000800050000000000080007004e20000008000400030000000800040001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40850) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 848.356552] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.413291] binder: 25314:25317 transaction failed 29189/-22, size 0-0 line 2856 [ 848.438072] binder: 25314:25317 transaction failed 29189/-22, size 0-0 line 2856 [ 848.439341] FAULT_INJECTION: forcing a failure. [ 848.439341] name failslab, interval 1, probability 0, space 0, times 0 [ 848.457164] CPU: 0 PID: 25325 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 848.464440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.473817] Call Trace: [ 848.476431] dump_stack+0x1b9/0x294 [ 848.480072] ? dump_stack_print_info.cold.2+0x52/0x52 [ 848.485270] ? lock_downgrade+0x8e0/0x8e0 [ 848.489436] should_fail.cold.4+0xa/0x1a [ 848.493518] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 848.498644] ? graph_lock+0x170/0x170 [ 848.500226] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.502449] ? kernel_text_address+0x79/0xf0 [ 848.502469] ? __unwind_start+0x166/0x330 [ 848.502485] ? __kernel_text_address+0xd/0x40 [ 848.502504] ? find_held_lock+0x36/0x1c0 [ 848.502521] ? __lock_is_held+0xb5/0x140 [ 848.502538] ? rds_ib_recv_refill+0x15d0/0x1990 [ 848.514959] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.516598] ? check_same_owner+0x320/0x320 [ 848.516616] ? device_bind_driver+0xb3/0xd0 [ 848.516630] ? mac80211_hwsim_new_radio+0x451/0x3410 [ 848.516642] ? hwsim_new_radio_nl+0x7b8/0xa60 [ 848.516660] ? rcu_note_context_switch+0x710/0x710 [ 848.562354] ? genl_rcv+0x28/0x40 [ 848.565799] ? netlink_unicast+0x58b/0x740 [ 848.570025] ? netlink_sendmsg+0x9f0/0xfa0 [ 848.574258] __should_failslab+0x124/0x180 [ 848.578487] should_failslab+0x9/0x14 [ 848.582279] kmem_cache_alloc+0x2af/0x760 [ 848.586427] skb_clone+0x1ed/0x4f0 [ 848.589966] ? refcount_add_not_zero+0x250/0x320 [ 848.594709] ? skb_split+0x11d0/0x11d0 [ 848.598587] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 848.603594] ? netlink_trim+0x1b2/0x370 [ 848.607556] ? netlink_skb_destructor+0x210/0x210 [ 848.612389] ? cleanup_uevent_env+0x40/0x40 [ 848.616704] netlink_broadcast_filtered+0x1024/0x1580 [ 848.621889] ? __netlink_sendskb+0xd0/0xd0 [ 848.626138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.631679] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 848.636423] ? refcount_add_not_zero+0x320/0x320 [ 848.641174] ? cleanup_uevent_env+0x40/0x40 [ 848.645487] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 848.650493] kobject_uevent_env+0x6e4/0xea0 [ 848.654806] ? _raw_spin_unlock_irq+0x27/0x70 [ 848.659298] kobject_uevent+0x1f/0x30 [ 848.663088] driver_bound+0x1a3/0x220 [ 848.666880] device_bind_driver+0xb3/0xd0 [ 848.671022] mac80211_hwsim_new_radio+0x451/0x3410 [ 848.675945] ? graph_lock+0x170/0x170 [ 848.679845] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 848.685980] ? lock_release+0xa10/0xa10 [ 848.689943] ? check_same_owner+0x320/0x320 [ 848.694256] ? rcu_note_context_switch+0x710/0x710 [ 848.699179] ? __lock_acquire+0x7f5/0x5140 [ 848.703402] ? __might_sleep+0x95/0x190 [ 848.707368] ? kasan_check_write+0x14/0x20 [ 848.711590] ? __mutex_lock+0x7d9/0x17f0 [ 848.715643] ? genl_rcv_msg+0x13a/0x170 [ 848.719605] ? __lock_acquire+0x7f5/0x5140 [ 848.723830] ? mutex_trylock+0x2a0/0x2a0 [ 848.727875] ? graph_lock+0x170/0x170 [ 848.731669] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 848.736848] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 848.741851] ? validate_nla+0x2d9/0x7b0 [ 848.745815] hwsim_new_radio_nl+0x7b8/0xa60 [ 848.750127] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 848.755310] ? __netlink_ns_capable+0x100/0x130 [ 848.759975] genl_family_rcv_msg+0x889/0x1120 [ 848.764466] ? genl_rcv+0x40/0x40 [ 848.767905] ? lock_downgrade+0x8e0/0x8e0 [ 848.772049] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 848.777059] ? kasan_check_read+0x11/0x20 [ 848.781195] ? lock_acquire+0x1dc/0x520 [ 848.785165] ? genl_rcv+0x19/0x40 [ 848.788623] genl_rcv_msg+0xc6/0x170 [ 848.792348] netlink_rcv_skb+0x172/0x440 [ 848.796412] ? genl_family_rcv_msg+0x1120/0x1120 [ 848.801156] ? netlink_ack+0xbc0/0xbc0 [ 848.805036] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 848.810216] ? netlink_skb_destructor+0x210/0x210 [ 848.815054] genl_rcv+0x28/0x40 [ 848.818323] netlink_unicast+0x58b/0x740 [ 848.822379] ? netlink_attachskb+0x970/0x970 [ 848.826779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.832305] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 848.837312] ? security_netlink_send+0x88/0xb0 [ 848.841887] netlink_sendmsg+0x9f0/0xfa0 [ 848.845949] ? netlink_unicast+0x740/0x740 [ 848.850184] ? security_socket_sendmsg+0x94/0xc0 [ 848.854928] ? netlink_unicast+0x740/0x740 [ 848.859155] sock_sendmsg+0xd5/0x120 [ 848.862863] ___sys_sendmsg+0x805/0x940 [ 848.866838] ? copy_msghdr_from_user+0x560/0x560 [ 848.871593] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 848.877120] ? proc_fail_nth_write+0x96/0x1f0 [ 848.881618] ? __fget_light+0x2ef/0x430 [ 848.885583] ? fget_raw+0x20/0x20 [ 848.889031] ? find_held_lock+0x36/0x1c0 [ 848.893086] ? kasan_check_write+0x14/0x20 [ 848.897313] ? wait_for_completion+0x870/0x870 [ 848.901903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 848.907427] ? sockfd_lookup_light+0xc5/0x160 [ 848.911912] __sys_sendmsg+0x115/0x270 [ 848.915789] ? __ia32_sys_shutdown+0x80/0x80 [ 848.920183] ? __sb_end_write+0xac/0xe0 [ 848.924153] ? fput+0x130/0x1a0 [ 848.927423] ? ksys_write+0x1a6/0x250 [ 848.931223] __x64_sys_sendmsg+0x78/0xb0 [ 848.935272] do_syscall_64+0x1b1/0x800 [ 848.939147] ? finish_task_switch+0x1ca/0x840 [ 848.943630] ? syscall_return_slowpath+0x5c0/0x5c0 [ 848.948548] ? syscall_return_slowpath+0x30f/0x5c0 [ 848.953490] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 848.958846] ? trace_hardirqs_off_thunk+0x1a/0x1c 2033/05/18 03:45:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xa7b2]}, 0x10) 2033/05/18 03:45:42 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 848.963682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 848.968860] RIP: 0033:0x455a09 [ 848.972037] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.979740] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 848.987010] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 848.994272] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 849.001526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 849.008779] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000026 [ 849.058809] binder: 25334:25337 transaction failed 29189/-22, size 0-0 line 2856 [ 849.082175] binder: 25334:25341 transaction failed 29189/-22, size 0-0 line 2856 [ 849.104244] binder: 25319:25324 unknown command 0 [ 849.115907] binder: 25319:25324 ioctl c0306201 20007000 returned -22 [ 849.152271] binder: 25319:25324 ioctl c0306201 20000240 returned -11 [ 849.162448] binder: undelivered TRANSACTION_ERROR: 29189 [ 849.178212] binder: undelivered TRANSACTION_ERROR: 29189 [ 849.205516] binder: 25319:25346 unknown command 0 [ 849.212314] binder: 25319:25346 ioctl c0306201 20007000 returned -22 2033/05/18 03:45:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x4a97]}, 0x10) 2033/05/18 03:45:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:43 executing program 3 (fault-call:3 fault-nth:39): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:43 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x0) connect$ax25(r2, &(0x7f0000000040)={0x3, {"db8a11cb03691e"}, 0x1a2}, 0x10) recvfrom$unix(r2, &(0x7f0000000100)=""/80, 0x50, 0x12000, 0x0, 0x0) getpeername$inet6(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000280)=0xfffffffffffffe93) 2033/05/18 03:45:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x40000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) [ 849.583157] binder: 25355:25357 transaction failed 29189/-22, size 0-0 line 2856 [ 849.590016] binder: 25354:25359 transaction failed 29189/-22, size 0-0 line 2856 [ 849.592792] FAULT_INJECTION: forcing a failure. [ 849.592792] name failslab, interval 1, probability 0, space 0, times 0 [ 849.609655] CPU: 1 PID: 25352 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 849.616948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.626395] Call Trace: [ 849.628994] dump_stack+0x1b9/0x294 2033/05/18 03:45:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 849.629516] binder: 25354:25359 transaction failed 29189/-22, size 0-0 line 2856 [ 849.632627] ? dump_stack_print_info.cold.2+0x52/0x52 [ 849.632644] ? kobject_uevent_env+0x62e/0xea0 [ 849.632669] should_fail.cold.4+0xa/0x1a [ 849.632687] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 849.632703] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 849.664342] ? __might_sleep+0x95/0x190 [ 849.668324] ? graph_lock+0x170/0x170 [ 849.672130] ? __mutex_lock+0x7d9/0x17f0 [ 849.676197] ? string+0x21d/0x2c0 2033/05/18 03:45:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 849.679655] ? kobject_uevent_env+0x62e/0xea0 [ 849.684160] ? find_held_lock+0x36/0x1c0 [ 849.688239] ? __lock_is_held+0xb5/0x140 [ 849.692334] ? check_same_owner+0x320/0x320 [ 849.696674] ? rcu_note_context_switch+0x710/0x710 [ 849.701611] ? put_dec+0xf0/0xf0 [ 849.704982] ? format_decode+0x1a9/0xae0 [ 849.709053] __should_failslab+0x124/0x180 [ 849.713295] should_failslab+0x9/0x14 [ 849.717102] kmem_cache_alloc_node+0x272/0x780 [ 849.721699] __alloc_skb+0x111/0x780 [ 849.725418] ? skb_scrub_packet+0x580/0x580 2033/05/18 03:45:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 849.726848] binder: undelivered TRANSACTION_ERROR: 29189 [ 849.729753] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 849.729781] ? netlink_has_listeners+0x2ff/0x4c0 [ 849.729798] ? netlink_tap_init_net+0x3c0/0x3c0 [ 849.729823] kobject_uevent_env+0x801/0xea0 [ 849.754131] ? _raw_spin_unlock_irq+0x27/0x70 [ 849.758644] kobject_uevent+0x1f/0x30 [ 849.762456] driver_bound+0x1a3/0x220 [ 849.766268] device_bind_driver+0xb3/0xd0 [ 849.770101] binder: 25373:25375 unknown command 0 [ 849.770416] mac80211_hwsim_new_radio+0x451/0x3410 [ 849.770433] ? graph_lock+0x170/0x170 2033/05/18 03:45:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00?', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 849.770455] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 849.770472] ? lock_release+0xa10/0xa10 [ 849.787850] binder: 25373:25375 ioctl c0306201 20007000 returned -22 [ 849.790564] ? check_same_owner+0x320/0x320 [ 849.790586] ? rcu_note_context_switch+0x710/0x710 [ 849.790602] ? __lock_acquire+0x7f5/0x5140 [ 849.790620] ? __might_sleep+0x95/0x190 [ 849.790641] ? kasan_check_write+0x14/0x20 [ 849.818397] binder: 25373:25375 ioctl c0306201 20000240 returned -11 [ 849.818472] ? __mutex_lock+0x7d9/0x17f0 [ 849.833375] ? genl_rcv_msg+0x13a/0x170 [ 849.837364] ? __lock_acquire+0x7f5/0x5140 [ 849.838700] binder: 25373:25375 unknown command 0 [ 849.841603] ? mutex_trylock+0x2a0/0x2a0 [ 849.841619] ? graph_lock+0x170/0x170 [ 849.841639] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 849.841657] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 849.861425] binder: 25373:25375 ioctl c0306201 20007000 returned -22 [ 849.864509] ? validate_nla+0x2d9/0x7b0 [ 849.864528] hwsim_new_radio_nl+0x7b8/0xa60 [ 849.864546] ? mac80211_hwsim_new_radio+0x3410/0x3410 2033/05/18 03:45:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 849.864567] ? __netlink_ns_capable+0x100/0x130 [ 849.864591] genl_family_rcv_msg+0x889/0x1120 [ 849.893731] ? genl_rcv+0x40/0x40 [ 849.897199] ? lock_downgrade+0x8e0/0x8e0 [ 849.901353] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 849.906384] ? kasan_check_read+0x11/0x20 [ 849.910540] ? lock_acquire+0x1dc/0x520 [ 849.914518] ? genl_rcv+0x19/0x40 [ 849.917986] genl_rcv_msg+0xc6/0x170 [ 849.921710] netlink_rcv_skb+0x172/0x440 [ 849.925778] ? genl_family_rcv_msg+0x1120/0x1120 [ 849.930537] ? netlink_ack+0xbc0/0xbc0 2033/05/18 03:45:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101000, 0x0) openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x3800, 0x1, 0x3f, 0x0, 0x1, 0x100000001}) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000280)={0x4, 0xaa, "b6e01258b9241de10c0cd5a344245ebe448ca9f8e9fce13e082b6950f13d1f489f95cb7d33d0a144eadf3eae087d70b6d79e1d8081431d5cd02c90dbfcb4470e50ac37a2ad280786a6bdd90d79e96067b4038c8cdc1a1419dd89078721e66c9078bdd531580b0694acf520cc12ffb2356a9ff469568533eb6dd8bca3d3888fc60508250cbc8205408589b58d7dc723a65f8fb9043213645cad48ad905d4930be9238479ad68cc2023510"}) [ 849.934426] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 849.939622] ? netlink_skb_destructor+0x210/0x210 [ 849.944477] genl_rcv+0x28/0x40 [ 849.947761] netlink_unicast+0x58b/0x740 [ 849.951832] ? netlink_attachskb+0x970/0x970 [ 849.956246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 849.961783] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 849.966805] ? security_netlink_send+0x88/0xb0 [ 849.971395] netlink_sendmsg+0x9f0/0xfa0 [ 849.973907] binder: 25393:25395 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xaff]}, 0x10) 2033/05/18 03:45:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 849.975469] ? netlink_unicast+0x740/0x740 [ 849.975492] ? security_socket_sendmsg+0x94/0xc0 [ 849.975507] ? netlink_unicast+0x740/0x740 [ 849.975527] sock_sendmsg+0xd5/0x120 [ 850.000124] ___sys_sendmsg+0x805/0x940 [ 850.003630] binder: 25393:25395 transaction failed 29189/-22, size 0-0 line 2856 [ 850.004108] ? copy_msghdr_from_user+0x560/0x560 [ 850.004133] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 850.021923] ? proc_fail_nth_write+0x96/0x1f0 [ 850.026430] ? __fget_light+0x2ef/0x430 [ 850.030411] ? fget_raw+0x20/0x20 [ 850.033867] ? find_held_lock+0x36/0x1c0 [ 850.037939] ? kasan_check_write+0x14/0x20 [ 850.042190] ? wait_for_completion+0x870/0x870 [ 850.046784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 850.052335] ? sockfd_lookup_light+0xc5/0x160 [ 850.056835] __sys_sendmsg+0x115/0x270 [ 850.060739] ? __ia32_sys_shutdown+0x80/0x80 [ 850.065154] ? __sb_end_write+0xac/0xe0 [ 850.069139] ? fput+0x130/0x1a0 [ 850.072425] ? ksys_write+0x1a6/0x250 [ 850.076238] __x64_sys_sendmsg+0x78/0xb0 [ 850.080298] do_syscall_64+0x1b1/0x800 [ 850.084192] ? finish_task_switch+0x1ca/0x840 [ 850.088695] ? syscall_return_slowpath+0x5c0/0x5c0 [ 850.093629] ? syscall_return_slowpath+0x30f/0x5c0 [ 850.098564] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 850.103941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 850.108795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 850.113974] RIP: 0033:0x455a09 [ 850.117183] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.124967] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 850.132224] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 850.139485] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 850.146741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 850.154009] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000027 [ 850.165273] binder: 25355:25357 ioctl 10 20000240 returned -22 [ 850.193191] binder: 25355:25357 transaction failed 29189/-22, size 0-0 line 2856 [ 850.220639] binder: 25355:25409 ioctl 10 20000240 returned -22 [ 850.266755] binder: undelivered TRANSACTION_ERROR: 29189 [ 850.272736] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:44 executing program 0: syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb7e, 0xd6300) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x4) 2033/05/18 03:45:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x2756000000000000]}, 0x10) 2033/05/18 03:45:44 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x2000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:44 executing program 3 (fault-call:3 fault-nth:40): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 851.134412] binder: 25414:25416 transaction failed 29189/-22, size 0-0 line 2856 [ 851.158093] binder: 25427:25428 transaction failed 29189/-22, size 0-0 line 2856 [ 851.174449] FAULT_INJECTION: forcing a failure. 2033/05/18 03:45:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xaf2d0000]}, 0x10) [ 851.174449] name failslab, interval 1, probability 0, space 0, times 0 [ 851.185774] CPU: 0 PID: 25425 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 851.193055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.202513] Call Trace: [ 851.205122] dump_stack+0x1b9/0x294 [ 851.208766] ? dump_stack_print_info.cold.2+0x52/0x52 [ 851.213966] ? lock_downgrade+0x8e0/0x8e0 [ 851.218142] should_fail.cold.4+0xa/0x1a [ 851.222305] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 851.227427] ? graph_lock+0x170/0x170 [ 851.231235] ? kernel_text_address+0x79/0xf0 [ 851.235778] ? __unwind_start+0x166/0x330 [ 851.239939] ? find_held_lock+0x36/0x1c0 [ 851.244019] ? __lock_is_held+0xb5/0x140 [ 851.248096] ? intel_dump_pipe_config+0xcf0/0x2000 [ 851.253055] ? check_same_owner+0x320/0x320 [ 851.257386] ? device_bind_driver+0xb3/0xd0 [ 851.261714] ? mac80211_hwsim_new_radio+0x451/0x3410 [ 851.266838] ? rcu_note_context_switch+0x710/0x710 [ 851.271783] ? genl_rcv+0x28/0x40 [ 851.275244] ? netlink_unicast+0x58b/0x740 [ 851.279485] ? netlink_sendmsg+0x9f0/0xfa0 [ 851.283732] __should_failslab+0x124/0x180 [ 851.287982] should_failslab+0x9/0x14 [ 851.291786] kmem_cache_alloc+0x2af/0x760 [ 851.295938] skb_clone+0x1ed/0x4f0 [ 851.299481] ? refcount_add_not_zero+0x250/0x320 [ 851.304228] ? skb_split+0x11d0/0x11d0 [ 851.308104] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 851.313115] ? netlink_trim+0x1b2/0x370 [ 851.317079] ? netlink_skb_destructor+0x210/0x210 [ 851.321912] ? cleanup_uevent_env+0x40/0x40 [ 851.326227] netlink_broadcast_filtered+0x1024/0x1580 [ 851.331417] ? __netlink_sendskb+0xd0/0xd0 [ 851.335692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 851.341229] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 851.345989] ? refcount_add_not_zero+0x320/0x320 [ 851.350750] ? cleanup_uevent_env+0x40/0x40 [ 851.355067] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 851.360077] kobject_uevent_env+0x6e4/0xea0 [ 851.364401] ? _raw_spin_unlock_irq+0x27/0x70 [ 851.368901] kobject_uevent+0x1f/0x30 [ 851.372711] driver_bound+0x1a3/0x220 [ 851.376500] device_bind_driver+0xb3/0xd0 [ 851.380648] mac80211_hwsim_new_radio+0x451/0x3410 [ 851.385573] ? graph_lock+0x170/0x170 [ 851.389371] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 851.395506] ? lock_release+0xa10/0xa10 [ 851.399466] ? check_same_owner+0x320/0x320 [ 851.403780] ? rcu_note_context_switch+0x710/0x710 [ 851.408694] ? __lock_acquire+0x7f5/0x5140 [ 851.412926] ? __might_sleep+0x95/0x190 [ 851.416895] ? kasan_check_write+0x14/0x20 [ 851.421117] ? __mutex_lock+0x7d9/0x17f0 [ 851.425168] ? genl_rcv_msg+0x13a/0x170 [ 851.429133] ? __lock_acquire+0x7f5/0x5140 [ 851.433356] ? mutex_trylock+0x2a0/0x2a0 [ 851.437405] ? perf_trace_lock+0xd6/0x900 [ 851.441569] ? graph_lock+0x170/0x170 [ 851.445374] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 851.450557] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 851.455569] ? validate_nla+0x2d9/0x7b0 [ 851.459534] hwsim_new_radio_nl+0x7b8/0xa60 [ 851.463848] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 851.469037] ? __netlink_ns_capable+0x100/0x130 [ 851.473699] genl_family_rcv_msg+0x889/0x1120 [ 851.478189] ? genl_rcv+0x40/0x40 [ 851.481638] ? lock_downgrade+0x8e0/0x8e0 [ 851.485780] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 851.490799] ? lock_acquire+0x1dc/0x520 [ 851.494759] ? genl_rcv+0x19/0x40 [ 851.498214] genl_rcv_msg+0xc6/0x170 [ 851.501917] netlink_rcv_skb+0x172/0x440 [ 851.505965] ? genl_family_rcv_msg+0x1120/0x1120 [ 851.510708] ? netlink_ack+0xbc0/0xbc0 [ 851.514584] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 851.519763] ? netlink_skb_destructor+0x210/0x210 [ 851.524599] genl_rcv+0x28/0x40 [ 851.527866] netlink_unicast+0x58b/0x740 [ 851.531919] ? netlink_attachskb+0x970/0x970 [ 851.536324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 851.541850] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 851.546856] ? security_netlink_send+0x88/0xb0 [ 851.551436] netlink_sendmsg+0x9f0/0xfa0 [ 851.555491] ? netlink_unicast+0x740/0x740 [ 851.559715] ? security_socket_sendmsg+0x94/0xc0 [ 851.564457] ? netlink_unicast+0x740/0x740 [ 851.568686] sock_sendmsg+0xd5/0x120 [ 851.572399] ___sys_sendmsg+0x805/0x940 [ 851.576369] ? copy_msghdr_from_user+0x560/0x560 [ 851.581120] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 851.586640] ? proc_fail_nth_write+0x96/0x1f0 [ 851.591130] ? __fget_light+0x2ef/0x430 [ 851.595093] ? fget_raw+0x20/0x20 [ 851.598535] ? find_held_lock+0x36/0x1c0 [ 851.602585] ? kasan_check_write+0x14/0x20 [ 851.606817] ? wait_for_completion+0x870/0x870 [ 851.611396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 851.616921] ? sockfd_lookup_light+0xc5/0x160 [ 851.621404] __sys_sendmsg+0x115/0x270 [ 851.625286] ? __ia32_sys_shutdown+0x80/0x80 [ 851.629690] ? __sb_end_write+0xac/0xe0 [ 851.633662] ? fput+0x130/0x1a0 [ 851.636929] ? ksys_write+0x1a6/0x250 [ 851.640729] __x64_sys_sendmsg+0x78/0xb0 [ 851.644787] do_syscall_64+0x1b1/0x800 [ 851.648664] ? finish_task_switch+0x1ca/0x840 [ 851.653148] ? syscall_return_slowpath+0x5c0/0x5c0 [ 851.658081] ? syscall_return_slowpath+0x30f/0x5c0 [ 851.663003] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 851.668372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 851.673208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 851.678391] RIP: 0033:0x455a09 [ 851.681573] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.689281] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 851.696537] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 851.703795] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 851.711048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 851.718302] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000028 2033/05/18 03:45:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000006", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xb2a7]}, 0x10) 2033/05/18 03:45:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xba3, 0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xfffffffffffffffa, 0x4, 0x7, 0x8, r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0xa4086558933dab31) 2033/05/18 03:45:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 851.731370] binder: 25414:25416 transaction failed 29189/-22, size 0-0 line 2856 [ 851.736539] binder: 25427:25439 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:45 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:45 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000003", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 851.813768] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.819534] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.846611] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.874081] binder: 25449:25451 transaction failed 29189/-22, size 0-0 line 2856 [ 851.882870] binder: 25454:25455 transaction failed 29189/-22, size 0-0 line 2856 [ 851.913122] binder: 25449:25451 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:45 executing program 3 (fault-call:3 fault-nth:41): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 851.933370] binder: 25454:25455 transaction failed 29189/-22, size 0-0 line 2856 [ 851.975135] FAULT_INJECTION: forcing a failure. [ 851.975135] name failslab, interval 1, probability 0, space 0, times 0 [ 851.981979] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.986464] CPU: 1 PID: 25465 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 851.999149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.008505] Call Trace: [ 852.011104] dump_stack+0x1b9/0x294 [ 852.014721] ? dump_stack_print_info.cold.2+0x52/0x52 [ 852.019896] ? lock_downgrade+0x8e0/0x8e0 [ 852.024046] should_fail.cold.4+0xa/0x1a [ 852.028203] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 852.033296] ? graph_lock+0x170/0x170 [ 852.037085] ? kernel_text_address+0x79/0xf0 [ 852.041480] ? __unwind_start+0x166/0x330 [ 852.045626] ? find_held_lock+0x36/0x1c0 [ 852.049682] ? __lock_is_held+0xb5/0x140 [ 852.053734] ? check_same_owner+0x320/0x320 [ 852.058048] ? device_bind_driver+0xb3/0xd0 [ 852.062357] ? mac80211_hwsim_new_radio+0x451/0x3410 [ 852.067452] ? rcu_note_context_switch+0x710/0x710 [ 852.072372] ? genl_rcv+0x28/0x40 [ 852.075844] ? netlink_unicast+0x58b/0x740 [ 852.080100] ? netlink_sendmsg+0x9f0/0xfa0 [ 852.084351] __should_failslab+0x124/0x180 [ 852.088583] should_failslab+0x9/0x14 [ 852.092425] kmem_cache_alloc+0x2af/0x760 [ 852.096590] skb_clone+0x1ed/0x4f0 [ 852.100149] ? refcount_add_not_zero+0x250/0x320 [ 852.104926] ? skb_split+0x11d0/0x11d0 [ 852.108829] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 852.113851] ? netlink_trim+0x1b2/0x370 [ 852.117828] ? netlink_skb_destructor+0x210/0x210 [ 852.122662] ? cleanup_uevent_env+0x40/0x40 [ 852.127027] netlink_broadcast_filtered+0x1024/0x1580 [ 852.132225] ? __netlink_sendskb+0xd0/0xd0 [ 852.136463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 852.141991] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 852.146739] ? refcount_add_not_zero+0x320/0x320 [ 852.151481] ? cleanup_uevent_env+0x40/0x40 [ 852.155802] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 852.160838] kobject_uevent_env+0x6e4/0xea0 [ 852.165155] ? _raw_spin_unlock_irq+0x27/0x70 [ 852.169655] kobject_uevent+0x1f/0x30 [ 852.173461] driver_bound+0x1a3/0x220 [ 852.177246] device_bind_driver+0xb3/0xd0 [ 852.181382] mac80211_hwsim_new_radio+0x451/0x3410 [ 852.186297] ? graph_lock+0x170/0x170 [ 852.190089] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 852.196232] ? lock_release+0xa10/0xa10 [ 852.200203] ? check_same_owner+0x320/0x320 [ 852.204519] ? rcu_note_context_switch+0x710/0x710 [ 852.209443] ? __lock_acquire+0x7f5/0x5140 [ 852.213679] ? __might_sleep+0x95/0x190 [ 852.217661] ? kasan_check_write+0x14/0x20 [ 852.221898] ? __mutex_lock+0x7d9/0x17f0 [ 852.225961] ? genl_rcv_msg+0x13a/0x170 [ 852.231035] ? __lock_acquire+0x7f5/0x5140 [ 852.235266] ? mutex_trylock+0x2a0/0x2a0 [ 852.239311] ? perf_trace_lock+0xd6/0x900 [ 852.243454] ? graph_lock+0x170/0x170 [ 852.247254] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 852.252444] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 852.257461] ? validate_nla+0x2d9/0x7b0 [ 852.261447] hwsim_new_radio_nl+0x7b8/0xa60 [ 852.265781] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 852.271016] ? __netlink_ns_capable+0x100/0x130 [ 852.275696] genl_family_rcv_msg+0x889/0x1120 [ 852.280213] ? genl_rcv+0x40/0x40 [ 852.283684] ? lock_downgrade+0x8e0/0x8e0 [ 852.287872] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 852.292893] ? lock_acquire+0x1dc/0x520 [ 852.296855] ? genl_rcv+0x19/0x40 [ 852.300312] genl_rcv_msg+0xc6/0x170 [ 852.304036] netlink_rcv_skb+0x172/0x440 [ 852.308096] ? genl_family_rcv_msg+0x1120/0x1120 [ 852.312948] ? netlink_ack+0xbc0/0xbc0 [ 852.316843] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 852.322041] ? netlink_skb_destructor+0x210/0x210 [ 852.326888] genl_rcv+0x28/0x40 [ 852.330167] netlink_unicast+0x58b/0x740 [ 852.334220] ? netlink_attachskb+0x970/0x970 [ 852.338634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 852.344163] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 852.349173] ? security_netlink_send+0x88/0xb0 [ 852.353765] netlink_sendmsg+0x9f0/0xfa0 [ 852.357831] ? netlink_unicast+0x740/0x740 [ 852.362060] ? security_socket_sendmsg+0x94/0xc0 [ 852.366800] ? netlink_unicast+0x740/0x740 [ 852.371027] sock_sendmsg+0xd5/0x120 [ 852.374732] ___sys_sendmsg+0x805/0x940 [ 852.378703] ? copy_msghdr_from_user+0x560/0x560 [ 852.383463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 852.388993] ? proc_fail_nth_write+0x96/0x1f0 [ 852.393574] ? __fget_light+0x2ef/0x430 [ 852.397551] ? fget_raw+0x20/0x20 [ 852.400993] ? find_held_lock+0x36/0x1c0 [ 852.405054] ? kasan_check_write+0x14/0x20 [ 852.409291] ? wait_for_completion+0x870/0x870 [ 852.413862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 852.419386] ? sockfd_lookup_light+0xc5/0x160 [ 852.423866] __sys_sendmsg+0x115/0x270 [ 852.427736] ? __ia32_sys_shutdown+0x80/0x80 [ 852.432141] ? __sb_end_write+0xac/0xe0 [ 852.436113] ? fput+0x130/0x1a0 [ 852.439386] ? ksys_write+0x1a6/0x250 [ 852.443181] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 852.448033] __x64_sys_sendmsg+0x78/0xb0 [ 852.452100] do_syscall_64+0x1b1/0x800 [ 852.455985] ? finish_task_switch+0x1ca/0x840 [ 852.460474] ? syscall_return_slowpath+0x5c0/0x5c0 [ 852.465406] ? syscall_return_slowpath+0x30f/0x5c0 [ 852.470342] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 852.475701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 852.480535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 852.485711] RIP: 0033:0x455a09 [ 852.488892] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.496596] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 852.503858] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 852.511122] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 852.518373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 852.525634] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000029 [ 852.558230] binder: undelivered TRANSACTION_ERROR: 29189 [ 852.564260] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xef5b0000]}, 0x10) 2033/05/18 03:45:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:46 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000000)="b1"}) 2033/05/18 03:45:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1004000000016) 2033/05/18 03:45:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffc00, 0x2a000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0xfffffffffffffd80) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) userfaultfd(0x80800) 2033/05/18 03:45:46 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:46 executing program 3 (fault-call:3 fault-nth:42): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) [ 852.826352] FAULT_INJECTION: forcing a failure. [ 852.826352] name failslab, interval 1, probability 0, space 0, times 0 [ 852.828641] binder: 25474:25482 transaction failed 29189/-22, size 0-0 line 2856 [ 852.837650] CPU: 1 PID: 25473 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 852.850305] binder: 25480:25483 transaction failed 29189/-22, size 0-0 line 2856 [ 852.852420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.852426] Call Trace: [ 852.852451] dump_stack+0x1b9/0x294 [ 852.852474] ? dump_stack_print_info.cold.2+0x52/0x52 [ 852.852489] ? is_bpf_text_address+0xd7/0x170 [ 852.852508] ? kernel_text_address+0x79/0xf0 [ 852.889642] ? __unwind_start+0x166/0x330 [ 852.893789] should_fail.cold.4+0xa/0x1a [ 852.897854] ? __save_stack_trace+0x7e/0xd0 [ 852.902170] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 852.907272] ? graph_lock+0x170/0x170 [ 852.911064] ? save_stack+0x43/0xd0 [ 852.914684] ? kasan_kmalloc+0xc4/0xe0 [ 852.918568] ? kasan_slab_alloc+0x12/0x20 [ 852.922706] ? find_held_lock+0x36/0x1c0 [ 852.926759] ? __lock_is_held+0xb5/0x140 [ 852.930819] ? check_same_owner+0x320/0x320 [ 852.935131] ? rcu_note_context_switch+0x710/0x710 [ 852.940066] __should_failslab+0x124/0x180 [ 852.944368] should_failslab+0x9/0x14 [ 852.948154] kmem_cache_alloc_node_trace+0x26f/0x770 [ 852.953254] __kmalloc_node_track_caller+0x33/0x70 [ 852.958273] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 852.963028] __alloc_skb+0x14d/0x780 [ 852.966734] ? skb_scrub_packet+0x580/0x580 [ 852.971047] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 852.976235] ? netlink_has_listeners+0x2ff/0x4c0 [ 852.980980] ? netlink_tap_init_net+0x3c0/0x3c0 [ 852.985656] kobject_uevent_env+0x801/0xea0 [ 852.989962] ? _raw_spin_unlock_irq+0x27/0x70 [ 852.994451] kobject_uevent+0x1f/0x30 [ 852.998240] driver_bound+0x1a3/0x220 [ 853.002033] device_bind_driver+0xb3/0xd0 [ 853.006169] mac80211_hwsim_new_radio+0x451/0x3410 [ 853.011085] ? graph_lock+0x170/0x170 [ 853.014881] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 853.021026] ? lock_release+0xa10/0xa10 [ 853.024988] ? check_same_owner+0x320/0x320 [ 853.029303] ? rcu_note_context_switch+0x710/0x710 [ 853.034220] ? __lock_acquire+0x7f5/0x5140 [ 853.038444] ? __might_sleep+0x95/0x190 [ 853.042408] ? kasan_check_write+0x14/0x20 [ 853.046632] ? __mutex_lock+0x7d9/0x17f0 [ 853.050684] ? genl_rcv_msg+0x13a/0x170 [ 853.054649] ? __lock_acquire+0x7f5/0x5140 [ 853.058879] ? mutex_trylock+0x2a0/0x2a0 [ 853.062937] ? graph_lock+0x170/0x170 [ 853.066727] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 853.071908] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 853.076918] ? validate_nla+0x2d9/0x7b0 [ 853.080883] hwsim_new_radio_nl+0x7b8/0xa60 [ 853.085205] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 853.090386] ? __netlink_ns_capable+0x100/0x130 [ 853.095048] genl_family_rcv_msg+0x889/0x1120 [ 853.099538] ? genl_rcv+0x40/0x40 [ 853.102978] ? lock_downgrade+0x8e0/0x8e0 [ 853.107114] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 853.112125] ? kasan_check_read+0x11/0x20 [ 853.116277] ? lock_acquire+0x1dc/0x520 [ 853.120237] ? genl_rcv+0x19/0x40 [ 853.123693] genl_rcv_msg+0xc6/0x170 [ 853.127408] netlink_rcv_skb+0x172/0x440 [ 853.131480] ? genl_family_rcv_msg+0x1120/0x1120 [ 853.136233] ? netlink_ack+0xbc0/0xbc0 [ 853.140110] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 853.145289] ? netlink_skb_destructor+0x210/0x210 [ 853.150124] genl_rcv+0x28/0x40 [ 853.153393] netlink_unicast+0x58b/0x740 [ 853.157533] ? netlink_attachskb+0x970/0x970 [ 853.161928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 853.167452] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 853.172464] ? security_netlink_send+0x88/0xb0 [ 853.177041] netlink_sendmsg+0x9f0/0xfa0 [ 853.181099] ? netlink_unicast+0x740/0x740 [ 853.185324] ? security_socket_sendmsg+0x94/0xc0 [ 853.190069] ? netlink_unicast+0x740/0x740 [ 853.194293] sock_sendmsg+0xd5/0x120 [ 853.197995] ___sys_sendmsg+0x805/0x940 [ 853.201974] ? copy_msghdr_from_user+0x560/0x560 [ 853.206728] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 853.212254] ? proc_fail_nth_write+0x96/0x1f0 [ 853.216746] ? __fget_light+0x2ef/0x430 [ 853.220709] ? fget_raw+0x20/0x20 [ 853.224155] ? find_held_lock+0x36/0x1c0 [ 853.228206] ? kasan_check_write+0x14/0x20 [ 853.232434] ? wait_for_completion+0x870/0x870 [ 853.237020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 853.242551] ? sockfd_lookup_light+0xc5/0x160 [ 853.247040] __sys_sendmsg+0x115/0x270 [ 853.250917] ? __ia32_sys_shutdown+0x80/0x80 [ 853.255313] ? __sb_end_write+0xac/0xe0 [ 853.259279] ? fput+0x130/0x1a0 [ 853.262555] ? ksys_write+0x1a6/0x250 [ 853.266356] __x64_sys_sendmsg+0x78/0xb0 [ 853.270407] do_syscall_64+0x1b1/0x800 [ 853.274284] ? finish_task_switch+0x1ca/0x840 [ 853.278768] ? syscall_return_slowpath+0x5c0/0x5c0 [ 853.283684] ? syscall_return_slowpath+0x30f/0x5c0 [ 853.292078] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 853.297434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 853.302273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 853.307456] RIP: 0033:0x455a09 [ 853.310634] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.318331] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 853.325593] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 853.332846] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 853.340105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 853.347802] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000002a [ 853.367985] binder: 25480:25483 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xe7e00000]}, 0x10) [ 853.387270] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.415787] binder: 25474:25489 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000000ffffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:47 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840ea596d0ea0067b48f162ef326177894888343489f2a82080085ee9c6d049c5140790e80fa415fab43dccec1674c7dfe905e49862225aecac36fe9e8d01356f7ae151ec49ab28fea2ba346019917682c2f9c9bfb73c1b19381fddcb719362f2934ea25c81a2d8960b3e440eb7eb"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) [ 853.458712] binder: undelivered TRANSACTION_ERROR: 29189 2033/05/18 03:45:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:47 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) 2033/05/18 03:45:47 executing program 3 (fault-call:3 fault-nth:43): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:45:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) getsockopt(r1, 0x6, 0x3, &(0x7f00000001c0)=""/147, &(0x7f0000000280)=0x93) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80002, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x68, &(0x7f0000000380)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e24, 0x101, @empty, 0x2eb}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0xd1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xfffffffffffffff7}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={r4, 0x8, 0x6}, 0x8) recvfrom(r1, &(0x7f00000002c0)=""/32, 0x20, 0x40000000, &(0x7f0000000300)=@ipx={0x4, 0x5, 0x8, "06246ab3f6cf"}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90) 2033/05/18 03:45:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xbf95]}, 0x10) [ 853.529243] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.548367] binder: 25503:25504 got transaction to invalid handle [ 853.554869] binder: 25503:25504 transaction failed 29201/-22, size -5405984608319139833--1594336441651114947 line 2856 [ 853.559950] binder: 25505:25506 transaction failed 29189/-22, size 0-0 line 2856 2033/05/18 03:45:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2033/05/18 03:45:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000feffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 853.599256] binder: 25505:25506 transaction failed 29189/-22, size 0-0 line 2856 [ 853.626793] binder: 25503:25504 got transaction to invalid handle [ 853.633141] binder: 25503:25504 transaction failed 29201/-22, size -5405984608319139833--1594336441651114947 line 2856 2033/05/18 03:45:47 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"}) [ 853.679222] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.685303] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.721645] binder: 25530:25531 transaction failed 29189/-22, size 0-0 line 2856 [ 853.741527] binder: 25530:25531 ioctl c0306225 20000240 returned -22 [ 853.750302] binder: undelivered TRANSACTION_ERROR: 29201 [ 853.751445] binder: 25530:25531 transaction failed 29189/-22, size 0-0 line 2856 [ 853.777823] FAULT_INJECTION: forcing a failure. [ 853.777823] name failslab, interval 1, probability 0, space 0, times 0 [ 853.785278] binder: 25530:25533 ioctl c0306225 20000240 returned -22 [ 853.789629] CPU: 0 PID: 25534 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75 [ 853.803365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.812721] Call Trace: [ 853.815319] dump_stack+0x1b9/0x294 [ 853.818987] ? dump_stack_print_info.cold.2+0x52/0x52 [ 853.824219] should_fail.cold.4+0xa/0x1a [ 853.827689] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.828289] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 853.828310] ? graph_lock+0x170/0x170 [ 853.828325] ? graph_lock+0x170/0x170 [ 853.834233] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.838857] ? find_held_lock+0x36/0x1c0 [ 853.838878] ? __lock_is_held+0xb5/0x140 [ 853.838907] ? check_same_owner+0x320/0x320 [ 853.838926] ? rcu_note_context_switch+0x710/0x710 [ 853.869246] __should_failslab+0x124/0x180 [ 853.873493] should_failslab+0x9/0x14 [ 853.877302] kmem_cache_alloc+0x2af/0x760 [ 853.881477] ? is_bpf_text_address+0xd7/0x170 [ 853.885979] ? kernel_text_address+0x79/0xf0 [ 853.890397] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 853.895511] __kernfs_new_node+0xe7/0x580 [ 853.899674] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 853.904450] ? lock_downgrade+0x8e0/0x8e0 [ 853.908608] kernfs_new_node+0x80/0xf0 [ 853.912521] kernfs_create_dir_ns+0x3d/0x140 [ 853.916931] sysfs_create_dir_ns+0xbe/0x1d0 [ 853.921253] kobject_add_internal+0x354/0xac0 [ 853.925752] ? kobj_ns_type_registered+0x60/0x60 [ 853.930512] ? kfree_const+0x59/0x70 [ 853.934230] ? rcu_read_lock_sched_held+0x108/0x120 [ 853.939244] ? kfree+0x1e9/0x260 [ 853.942611] ? kfree_const+0x5e/0x70 [ 853.946332] kobject_add+0x13a/0x190 [ 853.950045] ? kset_create_and_add+0x190/0x190 [ 853.954638] ? kmem_cache_alloc_trace+0x616/0x780 [ 853.959480] ? kasan_check_write+0x14/0x20 [ 853.963716] ? do_raw_spin_lock+0xc1/0x200 [ 853.967978] get_device_parent.isra.27+0x360/0x5a0 [ 853.972915] device_add+0x2f1/0x16d0 [ 853.976648] ? device_private_init+0x230/0x230 [ 853.981231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 853.986776] wiphy_register+0x178a/0x2430 [ 853.990935] ? wiphy_unregister+0x12b0/0x12b0 [ 853.995435] ? rcu_read_lock_sched_held+0x108/0x120 [ 854.000489] ? __kmalloc+0x5f9/0x760 [ 854.004209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 854.009746] ? ieee80211_cs_list_valid+0x7c/0x440 [ 854.014586] ? ieee80211_register_hw+0xc0b/0x35d0 [ 854.019435] ieee80211_register_hw+0x13cd/0x35d0 [ 854.024195] ? rcu_bh_force_quiescent_state+0x11/0x20 [ 854.029384] ? ieee80211_free_ack_frame+0x60/0x60 [ 854.034233] mac80211_hwsim_new_radio+0x1d9b/0x3410 [ 854.039259] ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50 [ 854.045412] ? check_same_owner+0x320/0x320 [ 854.049740] ? __lock_acquire+0x7f5/0x5140 [ 854.053977] ? __might_sleep+0x95/0x190 [ 854.057953] ? kasan_check_write+0x14/0x20 [ 854.062193] ? __mutex_lock+0x7d9/0x17f0 [ 854.066256] ? genl_rcv_msg+0x13a/0x170 [ 854.070230] ? __lock_acquire+0x7f5/0x5140 [ 854.074468] ? mutex_trylock+0x2a0/0x2a0 [ 854.078526] ? graph_lock+0x170/0x170 [ 854.082333] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 854.087522] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 854.092536] ? validate_nla+0x2d9/0x7b0 [ 854.096517] hwsim_new_radio_nl+0x7b8/0xa60 [ 854.100840] ? mac80211_hwsim_new_radio+0x3410/0x3410 [ 854.106033] ? __netlink_ns_capable+0x100/0x130 [ 854.110709] genl_family_rcv_msg+0x889/0x1120 [ 854.115235] ? genl_rcv+0x40/0x40 [ 854.118692] ? lock_downgrade+0x8e0/0x8e0 [ 854.122841] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 854.127861] ? kasan_check_read+0x11/0x20 [ 854.132016] ? lock_acquire+0x1dc/0x520 [ 854.135989] ? genl_rcv+0x19/0x40 [ 854.139461] genl_rcv_msg+0xc6/0x170 [ 854.143179] netlink_rcv_skb+0x172/0x440 [ 854.147239] ? genl_family_rcv_msg+0x1120/0x1120 [ 854.151997] ? netlink_ack+0xbc0/0xbc0 [ 854.155889] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 854.161080] ? netlink_skb_destructor+0x210/0x210 [ 854.165930] genl_rcv+0x28/0x40 [ 854.169211] netlink_unicast+0x58b/0x740 [ 854.173284] ? netlink_attachskb+0x970/0x970 [ 854.177700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 854.183238] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 854.188258] ? security_netlink_send+0x88/0xb0 [ 854.192841] netlink_sendmsg+0x9f0/0xfa0 [ 854.196912] ? netlink_unicast+0x740/0x740 [ 854.201149] ? security_socket_sendmsg+0x94/0xc0 [ 854.205902] ? netlink_unicast+0x740/0x740 [ 854.210140] sock_sendmsg+0xd5/0x120 [ 854.213870] ___sys_sendmsg+0x805/0x940 [ 854.217848] ? copy_msghdr_from_user+0x560/0x560 [ 854.222623] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 854.228166] ? proc_fail_nth_write+0x96/0x1f0 [ 854.232674] ? __fget_light+0x2ef/0x430 [ 854.236650] ? fget_raw+0x20/0x20 [ 854.240104] ? find_held_lock+0x36/0x1c0 [ 854.244169] ? kasan_check_write+0x14/0x20 [ 854.248414] ? wait_for_completion+0x870/0x870 [ 854.253003] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 854.258542] ? sockfd_lookup_light+0xc5/0x160 [ 854.263049] __sys_sendmsg+0x115/0x270 [ 854.266935] ? __ia32_sys_shutdown+0x80/0x80 [ 854.271341] ? __sb_end_write+0xac/0xe0 [ 854.275325] ? fput+0x130/0x1a0 [ 854.278602] ? ksys_write+0x1a6/0x250 [ 854.282414] __x64_sys_sendmsg+0x78/0xb0 [ 854.288040] do_syscall_64+0x1b1/0x800 [ 854.291931] ? finish_task_switch+0x1ca/0x840 [ 854.296427] ? syscall_return_slowpath+0x5c0/0x5c0 [ 854.301356] ? syscall_return_slowpath+0x30f/0x5c0 [ 854.306293] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 854.311662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 854.316509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 854.321696] RIP: 0033:0x455a09 [ 854.324880] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.332594] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09 [ 854.339862] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014 [ 854.347127] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 854.354393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 854.361656] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000002b [ 854.369339] kobject_add_internal failed for ieee80211 (error: -12 parent: hwsim113) [ 854.377682] ------------[ cut here ]------------ [ 854.382880] kernfs: ns required in 'ieee80211' for 'phy112'