ROR: 29189
[  751.743689] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.750298] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.758380] device bridge_slave_0 entered promiscuous mode
[  751.796069] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.802491] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.810303] device bridge_slave_1 entered promiscuous mode
[  751.847328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  751.885755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  751.996237] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  752.037555] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  752.216952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  752.225220] team0: Port device team_slave_0 added
[  752.263826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  752.271193] team0: Port device team_slave_1 added
[  752.301908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  752.342211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  752.383473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  752.416351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  752.678997] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.685414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  752.692115] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.698499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  752.705782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  753.568172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  753.600494] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.692138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  753.781393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  753.787662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  753.795247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  753.877200] 8021q: adding VLAN 0 to HW filter on device team0
2033/05/18 03:44:08 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf807]}, 0x10)

2033/05/18 03:44:08 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xfc00}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:08 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:08 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffdef, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:08 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000001480)='./file1\x00', &(0x7f0000001400), 0x24f)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x5, &(0x7f00000012c0)=[{&(0x7f0000000180)="5a939b0e0087aab5f87018a47d533c9069762b41fc73bab7e1d028f462fbd8041d693f4ae952", 0x26}, {&(0x7f00000001c0)="865baa4d27fffdc4e62106a92bf25fd683df8586516e147a718d830c9297495b17443451e591caccc18327c3cda03ef9930fb2fc479d3a9342a52292a78dc23d1f09e88f02c02a5aa1602a996985604a36f028f30339097114a3000a9a327b777f63982c7726534bcb3f5a18e5f37141", 0x70, 0x2}, {&(0x7f0000000240)="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", 0x1000, 0x20000000}, {&(0x7f0000001240)="01b785e9bc3134d5083d28d2968e05fe3a78991d92", 0x15, 0x3f}, {&(0x7f0000001280)="bd8fdb261ebee26f49655bfc7e69d4efe9d9be872463be7bb116a822968a8cd083f3", 0x22, 0x200}], 0x20, &(0x7f0000001380)=ANY=[@ANYBLOB="7573b0455ff073753bf0a290efb321f562766f9ecd94ceccc26c5f726d5f"])
lremovexattr(&(0x7f0000001440)='./file0\x00', &(0x7f0000001500)=@random={'os2.', 'em1-)(-^\x00'})
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

2033/05/18 03:44:08 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00ef000000000000378e2864cd10ac34b9fdb39e2b69e2ef9d544fc2e33282b6467c85cbdec09ee8e53d679e9597eed93850b856847b520f3d1475b09146ab09f64bc305b4a77910c11e834f6263360eee6e553d1e8e1061cf30f85202414bdcd41bb373d3c5c5a0352cd30aa2f6aeac6270635d3ab09e759d92996911a415eed2914b464a4bf9d248182497fe4045fbce982569ea769cb97a"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0babb6fe01a944aaaf7cf2bf13d1ef5802b75269e0"], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000440)={0x5, 0x70, 0x2, 0x1, 0x27, 0x6, 0x0, 0x3, 0x30224, 0x2, 0x3bd4a674, 0x6, 0x9, 0x1, 0x9, 0x8, 0x2, 0xe, 0x239, 0xfffffffffffffffd, 0x8, 0x52fc, 0x5, 0x5, 0x80000001, 0x7fff, 0xffffffffffffffff, 0x7f, 0xd59, 0x7fff, 0x800, 0x2, 0x2, 0xfffffffffffffffa, 0x9, 0x2, 0x7, 0x4d, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x100, 0x20, 0xfffffffffffffffb, 0x6, 0xead4, 0x101, 0xe5b}, 0xffffffffffffffff, 0xa, 0xffffffffffffff9c, 0x2)
r4 = accept(r0, &(0x7f00000004c0)=@rc, &(0x7f0000000200)=0x80)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000540)="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", 0x1000)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)})

2033/05/18 03:44:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  755.282398] binder: 19702:19704 transaction failed 29201/-22, size -5295614258035338083--1684697147460191162 line 2971
2033/05/18 03:44:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:09 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  755.338891] binder: 19702:19704 unknown command -21583093
[  755.369443] binder: 19702:19704 ioctl c0306201 200000c0 returned -22
2033/05/18 03:44:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xdb1f]}, 0x10)

[  755.401969] binder: 19702:19704 got reply transaction with no transaction stack
[  755.409558] binder: 19702:19704 transaction failed 29201/-71, size 0-0 line 2763
2033/05/18 03:44:09 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xfc00000000000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:09 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  755.528197] binder_alloc: binder_alloc_mmap_handler: 19702 20001000-20004000 already mapped failed -16
[  755.559213] binder: BINDER_SET_CONTEXT_MGR already set
2033/05/18 03:44:09 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x80000)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x200000001009)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
statx(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x400, 0x804, &(0x7f0000000280))

[  755.591861] binder: 19737:19738 unknown command 0
[  755.614740] binder_alloc: 19702: binder_alloc_buf, no vma
[  755.620539] binder: 19702:19729 transaction failed 29189/-3, size -5295614258035338083--1684697147460191162 line 2971
[  755.623889] binder: 19702:19704 ioctl 40046207 0 returned -16
[  755.637590] binder: 19737:19738 ioctl c0306201 20007000 returned -22
[  755.672317] device bridge_slave_1 left promiscuous mode
[  755.676988] binder: 19737:19738 ioctl c0306201 20000240 returned -11
[  755.678204] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.729060] device bridge_slave_0 left promiscuous mode
[  755.734674] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.746762] binder: 19702:19731 unknown command -21583093
[  755.774871] binder: 19702:19731 ioctl c0306201 200000c0 returned -22
[  755.783484] binder: 19702:19746 got reply transaction with no transaction stack
[  755.791063] binder: 19702:19746 transaction failed 29201/-71, size 0-0 line 2763
[  755.816890] IPVS: ftp: loaded support on port[0] = 21
[  755.832317] team0 (unregistering): Port device team_slave_1 removed
[  755.843881] binder: undelivered TRANSACTION_ERROR: 29201
[  755.849497] binder: undelivered TRANSACTION_ERROR: 29201
[  755.851559] team0 (unregistering): Port device team_slave_0 removed
[  755.867425] bond0 (unregistering): Releasing backup interface bond_slave_1
[  755.882383] bond0 (unregistering): Releasing backup interface bond_slave_0
[  755.911915] bond0 (unregistering): Released all slaves
[  756.512081] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.518498] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.525968] device bridge_slave_0 entered promiscuous mode
[  756.562224] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.568634] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.575936] device bridge_slave_1 entered promiscuous mode
[  756.611329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  756.648481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  756.757108] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  756.796421] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  756.966916] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  756.974395] team0: Port device team_slave_0 added
[  757.010065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  757.017649] team0: Port device team_slave_1 added
[  757.049831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  757.087668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  757.126999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  757.160744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  757.417574] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.423991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  757.430672] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.437081] bridge0: port 1(bridge_slave_0) entered forwarding state
[  757.444399] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  758.248645] 8021q: adding VLAN 0 to HW filter on device bond0
[  758.325670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  758.406135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  758.412346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  758.420366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  758.427912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  758.494777] 8021q: adding VLAN 0 to HW filter on device team0
2033/05/18 03:44:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xaf2d000000000000]}, 0x10)

2033/05/18 03:44:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:12 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:12 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xff00}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:12 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:12 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000040)='./file1\x00', 0x8000, 0xffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

2033/05/18 03:44:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20000114, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  758.995960] binder: 20018:20020 transaction failed 29189/-22, size 0-0 line 2856
[  758.996077] binder: 20011:20017 unknown command 0
2033/05/18 03:44:12 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'vlan0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}})

2033/05/18 03:44:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf401000000000000]}, 0x10)

2033/05/18 03:44:12 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  759.056190] binder: 20011:20017 ioctl c0306201 20007000 returned -22
[  759.094098] binder: 20011:20017 ioctl c0306201 20000240 returned -11
2033/05/18 03:44:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:12 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  759.169802] binder: 20040:20041 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:12 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0xfe80}, &(0x7f0000f81000)=0x90)

[  759.217945] binder: 20047:20049 unknown command 25361
2033/05/18 03:44:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:13 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  759.240864] binder: 20037:20038 transaction failed 29189/-22, size 0-0 line 2856
[  759.249263] binder: 20047:20049 ioctl c0306201 20007000 returned -22
[  759.277593] binder: 20037:20038 ERROR: BC_REGISTER_LOOPER called without request
[  759.286753] binder: 20047:20049 ioctl c0306201 20000240 returned -11
[  759.952821] binder: 20037:20074 got reply transaction with no transaction stack
[  759.960327] binder: 20037:20074 transaction failed 29201/-71, size 0-0 line 2763
2033/05/18 03:44:13 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x200000000000000]}, 0x10)

2033/05/18 03:44:13 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x33fe0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:13 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:13 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:13 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@l2={0x1f, 0x9, {0x9, 0xe8, 0x7, 0x8, 0xffffffffffffffff, 0x5}, 0x7, 0x8}, 0x80)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

2033/05/18 03:44:13 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x80fe}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:13 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'vlan0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}})

[  760.084240] binder: undelivered TRANSACTION_ERROR: 29201
2033/05/18 03:44:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  760.127676] binder: 20079:20081 unknown command 4743953
[  760.147277] binder: 20079:20081 ioctl c0306201 20007000 returned -22
[  760.169889] binder: 20079:20081 ioctl c0306201 20000240 returned -11
2033/05/18 03:44:13 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:13 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:13 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x61b7]}, 0x10)

[  760.243092] binder: 20091:20092 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x100000000000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  760.292877] binder: 20104:20107 got transaction to invalid handle
[  760.299357] binder: 20104:20107 transaction failed 29201/-22, size 0-0 line 2856
[  760.313614] binder: 20091:20092 ERROR: BC_REGISTER_LOOPER called without request
[  760.960564] binder: 20091:20124 got reply transaction with no transaction stack
[  760.968144] binder: 20091:20124 transaction failed 29201/-71, size 0-0 line 2763
2033/05/18 03:44:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:14 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x168f]}, 0x10)

2033/05/18 03:44:14 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:14 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfe800000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:14 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'vlan0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}})

2033/05/18 03:44:14 executing program 0:
r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f00000000c0))
recvfrom(r0, &(0x7f0000000200)=""/48, 0x30, 0x0, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0x80)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x12, 0x1)
r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_fuseblk_mount(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0xe001, r2, r3, 0x8, 0x10001, 0xc0000)
utime(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x1, 0x2})
umount2(&(0x7f0000000100)='./file0\x00', 0x9)
getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)=""/250, 0xfa)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000180)=""/66)
r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x4001)
ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000340)=0x3)

2033/05/18 03:44:14 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7ffff000, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

[  761.096694] binder: undelivered TRANSACTION_ERROR: 29201
[  761.125469] binder: 20129:20132 transaction failed 29189/-22, size 0-0 line 2856
[  761.142793] binder: 20130:20131 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:14 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7e9f]}, 0x10)

2033/05/18 03:44:14 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:15 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  761.261767] device bridge_slave_1 left promiscuous mode
[  761.267363] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.306827] binder: 20143:20145 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:15 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x1000000}, &(0x7f0000f81000)=0x90)

[  761.354406] binder: 20153:20157 transaction failed 29189/-22, size 0-0 line 2856
[  761.355843] binder: 20143:20145 ERROR: BC_REGISTER_LOOPER called without request
[  761.370768] device bridge_slave_0 left promiscuous mode
[  761.376371] bridge0: port 1(bridge_slave_0) entered disabled state
2033/05/18 03:44:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xffffff80]}, 0x10)

2033/05/18 03:44:15 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  761.513798] binder: 20167:20168 transaction failed 29189/-22, size 0-0 line 2856
[  761.530345] team0 (unregistering): Port device team_slave_1 removed
2033/05/18 03:44:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe6af]}, 0x10)

[  761.561822] team0 (unregistering): Port device team_slave_0 removed
2033/05/18 03:44:15 executing program 7:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  761.608333] bond0 (unregistering): Releasing backup interface bond_slave_1
2033/05/18 03:44:15 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xff000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa000000]}, 0x10)

[  761.648881] bond0 (unregistering): Releasing backup interface bond_slave_0
[  761.679759] binder: 20176:20177 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:15 executing program 7:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  761.791371] bond0 (unregistering): Released all slaves
2033/05/18 03:44:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7c9000000000000]}, 0x10)

[  761.857887] binder: 20186:20187 transaction failed 29189/-22, size 0-0 line 2856
[  761.876472] binder: 20154:20155 transaction failed 29189/-22, size 0-0 line 2856
[  761.937082] binder: undelivered TRANSACTION_ERROR: 29189
[  761.998748] binder: 20143:20195 got reply transaction with no transaction stack
[  762.006478] binder: 20143:20195 transaction failed 29201/-71, size 0-0 line 2763
[  762.154241] binder: undelivered TRANSACTION_ERROR: 29201
[  763.015495] IPVS: ftp: loaded support on port[0] = 21
[  763.381722] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.388141] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.395365] device bridge_slave_0 entered promiscuous mode
[  763.422562] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.428973] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.436201] device bridge_slave_1 entered promiscuous mode
[  763.463413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  763.491482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  763.565197] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  763.595100] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  763.703546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  763.710739] team0: Port device team_slave_0 added
[  763.736185] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  763.743512] team0: Port device team_slave_1 added
[  763.771601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  763.799679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  763.828906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  763.858389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  764.106784] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.113160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.119797] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.126149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.975933] 8021q: adding VLAN 0 to HW filter on device bond0
[  765.062138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  765.138289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  765.144457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  765.151588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  765.234389] 8021q: adding VLAN 0 to HW filter on device team0
2033/05/18 03:44:20 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:20 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfec00000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
umount2(&(0x7f0000001580)='/\x00', 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

2033/05/18 03:44:20 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf78f0000]}, 0x10)

2033/05/18 03:44:20 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:20 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x9, 0x1ff, 0x2, 0x5}, {0x4, 0x401, 0x7f, 0x5}, {0xfffffffffffffff7, 0x2, 0xfbb, 0x29a}, {0x10001, 0xfa9, 0x80000001, 0x4}, {0x7f, 0x4, 0x0, 0x581dbf9c}, {0x3, 0xffffffff, 0x0, 0x10000}]}, 0x10)

2033/05/18 03:44:20 executing program 7:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  766.697374] binder: 20467:20469 transaction failed 29189/-22, size 0-0 line 2856
[  766.709572] binder: 20475:20479 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc0", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:20 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:20 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4000000]}, 0x10)

[  766.755314] binder: undelivered TRANSACTION_ERROR: 29189
[  766.768469] binder: 20474:20477 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:20 executing program 7:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  766.848564] binder: 20485:20488 transaction failed 29189/-22, size 0-0 line 2856
[  766.873650] binder: 20474:20477 ERROR: BC_REGISTER_LOOPER called without request
2033/05/18 03:44:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:20 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xff00}, &(0x7f0000f81000)=0x90)

[  766.909228] binder: 20495:20496 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:20 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)})

2033/05/18 03:44:20 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x974a]}, 0x10)

2033/05/18 03:44:20 executing program 0:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffff5f1, 0x4002)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1=0xe0000001, @in=@rand_addr=0x80000000, 0x4e22, 0x0, 0x4e20, 0x4, 0x2, 0x80, 0x20, 0x0, r1, r2}, {0xffffffffd0d8452a, 0x80, 0x6, 0x3f, 0x8, 0x2, 0x8000000000000}, {0x81, 0x1, 0x9, 0x8}, 0x2, 0x6e6bba, 0x1, 0x0, 0x0, 0x2}, {{@in6, 0x4d2, 0x6c}, 0xa, @in=@rand_addr=0x5, 0x3502, 0x4, 0x2, 0x6, 0xa01, 0x9, 0x7e61b0a3}}, 0xe8)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

[  766.959688] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:20 executing program 7:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  767.047996] binder: 20507:20508 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:20 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5627]}, 0x10)

[  767.106481] binder: 20513:20515 transaction failed 29189/-22, size 0-0 line 2856
[  767.128836] device bridge_slave_1 left promiscuous mode
[  767.134572] bridge0: port 2(bridge_slave_1) entered disabled state
2033/05/18 03:44:20 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfe80}, &(0x7f0000f81000)=0x90)

[  767.179297] device bridge_slave_0 left promiscuous mode
[  767.184897] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.209790] binder: undelivered TRANSACTION_ERROR: 29189
[  767.309525] IPVS: ftp: loaded support on port[0] = 21
[  767.327524] team0 (unregistering): Port device team_slave_1 removed
[  767.350526] team0 (unregistering): Port device team_slave_0 removed
[  767.362698] bond0 (unregistering): Releasing backup interface bond_slave_1
[  767.379416] bond0 (unregistering): Releasing backup interface bond_slave_0
[  767.409990] bond0 (unregistering): Released all slaves
[  767.524139] binder: 20474:20538 got reply transaction with no transaction stack
[  767.531713] binder: 20474:20538 transaction failed 29201/-71, size 0-0 line 2763
2033/05/18 03:44:21 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

[  767.673494] binder: undelivered TRANSACTION_ERROR: 29201
[  768.095068] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.101504] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.108908] device bridge_slave_0 entered promiscuous mode
[  768.147559] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.153978] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.161792] device bridge_slave_1 entered promiscuous mode
[  768.198090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  768.234500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  768.344259] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  768.383590] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  768.554198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  768.562218] team0: Port device team_slave_0 added
[  768.604067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  768.612327] team0: Port device team_slave_1 added
[  768.642808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  768.681843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  768.721419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  768.749901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  769.007706] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.014094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  769.020743] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.027108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  769.034686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  769.827306] 8021q: adding VLAN 0 to HW filter on device bond0
[  769.888204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  769.915886] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  769.996907] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  770.003133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  770.010393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  770.086592] 8021q: adding VLAN 0 to HW filter on device team0
2033/05/18 03:44:25 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)})

2033/05/18 03:44:25 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x400, 0x2)
faccessat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0xc00)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8)
fchownat(r1, &(0x7f0000000140)='./file0\x00', r2, 0x0, 0x1800)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

2033/05/18 03:44:25 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffffffe, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:25 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xffffffc0]}, 0x10)

2033/05/18 03:44:25 executing program 7:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:25 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xc0fe}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:25 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)}}}], 0x0, 0x0, &(0x7f0000000240)})

2033/05/18 03:44:25 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000080", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:25 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x80ffffff00000000]}, 0x10)

[  771.435019] binder: 20813:20816 transaction failed 29189/-22, size 0-0 line 2856
[  771.457381] binder: 20812:20814 transaction failed 29189/-22, size 0-0 line 2856
[  771.525385] binder: undelivered TRANSACTION_ERROR: 29189
[  771.525756] binder: 20820:20822 transaction failed 29189/-22, size 0-0 line 2856
[  771.559363] binder: 20818:20819 transaction failed 29189/-22, size 0-0 line 2856
[  771.615441] binder: 20818:20819 ERROR: BC_REGISTER_LOOPER called without request
[  771.735230] device bridge_slave_1 left promiscuous mode
[  771.740978] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.753759] device bridge_slave_0 left promiscuous mode
[  771.759304] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.794900] team0 (unregistering): Port device team_slave_1 removed
[  771.805068] team0 (unregistering): Port device team_slave_0 removed
[  771.816775] bond0 (unregistering): Releasing backup interface bond_slave_1
[  771.832824] bond0 (unregistering): Releasing backup interface bond_slave_0
[  771.863986] bond0 (unregistering): Released all slaves
[  772.269968] binder: 20818:20838 got reply transaction with no transaction stack
[  772.277711] binder: 20818:20838 transaction failed 29201/-71, size 0-0 line 2763
2033/05/18 03:44:26 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80000)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0xffffffff80000001, 0x5, 0x8, 0x53, 0x9, 0x9, 0x10001, 0x10001, 0x4], 0x9, 0x9, 0x0, 0x5, 0x0, 0x7, {0xfffffffffffffff8, 0x2c, 0xd49, 0xfff, 0x8, 0x8, 0x1, 0x7, 0x100000000, 0x200, 0x8, 0x3, 0x79, 0x800, "07c45364409c0413de629ecb42e23c0f9b470e4354fa3a402884766a274b9ceb"}})
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)

2033/05/18 03:44:26 executing program 6:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)})

2033/05/18 03:44:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffffff0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:26 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xd778000000000000]}, 0x10)

2033/05/18 03:44:26 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc00000000000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:26 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)

2033/05/18 03:44:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:26 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  772.404275] binder: undelivered TRANSACTION_ERROR: 29201
[  772.461268] binder: 20846:20852 transaction failed 29189/-22, size 0-0 line 2856
[  772.472439] binder: 20853:20854 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:26 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6784000000000000]}, 0x10)

2033/05/18 03:44:26 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  772.540563] binder: 20856:20858 transaction failed 29189/-22, size 0-0 line 2856
[  772.581146] binder: 20856:20858 ERROR: BC_REGISTER_LOOPER called without request
[  772.585552] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:26 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:26 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xff0a0000]}, 0x10)

[  772.647501] binder: 20870:20871 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:26 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfe80000000000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  772.780615] binder: 20883:20885 transaction failed 29189/-22, size 0-0 line 2856
[  772.825388] IPVS: ftp: loaded support on port[0] = 21
[  773.483827] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.490225] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.497391] device bridge_slave_0 entered promiscuous mode
[  773.522614] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.529050] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.536000] device bridge_slave_1 entered promiscuous mode
[  773.560232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  773.585269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  773.654455] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  773.682943] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  773.788764] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  773.795860] team0: Port device team_slave_0 added
[  773.819173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  773.826430] team0: Port device team_slave_1 added
[  773.850521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  773.876228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  773.903247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  773.910349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  773.918825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  773.938835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  773.945907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  773.954361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  774.169695] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.176205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  774.182857] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.189261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.196880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  774.560269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  775.001583] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.083644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  775.162181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  775.168353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  775.176076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  775.249947] 8021q: adding VLAN 0 to HW filter on device team0
[  775.711477] QAT: Invalid ioctl
[  776.517591] QAT: Invalid ioctl
2033/05/18 03:44:30 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)
keyctl$set_reqkey_keyring(0xe, 0x0)

2033/05/18 03:44:30 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:30 executing program 0 (fault-call:4 fault-nth:0):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:30 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f4]}, 0x10)

2033/05/18 03:44:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:30 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:30 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffff7f00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

[  776.607376] binder: 21170:21173 transaction failed 29189/-22, size 0-0 line 2856
[  776.654551] binder: 21169:21171 transaction failed 29189/-22, size 0-0 line 2856
[  776.683074] binder: 21169:21171 ERROR: BC_REGISTER_LOOPER called without request
[  776.815531] device bridge_slave_1 left promiscuous mode
[  776.821195] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.830778] device bridge_slave_0 left promiscuous mode
[  776.836329] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.876595] team0 (unregistering): Port device team_slave_1 removed
[  776.886969] team0 (unregistering): Port device team_slave_0 removed
[  776.898585] bond0 (unregistering): Releasing backup interface bond_slave_1
[  776.915680] bond0 (unregistering): Releasing backup interface bond_slave_0
[  776.944577] bond0 (unregistering): Released all slaves
2033/05/18 03:44:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:31 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:31 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:31 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x11]}, 0x10)

2033/05/18 03:44:31 executing program 0 (fault-call:4 fault-nth:1):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffffffffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:31 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780)=<r6=>0x0)
timer_getoverrun(r6)

2033/05/18 03:44:31 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfec0}, &(0x7f0000f81000)=0x90)

[  777.596803] binder: 21189:21198 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:31 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:31 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:31 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5bef]}, 0x10)

[  777.661376] binder: 21187:21200 transaction failed 29189/-22, size 0-0 line 2856
[  777.680530] binder: 21187:21200 ERROR: BC_REGISTER_LOOPER called without request
2033/05/18 03:44:31 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:31 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  777.785130] binder: 21214:21215 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:31 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:31 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3ff20000]}, 0x10)

2033/05/18 03:44:31 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  777.969630] binder: 21232:21234 transaction failed 29189/-22, size 0-0 line 2856
[  777.979431] IPVS: ftp: loaded support on port[0] = 21
2033/05/18 03:44:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  778.660504] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.666908] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.674182] device bridge_slave_0 entered promiscuous mode
[  778.700423] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.706826] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.713926] device bridge_slave_1 entered promiscuous mode
[  778.738847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  778.763975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  778.833420] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  778.860607] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  778.973272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  778.980603] team0: Port device team_slave_0 added
[  779.004720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  779.011827] team0: Port device team_slave_1 added
[  779.035690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  779.061735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  779.088086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  779.095210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  779.104901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  779.125475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  779.132704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  779.141130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  779.365082] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.371487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  779.378167] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.384530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  779.391822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  779.744198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  780.209598] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.293041] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  780.373967] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  780.380174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  780.387725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  780.465383] 8021q: adding VLAN 0 to HW filter on device team0
2033/05/18 03:44:34 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()
timer_create(0x1, &(0x7f0000000740)={0x0, 0x0, 0x3, @thr={&(0x7f00000005c0)="9dee7b420c88f04572bcb7ff2d6bc728f6b48c185eb5b766bb31a91653926d340d82f662d95f40c6d7c834034d98306f61cec96fc466f1069059573c5373f0bf48fc70ba5dbb40443a26841c59ded689b65a4818231181117acdc8ffe8b9112b6ffe3f10c50cd5cfd53bb89a231c4eb37e103e097eb6e9280175cf521bc85bd3c935051cb6d98d0bc8b79c0e9f065b31f9f328bf7593668e7b3260870d682021d3f60d16cb7eff3c9b1fa745c79af3a9106e113d626764d04e056a734e8db69b0ddc86725749043e24761f967a6055e077b8478219b9beda3c8f1f6083ec9a421a27b210230caa7bc852374460bff2e759", &(0x7f00000006c0)="2bd5bdabc3421e9c8e50e2192f99c138c5004e44e1efad248609aa78baaf4166f662d184a051d4d39f2ca77bf560457a4a29787ed654a08dc22cd258d7db2a3b374d6aea612486ad72d0bf589d"}}, &(0x7f0000000780))

2033/05/18 03:44:34 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x10c7]}, 0x10)

2033/05/18 03:44:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffff7f, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:34 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfec0000000000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:34 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:34 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:34 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  780.919387] binder: 21515:21516 transaction failed 29189/-22, size 0-0 line 2856
[  780.965360] binder: 21518:21529 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:34 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:34 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf23f]}, 0x10)

[  781.019072] binder: 21533:21534 transaction failed 29189/-22, size 0-0 line 2856
[  781.031931] binder: 21521:21523 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:34 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  781.078469] binder: 21521:21523 ERROR: BC_REGISTER_LOOPER called without request
2033/05/18 03:44:34 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  781.154964] binder: 21546:21549 transaction failed 29189/-22, size 0-0 line 2856
[  781.254748] binder: release 21521:21523 transaction 1360 in, still active
[  781.262009] binder: send failed reply for transaction 1360 to 21553:21554
[  781.269071] binder: send failed reply for transaction 1361 to 21553:21554
[  781.286878] binder: undelivered TRANSACTION_COMPLETE
[  781.292094] binder: undelivered TRANSACTION_ERROR: 29189
[  781.306485] binder: undelivered TRANSACTION_COMPLETE
[  781.311699] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:35 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:35 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xff00000000000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:35 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:35 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x44cf]}, 0x10)

2033/05/18 03:44:35 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:35 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:35 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)
sched_yield()

2033/05/18 03:44:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000006", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:35 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  781.927197] binder: 21566:21569 transaction failed 29189/-22, size 0-0 line 2856
[  781.947346] binder: 21571:21577 transaction failed 29189/-22, size 0-0 line 2856
[  781.957364] binder: 21566:21569 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:35 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x571c0000]}, 0x10)

2033/05/18 03:44:35 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  782.011949] binder: 21570:21572 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:35 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:35 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  782.060422] binder: 21570:21572 ERROR: BC_REGISTER_LOOPER called without request
[  782.076861] binder: 21591:21593 transaction failed 29189/-22, size 0-0 line 2856
[  782.085636] binder: undelivered TRANSACTION_ERROR: 29189
[  782.091692] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:35 executing program 6:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  782.149239] binder: 21601:21602 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:35 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:36 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "85c39820dbee4d323836868050084dc2c34ed411"}, 0x18)

[  782.234421] binder: release 21570:21572 transaction 1369 in, still active
[  782.241732] binder: send failed reply for transaction 1369 to 21603:21604
[  782.248749] binder: send failed reply for transaction 1370 to 21603:21604
[  782.319637] binder: 21617:21619 transaction failed 29189/-22, size 0-0 line 2856
[  782.353175] binder: undelivered TRANSACTION_COMPLETE
[  782.358395] binder: undelivered TRANSACTION_ERROR: 29189
[  782.386791] binder: 21618:21620 transaction failed 29189/-22, size 0-0 line 2856
[  782.396132] binder: undelivered TRANSACTION_COMPLETE
[  782.401314] binder: undelivered TRANSACTION_ERROR: 29189
[  782.408646] binder: 21618:21620 ERROR: BC_REGISTER_LOOPER called without request
2033/05/18 03:44:36 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0045877, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:36 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe00, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:36 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xcf44]}, 0x10)

2033/05/18 03:44:36 executing program 6:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:36 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00)', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:36 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfc00}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:36 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:36 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000004c0)=0x8)

[  783.272130] binder: 21635:21643 transaction failed 29189/-22, size 0-0 line 2856
[  783.286740] binder: 21638:21644 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:37 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:37 executing program 6:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000004", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  783.339470] binder: 21638:21651 transaction failed 29189/-22, size 0-0 line 2856
[  783.375724] binder: 21654:21655 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:37 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:37 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc805]}, 0x10)

[  783.389113] binder: 21646:21647 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:37 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:37 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  783.457426] binder: 21646:21647 ERROR: BC_REGISTER_LOOPER called without request
[  783.472643] binder: undelivered TRANSACTION_ERROR: 29189
[  783.479179] binder: undelivered TRANSACTION_ERROR: 29189
[  783.522357] binder: 21670:21671 transaction failed 29189/-22, size 0-0 line 2856
[  783.631785] binder: release 21646:21647 transaction 1381 in, still active
[  783.638862] binder: send failed reply for transaction 1381 to 21675:21676
[  783.646065] binder: send failed reply for transaction 1382 to 21675:21676
[  783.667229] binder: undelivered TRANSACTION_COMPLETE
[  783.672539] binder: undelivered TRANSACTION_ERROR: 29189
[  783.678842] binder: undelivered TRANSACTION_COMPLETE
[  783.684061] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00?', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:37 executing program 6:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:37 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xd557]}, 0x10)

2033/05/18 03:44:37 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:37 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:37 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6ba, 0x8, 0x8, 0x800, 0x90}, &(0x7f0000000200)=0x98)

2033/05/18 03:44:37 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:37 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  784.206268] binder: 21694:21702 transaction failed 29189/-22, size 0-0 line 2856
[  784.210646] binder: 21688:21697 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:38 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1c57]}, 0x10)

[  784.270972] binder: 21688:21709 transaction failed 29189/-22, size 0-0 line 2856
[  784.296155] binder: 21698:21699 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:38 executing program 6:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  784.345270] binder: 21715:21716 ioctl c0306201 20000240 returned -11
[  784.369397] binder: 21698:21699 ERROR: BC_REGISTER_LOOPER called without request
[  784.387160] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:38 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  784.393269] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:38 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:38 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:38 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"})

[  784.487420] binder: release 21715:21716 transaction 1388 out, still active
[  784.494679] binder: undelivered TRANSACTION_COMPLETE
2033/05/18 03:44:38 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x57d5000000000000]}, 0x10)

[  784.531782] binder: release 21698:21699 transaction 1388 in, still active
[  784.538996] binder: send failed reply for transaction 1388, target dead
[  784.545860] binder: send failed reply for transaction 1389 to 21725:21727
[  784.552844] binder: send failed reply for transaction 1390 to 21725:21727
2033/05/18 03:44:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  784.589301] binder: 21741:21742 transaction failed 29189/-22, size 0-0 line 2856
[  784.667740] binder: 21748:21752 transaction failed 29189/-22, size 0-0 line 2856
[  784.690087] binder: 21743:21744 transaction failed 29189/-22, size 0-0 line 2856
[  784.714609] binder: undelivered TRANSACTION_COMPLETE
[  784.719834] binder: undelivered TRANSACTION_ERROR: 29189
[  784.741452] binder: 21743:21744 ERROR: BC_REGISTER_LOOPER called without request
[  784.765640] binder: release 21748:21752 transaction 1395 out, still active
[  784.772794] binder: undelivered TRANSACTION_COMPLETE
[  784.807141] binder: undelivered TRANSACTION_ERROR: 29189
[  784.817167] binder: undelivered TRANSACTION_COMPLETE
[  784.822349] binder: undelivered TRANSACTION_ERROR: 29189
[  784.828453] binder: release 21743:21744 transaction 1395 in, still active
[  784.835480] binder: send failed reply for transaction 1395, target dead
2033/05/18 03:44:38 executing program 6:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:38 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2000000]}, 0x10)

2033/05/18 03:44:38 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:38 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4000000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:38 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:38 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  785.230975] binder: 21777:21779 transaction failed 29189/-22, size 0-0 line 2856
[  785.239816] binder: 21781:21785 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  785.275010] binder: 21781:21785 transaction failed 29189/-22, size 0-0 line 2856
[  785.277216] binder: 21774:21776 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f220000]}, 0x10)

2033/05/18 03:44:39 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:39 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  785.382539] binder: undelivered TRANSACTION_ERROR: 29189
[  785.388658] binder: undelivered TRANSACTION_ERROR: 29189
[  785.437863] binder: 21803:21804 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:39 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)})

2033/05/18 03:44:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:39 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:39 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:39 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8f16]}, 0x10)

2033/05/18 03:44:39 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xb8040000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:39 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:39 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  786.191368] binder: 21816:21819 transaction failed 29189/-22, size 0-0 line 2856
[  786.226787] binder: 21816:21835 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:40 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  786.254915] binder: 21822:21823 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5c8]}, 0x10)

2033/05/18 03:44:40 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  786.336370] binder: undelivered TRANSACTION_ERROR: 29189
[  786.345832] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:40 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)

2033/05/18 03:44:40 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffffe", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:40 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  786.378985] binder: undelivered TRANSACTION_ERROR: 29189
[  786.418604] binder: 21852:21853 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:40 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  786.468360] binder: 21852:21853 transaction failed 29189/-22, size 0-0 line 2856
[  786.556248] binder: undelivered TRANSACTION_ERROR: 29189
[  786.562362] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xef5b0000]}, 0x10)

2033/05/18 03:44:40 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:40 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:40 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)

2033/05/18 03:44:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:40 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:40 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  787.164989] binder: 21886:21887 transaction failed 29189/-22, size 0-0 line 2856
[  787.185586] binder: 21892:21894 unknown command 0
[  787.208639] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\t', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:41 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x95bf]}, 0x10)

2033/05/18 03:44:41 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  787.220610] binder: 21892:21894 ioctl c0306201 20007000 returned -22
[  787.228612] binder: 21886:21902 transaction failed 29189/-22, size 0-0 line 2856
[  787.259398] binder: 21892:21894 ioctl c0306201 20000240 returned -11
2033/05/18 03:44:41 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:41 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc3", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:41 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  787.337913] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:41 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  787.409219] binder: 21919:21920 transaction failed 29189/-22, size 0-0 line 2856
[  787.422240] binder: 21923:21925 unknown command 0
[  787.456967] binder: 21923:21925 ioctl c0306201 20007000 returned -22
[  787.475638] binder: 21919:21929 transaction failed 29189/-22, size 0-0 line 2856
[  787.491375] binder: 21923:21925 ioctl c0306201 20000240 returned -11
[  787.560160] binder: undelivered TRANSACTION_ERROR: 29189
[  787.566338] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:41 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf00, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:41 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x700000000000000]}, 0x10)

2033/05/18 03:44:41 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:41 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:41 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:41 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:41 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)
syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x803)

[  788.162134] binder: 21948:21949 unknown command 25361
[  788.186466] binder: 21950:21953 transaction failed 29189/-22, size 0-0 line 2856
[  788.186519] binder: 21948:21949 ioctl c0306201 20007000 returned -22
2033/05/18 03:44:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:42 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe000000]}, 0x10)

[  788.232499] binder: 21950:21963 transaction failed 29189/-22, size 0-0 line 2856
[  788.235822] binder: 21948:21949 ioctl c0306201 20000240 returned -11
2033/05/18 03:44:42 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:42 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe803]}, 0x10)

2033/05/18 03:44:42 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:42 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  788.364621] binder: undelivered TRANSACTION_ERROR: 29189
[  788.370711] binder: undelivered TRANSACTION_ERROR: 29189
[  788.398571] binder: 21978:21979 unknown command 4743953
[  788.424277] binder: 21978:21979 ioctl c0306201 20007000 returned -22
[  788.458236] binder: 21982:21985 transaction failed 29189/-22, size 0-0 line 2856
[  788.476160] binder: 21978:21979 ioctl c0306201 20000240 returned -11
[  788.514246] binder: 21982:21994 transaction failed 29189/-22, size 0-0 line 2856
[  788.600385] binder: undelivered TRANSACTION_ERROR: 29189
[  788.606788] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:42 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:42 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe7e0]}, 0x10)

2033/05/18 03:44:42 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffff9e, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:42 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:42 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:42 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  789.172768] binder: 22016:22017 got transaction to invalid handle
[  789.174575] binder: 22013:22018 transaction failed 29189/-22, size 0-0 line 2856
[  789.179126] binder: 22016:22017 transaction failed 29201/-22, size 0-0 line 2856
2033/05/18 03:44:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:43 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:43 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f67]}, 0x10)

[  789.236524] binder_alloc: 22013: binder_alloc_buf, no vma
[  789.242260] binder: 22013:22025 transaction failed 29189/-3, size 0-0 line 2971
[  789.299380] binder: BINDER_SET_CONTEXT_MGR already set
2033/05/18 03:44:43 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:43 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000003", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  789.344651] binder: 22013:22026 ioctl 40046207 20000240 returned -16
2033/05/18 03:44:43 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
socket(0xa, 0x4000000000000001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  789.422160] binder: 22044:22045 transaction failed 29189/-22, size 0-0 line 2856
[  789.480235] binder: undelivered TRANSACTION_ERROR: 29189
[  789.487474] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:43 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x393f]}, 0x10)

2033/05/18 03:44:43 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306211, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:43 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3f00000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:43 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:43 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:43 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  790.177169] binder: 22068:22070 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:44 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f390000]}, 0x10)

[  790.221797] binder: 22077:22079 transaction failed 29189/-22, size 0-0 line 2856
[  790.242254] binder: 22077:22079 ioctl c0306211 20000240 returned -22
2033/05/18 03:44:44 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  790.280696] binder: 22077:22079 transaction failed 29189/-22, size 0-0 line 2856
[  790.283052] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:44 executing program 3:
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  790.328614] binder: 22077:22086 ioctl c0306211 20000240 returned -22
[  790.360019] binder: 22099:22100 transaction failed 29189/-22, size 0-0 line 2856
[  790.423315] binder: undelivered TRANSACTION_ERROR: 29189
[  790.464312] binder: undelivered TRANSACTION_ERROR: 29189
[  790.470354] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:44 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:44 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:44 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa7b2]}, 0x10)

2033/05/18 03:44:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:44 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:44 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:44 executing program 3:
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  791.189245] binder: 22126:22127 transaction failed 29189/-22, size 0-0 line 2856
[  791.204567] binder: 22123:22124 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:45 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xb761]}, 0x10)

[  791.229664] binder: 22126:22127 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:45 executing program 3:
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:45 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)})

2033/05/18 03:44:45 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:45 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfdfdffff00000000, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  791.324322] binder: undelivered TRANSACTION_ERROR: 29189
[  791.356890] binder: undelivered TRANSACTION_ERROR: 29189
[  791.363448] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:45 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  791.414386] binder: 22149:22151 transaction failed 29189/-22, size 0-0 line 2856
[  791.473669] binder: 22155:22157 transaction failed 29189/-22, size 0-0 line 2856
[  791.508200] binder: 22155:22157 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc710]}, 0x10)

2033/05/18 03:44:45 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:45 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  791.533953] binder: 22155:22165 unknown command 0
[  791.544227] binder: 22155:22165 ioctl c0306201 20000240 returned -22
[  791.607150] binder: undelivered TRANSACTION_ERROR: 29189
[  791.647850] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:45 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)})

2033/05/18 03:44:45 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x1000000, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:45 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1100000000000000]}, 0x10)

2033/05/18 03:44:45 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf00000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:45 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  792.180990] binder: 22191:22197 transaction failed 29189/-22, size 0-0 line 2856
[  792.186509] binder: 22200:22204 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00 ', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:46 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x0, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:46 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)})

[  792.243317] binder: 22200:22204 transaction failed 29189/-22, size 0-0 line 2856
[  792.271699] binder: 22200:22210 unknown command 0
[  792.276874] binder: undelivered TRANSACTION_ERROR: 29189
[  792.295552] binder: 22200:22210 ioctl c0306201 20000240 returned -22
[  792.343162] binder: 22219:22220 transaction failed 29189/-22, size 0-0 line 2856
[  792.394571] binder: undelivered TRANSACTION_ERROR: 29189
[  792.419216] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:46 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xffffffff00000000]}, 0x10)

2033/05/18 03:44:46 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:46 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfdfdffff, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:46 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:46 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x0, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:46 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:47 executing program 3:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  793.230658] binder: 22244:22246 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x0, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  793.279922] binder: 22244:22254 transaction failed 29189/-22, size 0-0 line 2856
[  793.318382] binder: 22244:22255 unknown command 0
2033/05/18 03:44:47 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x17a70000]}, 0x10)

2033/05/18 03:44:47 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  793.341789] binder: 22244:22255 ioctl c0306201 20000240 returned -22
2033/05/18 03:44:47 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:47 executing program 3:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:47 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfffffdfd, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  793.463170] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:47 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf78f000000000000]}, 0x10)

[  793.554365] binder: 22279:22282 transaction failed 29189/-22, size 0-0 line 2856
[  793.610435] binder: 22279:22292 transaction failed 29189/-22, size 0-0 line 2856
[  793.655614] binder: 22279:22293 unknown command 0
[  793.673554] binder: 22279:22293 ioctl c0306201 20000240 returned -22
[  793.707335] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:47 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x20f81090)

2033/05/18 03:44:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:47 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x100000000000000, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:47 executing program 3:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:47 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9703, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:47 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5f500000]}, 0x10)

2033/05/18 03:44:47 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:47 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:48 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  794.229973] binder: 22322:22323 transaction failed 29189/-22, size 0-0 line 2856
[  794.267415] binder: 22322:22327 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe00]}, 0x10)

[  794.301497] binder: 22322:22329 unknown command 0
[  794.318986] binder: 22322:22329 ioctl c0306201 20000240 returned -22
2033/05/18 03:44:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:48 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0xfffffdfd, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:48 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:48 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  794.418279] binder: undelivered TRANSACTION_ERROR: 29189
[  794.484476] binder: 22348:22353 transaction failed 29189/-22, size 0-0 line 2856
[  794.531006] binder: 22348:22353 transaction failed 29189/-22, size 0-0 line 2856
[  794.570568] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:48 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:48 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x8f)

2033/05/18 03:44:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5dc]}, 0x10)

2033/05/18 03:44:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:48 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x100000000000000, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:48 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xb804, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:48 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  795.148664] binder: 22378:22379 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:48 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2f8a000000000000]}, 0x10)

[  795.194826] binder: 22378:22379 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:49 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0xfdfdffff00000000, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  795.262892] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:49 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  795.371518] binder: 22404:22405 transaction failed 29189/-22, size 0-0 line 2856
[  795.412835] binder: 22404:22405 transaction failed 29189/-22, size 0-0 line 2856
[  795.526681] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:49 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}})

2033/05/18 03:44:49 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7100000]}, 0x10)

2033/05/18 03:44:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:49 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:49 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:49 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffffffffffff000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:49 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  796.147238] binder: 22430:22436 transaction failed 29189/-22, size 0-0 line 2856
[  796.180333] binder: 22430:22436 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:49 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x7, 0x8001)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:49 executing program 6 (fault-call:3 fault-nth:0):
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:50 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x400000000000000]}, 0x10)

[  796.281797] FAULT_INJECTION: forcing a failure.
[  796.281797] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  796.293837] CPU: 0 PID: 22458 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #75
[  796.301122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  796.310485] Call Trace:
[  796.313095]  dump_stack+0x1b9/0x294
[  796.316743]  ? dump_stack_print_info.cold.2+0x52/0x52
[  796.322060]  ? zap_class+0x720/0x720
[  796.325799]  should_fail.cold.4+0xa/0x1a
[  796.329896]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  796.335026]  ? print_usage_bug+0xc0/0xc0
[  796.340061]  ? graph_lock+0x170/0x170
[  796.343877]  ? print_usage_bug+0xc0/0xc0
[  796.347975]  ? find_held_lock+0x36/0x1c0
[  796.352061]  ? __lock_is_held+0xb5/0x140
[  796.356146]  ? check_same_owner+0x320/0x320
[  796.360483]  ? rcu_note_context_switch+0x710/0x710
[  796.365436]  ? __might_sleep+0x95/0x190
[  796.369441]  __alloc_pages_nodemask+0x34e/0xd70
[  796.374125]  ? unwind_get_return_address+0x61/0xa0
[  796.379076]  ? __alloc_pages_slowpath+0x2db0/0x2db0
[  796.384127]  ? perf_trace_lock+0xd6/0x900
[  796.388284]  ? zap_class+0x720/0x720
[  796.392005]  ? __lock_acquire+0x7f5/0x5140
[  796.396263]  ? zap_class+0x720/0x720
[  796.401291]  ? print_usage_bug+0xc0/0xc0
[  796.405374]  ? print_usage_bug+0xc0/0xc0
[  796.409478]  ? graph_lock+0x170/0x170
[  796.413295]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  796.418852]  alloc_pages_current+0x10c/0x210
[  796.423280]  pte_alloc_one+0x1b/0x120
[  796.427119]  do_huge_pmd_anonymous_page+0xdcf/0x1cc0
[  796.432235]  ? __lock_acquire+0x7f5/0x5140
[  796.436494]  ? __thp_get_unmapped_area+0x180/0x180
[  796.441444]  ? debug_check_no_locks_freed+0x310/0x310
[  796.446644]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  796.451849]  ? rcu_read_lock+0x70/0x70
[  796.455753]  ? print_usage_bug+0xc0/0xc0
[  796.459827]  ? page_add_file_rmap+0x779/0xe20
[  796.464330]  ? perf_trace_lock+0xd6/0x900
[  796.468483]  ? page_add_new_anon_rmap+0x850/0x850
[  796.473333]  ? print_usage_bug+0xc0/0xc0
[  796.477403]  ? debug_check_no_locks_freed+0x310/0x310
[  796.482585]  ? pud_val+0x80/0xf0
[  796.485938]  ? pmd_val+0xf0/0xf0
[  796.489297]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  796.494822]  __handle_mm_fault+0x2d02/0x4310
[  796.499223]  ? vm_insert_mixed_mkwrite+0x40/0x40
[  796.503962]  ? graph_lock+0x170/0x170
[  796.507750]  ? print_usage_bug+0xc0/0xc0
[  796.511802]  ? find_held_lock+0x36/0x1c0
[  796.515869]  ? lock_downgrade+0x8e0/0x8e0
[  796.520022]  ? handle_mm_fault+0x8c0/0xc70
[  796.524257]  handle_mm_fault+0x53a/0xc70
[  796.528309]  ? __handle_mm_fault+0x4310/0x4310
[  796.532883]  ? find_vma+0x34/0x190
[  796.536423]  __do_page_fault+0x60b/0xe40
[  796.540478]  ? mm_fault_error+0x380/0x380
[  796.544616]  ? graph_lock+0x170/0x170
[  796.548417]  do_page_fault+0xee/0x8a7
[  796.552203]  ? vmalloc_sync_all+0x30/0x30
[  796.556339]  ? find_held_lock+0x36/0x1c0
[  796.560407]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  796.565243]  page_fault+0x1e/0x30
[  796.568687] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  796.574559] RSP: 0018:ffff880186e57838 EFLAGS: 00010246
[  796.579911] RAX: ffffed0030dcaf2a RBX: 0000000000000040 RCX: 0000000000000040
[  796.587173] RDX: 0000000000000040 RSI: 00000000204e0002 RDI: ffff880186e57910
[  796.594427] RBP: ffff880186e57870 R08: ffffed0030dcaf2a R09: ffffed0030dcaf22
[  796.601679] R10: ffffed0030dcaf29 R11: ffff880186e5794f R12: 00000000204e0042
[  796.608931] R13: 00000000204e0002 R14: ffff880186e57910 R15: 00007ffffffff000
[  796.616209]  ? _copy_from_user+0x10d/0x150
[  796.620435]  ip6_tnl_ioctl+0x843/0xbe0
[  796.624311]  ? perf_trace_lock+0xd6/0x900
[  796.628453]  ? ip6_tnl_locate+0x9b0/0x9b0
[  796.632585]  ? zap_class+0x720/0x720
[  796.636300]  ? find_held_lock+0x36/0x1c0
[  796.640366]  ? ip6_tnl_locate+0x9b0/0x9b0
[  796.644504]  dev_ifsioc+0x43e/0xb90
[  796.648114]  ? ip6_tnl_locate+0x9b0/0x9b0
[  796.652254]  ? dev_ifsioc+0x43e/0xb90
[  796.656043]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  796.661221]  ? register_gifconf+0x70/0x70
[  796.665384]  dev_ioctl+0x69a/0xcc0
[  796.668914]  sock_ioctl+0x47e/0x680
[  796.672544]  ? dlci_ioctl_set+0x40/0x40
[  796.676507]  ? expand_files.part.8+0x9a0/0x9a0
[  796.681086]  ? kasan_check_write+0x14/0x20
[  796.685317]  ? wait_for_completion+0x870/0x870
[  796.689975]  ? dlci_ioctl_set+0x40/0x40
[  796.693937]  do_vfs_ioctl+0x1cf/0x16a0
[  796.697829]  ? ioctl_preallocate+0x2e0/0x2e0
[  796.702236]  ? fget_raw+0x20/0x20
[  796.705696]  ? __sb_end_write+0xac/0xe0
[  796.709665]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  796.715186]  ? fput+0x130/0x1a0
[  796.718454]  ? ksys_write+0x1a6/0x250
[  796.722249]  ? security_file_ioctl+0x94/0xc0
[  796.726658]  ksys_ioctl+0xa9/0xd0
[  796.730106]  __x64_sys_ioctl+0x73/0xb0
[  796.734075]  do_syscall_64+0x1b1/0x800
[  796.737968]  ? finish_task_switch+0x1ca/0x840
[  796.742450]  ? syscall_return_slowpath+0x5c0/0x5c0
[  796.747375]  ? syscall_return_slowpath+0x30f/0x5c0
[  796.752306]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  796.757660]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  796.762503]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  796.767676] RIP: 0033:0x455a09
[  796.770850] RSP: 002b:00007f82ca87bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  796.778547] RAX: ffffffffffffffda RBX: 00007f82ca87c6d4 RCX: 0000000000455a09
[  796.785809] RDX: 00000000200000c0 RSI: 00800000000089f0 RDI: 0000000000000014
[  796.793064] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  796.800317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  796.807580] R13: 0000000000000457 R14: 00000000006fb8c8 R15: 0000000000000000
[  796.828576] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:50 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:50 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x37be000000000000]}, 0x10)

2033/05/18 03:44:50 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0xfdfdffff, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:50 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80000)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/118)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:50 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9703000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:50 executing program 6 (fault-call:3 fault-nth:1):
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  797.131712] binder: 22475:22481 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  797.180805] binder: 22475:22493 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:50 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f39000000000000]}, 0x10)

2033/05/18 03:44:51 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:51 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x11, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  797.270597] binder: undelivered TRANSACTION_ERROR: 29189
[  797.300676] FAULT_INJECTION: forcing a failure.
[  797.300676] name failslab, interval 1, probability 0, space 0, times 0
[  797.311981] CPU: 1 PID: 22500 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #75
[  797.319263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  797.328621] Call Trace:
[  797.331228]  dump_stack+0x1b9/0x294
[  797.334877]  ? dump_stack_print_info.cold.2+0x52/0x52
[  797.340084]  ? percpu_ref_put_many+0x132/0x230
[  797.344675]  ? memcg_kmem_charge_memcg+0x74/0x110
[  797.349540]  should_fail.cold.4+0xa/0x1a
[  797.353619]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  797.358923]  ? graph_lock+0x170/0x170
[  797.362759]  ? find_held_lock+0x36/0x1c0
[  797.366843]  ? __lock_is_held+0xb5/0x140
2033/05/18 03:44:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  797.370930]  ? check_same_owner+0x320/0x320
[  797.375258]  ? zap_class+0x720/0x720
[  797.378979]  ? __lock_acquire+0x7f5/0x5140
[  797.383225]  ? rcu_note_context_switch+0x710/0x710
[  797.388247]  ? zap_class+0x720/0x720
[  797.391976]  __should_failslab+0x124/0x180
[  797.396224]  should_failslab+0x9/0x14
[  797.400035]  kmem_cache_alloc+0x2af/0x760
[  797.404200]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  797.409755]  ptlock_alloc+0x20/0x80
[  797.413397]  pte_alloc_one+0x6b/0x120
[  797.417213]  do_huge_pmd_anonymous_page+0xdcf/0x1cc0
[  797.422328]  ? __lock_acquire+0x7f5/0x5140
[  797.426573]  ? __thp_get_unmapped_area+0x180/0x180
[  797.431509]  ? debug_check_no_locks_freed+0x310/0x310
[  797.436726]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  797.441906]  ? rcu_read_lock+0x70/0x70
[  797.445788]  ? print_usage_bug+0xc0/0xc0
[  797.449854]  ? page_add_file_rmap+0x779/0xe20
[  797.454336]  ? perf_trace_lock+0xd6/0x900
[  797.458470]  ? page_add_new_anon_rmap+0x850/0x850
[  797.463302]  ? print_usage_bug+0xc0/0xc0
[  797.467351]  ? debug_check_no_locks_freed+0x310/0x310
[  797.472538]  ? pud_val+0x80/0xf0
[  797.475896]  ? pmd_val+0xf0/0xf0
[  797.479260]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  797.484789]  __handle_mm_fault+0x2d02/0x4310
[  797.489212]  ? vm_insert_mixed_mkwrite+0x40/0x40
[  797.493954]  ? graph_lock+0x170/0x170
[  797.497744]  ? print_usage_bug+0xc0/0xc0
[  797.501797]  ? find_held_lock+0x36/0x1c0
[  797.505855]  ? lock_downgrade+0x8e0/0x8e0
[  797.510001]  ? handle_mm_fault+0x8c0/0xc70
[  797.514236]  handle_mm_fault+0x53a/0xc70
[  797.518376]  ? __handle_mm_fault+0x4310/0x4310
[  797.522951]  ? find_vma+0x34/0x190
[  797.526481]  __do_page_fault+0x60b/0xe40
[  797.530535]  ? mm_fault_error+0x380/0x380
[  797.534672]  ? graph_lock+0x170/0x170
[  797.538465]  do_page_fault+0xee/0x8a7
[  797.542426]  ? vmalloc_sync_all+0x30/0x30
[  797.546575]  ? find_held_lock+0x36/0x1c0
[  797.550637]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  797.555490]  page_fault+0x1e/0x30
[  797.558938] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  797.564805] RSP: 0018:ffff88018dc67838 EFLAGS: 00010246
[  797.570157] RAX: ffffed0031b8cf2a RBX: 0000000000000040 RCX: 0000000000000040
[  797.577413] RDX: 0000000000000040 RSI: 00000000204e0002 RDI: ffff88018dc67910
[  797.584669] RBP: ffff88018dc67870 R08: ffffed0031b8cf2a R09: ffffed0031b8cf22
[  797.591929] R10: ffffed0031b8cf29 R11: ffff88018dc6794f R12: 00000000204e0042
[  797.599183] R13: 00000000204e0002 R14: ffff88018dc67910 R15: 00007ffffffff000
[  797.606463]  ? _copy_from_user+0x10d/0x150
[  797.610699]  ip6_tnl_ioctl+0x843/0xbe0
[  797.614576]  ? perf_trace_lock+0xd6/0x900
[  797.618730]  ? ip6_tnl_locate+0x9b0/0x9b0
[  797.622864]  ? zap_class+0x720/0x720
[  797.626573]  ? find_held_lock+0x36/0x1c0
[  797.630639]  ? ip6_tnl_locate+0x9b0/0x9b0
[  797.634791]  dev_ifsioc+0x43e/0xb90
[  797.638406]  ? ip6_tnl_locate+0x9b0/0x9b0
[  797.642542]  ? dev_ifsioc+0x43e/0xb90
[  797.646331]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  797.651510]  ? register_gifconf+0x70/0x70
[  797.655652]  dev_ioctl+0x69a/0xcc0
[  797.659191]  sock_ioctl+0x47e/0x680
[  797.662807]  ? dlci_ioctl_set+0x40/0x40
[  797.666776]  ? expand_files.part.8+0x9a0/0x9a0
[  797.671367]  ? kasan_check_write+0x14/0x20
[  797.675598]  ? wait_for_completion+0x870/0x870
[  797.680178]  ? dlci_ioctl_set+0x40/0x40
[  797.684237]  do_vfs_ioctl+0x1cf/0x16a0
[  797.688120]  ? ioctl_preallocate+0x2e0/0x2e0
[  797.692517]  ? fget_raw+0x20/0x20
[  797.695961]  ? __sb_end_write+0xac/0xe0
[  797.699928]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  797.705451]  ? fput+0x130/0x1a0
[  797.708717]  ? ksys_write+0x1a6/0x250
[  797.712518]  ? security_file_ioctl+0x94/0xc0
[  797.716922]  ksys_ioctl+0xa9/0xd0
[  797.720368]  __x64_sys_ioctl+0x73/0xb0
[  797.724262]  do_syscall_64+0x1b1/0x800
[  797.728147]  ? finish_task_switch+0x1ca/0x840
[  797.732630]  ? syscall_return_slowpath+0x5c0/0x5c0
[  797.737550]  ? syscall_return_slowpath+0x30f/0x5c0
[  797.742474]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  797.747915]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  797.752751]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  797.757940] RIP: 0033:0x455a09
[  797.761121] RSP: 002b:00007f82ca87bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
2033/05/18 03:44:51 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f67000000000000]}, 0x10)

2033/05/18 03:44:51 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)="2f70726f632f2f6970f9ff2f76732f7365637572f335211cbb7094d33628ee82655f74637000", 0x2, 0x0)
ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000001c0))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x1000, &(0x7f0000000100)=0x2)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$KDENABIO(r2, 0x4b36)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000080)=0x2f66, &(0x7f00000000c0)=0x4)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000340))

[  797.768819] RAX: ffffffffffffffda RBX: 00007f82ca87c6d4 RCX: 0000000000455a09
[  797.776074] RDX: 00000000200000c0 RSI: 00800000000089f0 RDI: 0000000000000014
[  797.783339] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  797.790594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  797.797850] R13: 0000000000000457 R14: 00000000006fb8c8 R15: 0000000000000001
2033/05/18 03:44:51 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1000000]}, 0x10)

2033/05/18 03:44:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  797.871070] binder: 22510:22512 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  797.920019] binder: 22510:22527 transaction failed 29189/-22, size 0-0 line 2856
[  797.939338] binder: 22510:22529 unknown command 0
[  797.961888] binder: 22510:22529 ioctl c0306201 20000240 returned -22
2033/05/18 03:44:51 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  798.072417] binder: undelivered TRANSACTION_ERROR: 29189
[  798.078571] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:51 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1400, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:51 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:51 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x6, 0x1, 0x8, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @broadcast=0xffffffff}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e21, @multicast1=0xe0000001}, 'bcsf0\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x40000000000}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:51 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:51 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4b050000]}, 0x10)

2033/05/18 03:44:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:51 executing program 6 (fault-call:3 fault-nth:2):
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  798.216821] binder: 22562:22568 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:52 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xaf2d]}, 0x10)

[  798.257827] binder: 22562:22568 transaction failed 29189/-22, size 0-0 line 2856
[  798.354238] FAULT_INJECTION: forcing a failure.
[  798.354238] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  798.357894] binder: undelivered TRANSACTION_ERROR: 29189
[  798.366201] CPU: 1 PID: 22565 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #75
[  798.379148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  798.388506] Call Trace:
[  798.391093]  dump_stack+0x1b9/0x294
[  798.394736]  ? dump_stack_print_info.cold.2+0x52/0x52
[  798.399927]  ? __lock_acquire+0x7f5/0x5140
[  798.404154]  ? __lock_acquire+0x7f5/0x5140
[  798.408378]  ? graph_lock+0x170/0x170
[  798.412169]  should_fail.cold.4+0xa/0x1a
[  798.416309]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  798.421400]  ? debug_check_no_locks_freed+0x310/0x310
[  798.426940]  ? debug_check_no_locks_freed+0x310/0x310
[  798.432125]  ? debug_check_no_locks_freed+0x310/0x310
[  798.437311]  ? zap_class+0x720/0x720
[  798.441019]  ? print_usage_bug+0xc0/0xc0
[  798.445078]  ? perf_trace_lock+0xd6/0x900
[  798.449308]  ? perf_trace_lock+0xd6/0x900
[  798.453458]  ? zap_class+0x720/0x720
[  798.457162]  ? graph_lock+0x170/0x170
[  798.460960]  ? __lock_acquire+0x7f5/0x5140
[  798.465182]  ? graph_lock+0x170/0x170
[  798.468971]  ? trace_hardirqs_on+0xd/0x10
[  798.473107]  ? try_charge+0xacc/0x1660
[  798.477010]  __alloc_pages_nodemask+0x34e/0xd70
[  798.481676]  ? __update_load_avg_blocked_se.isra.33+0x460/0x460
[  798.487723]  ? graph_lock+0x170/0x170
[  798.491524]  ? __alloc_pages_slowpath+0x2db0/0x2db0
[  798.496531]  ? update_load_avg+0x2d9/0x2570
[  798.500849]  ? attach_entity_load_avg+0x850/0x850
[  798.505688]  ? update_load_avg+0x2d9/0x2570
[  798.510023]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  798.516265]  alloc_pages_vma+0x3a0/0x540
[  798.520321]  do_huge_pmd_wp_page+0x1767/0x4580
[  798.524892]  ? rb_erase+0x3530/0x3530
[  798.528698]  ? __split_huge_pmd+0x2b10/0x2b10
[  798.533202]  ? print_usage_bug+0xc0/0xc0
[  798.537264]  ? find_held_lock+0x36/0x1c0
[  798.541316]  ? graph_lock+0x170/0x170
[  798.545117]  ? __lock_acquire+0x7f5/0x5140
[  798.549349]  ? graph_lock+0x170/0x170
[  798.553141]  ? __lock_is_held+0xb5/0x140
[  798.557194]  ? debug_check_no_locks_freed+0x310/0x310
[  798.562378]  ? __lock_is_held+0xb5/0x140
[  798.566442]  ? __account_cfs_rq_runtime+0x600/0x600
[  798.571449]  ? print_usage_bug+0xc0/0xc0
[  798.575508]  ? perf_trace_lock+0xd6/0x900
[  798.579661]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  798.585189]  ? zap_class+0x720/0x720
[  798.588900]  ? __lock_acquire+0x7f5/0x5140
[  798.593119]  ? graph_lock+0x170/0x170
[  798.596914]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  798.602450]  ? __perf_event_task_sched_in+0x247/0xb80
[  798.607728]  ? perf_trace_lock+0xd6/0x900
[  798.611875]  ? debug_check_no_locks_freed+0x310/0x310
[  798.617061]  ? print_usage_bug+0xc0/0xc0
[  798.621128]  ? lock_downgrade+0x8e0/0x8e0
[  798.625261]  ? finish_task_switch+0x182/0x840
[  798.629749]  ? perf_trace_lock+0xd6/0x900
[  798.633892]  ? mark_held_locks+0xc9/0x160
[  798.638031]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  798.642603]  ? pmd_val+0x80/0xf0
[  798.645960]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  798.650965]  ? trace_hardirqs_on+0xd/0x10
[  798.655111]  ? _raw_spin_unlock_irq+0x27/0x70
[  798.659599]  __handle_mm_fault+0x221c/0x4310
[  798.664003]  ? vm_insert_mixed_mkwrite+0x40/0x40
[  798.668753]  ? graph_lock+0x170/0x170
[  798.672545]  ? find_held_lock+0x36/0x1c0
[  798.676605]  ? lock_downgrade+0x8e0/0x8e0
[  798.681015]  ? handle_mm_fault+0x8c0/0xc70
[  798.685257]  handle_mm_fault+0x53a/0xc70
[  798.689315]  ? __handle_mm_fault+0x4310/0x4310
[  798.693890]  ? find_vma+0x34/0x190
[  798.697423]  __do_page_fault+0x60b/0xe40
[  798.701479]  ? mm_fault_error+0x380/0x380
[  798.705613]  ? print_usage_bug+0xc0/0xc0
[  798.709670]  ? graph_lock+0x170/0x170
[  798.713555]  do_page_fault+0xee/0x8a7
[  798.717342]  ? vmalloc_sync_all+0x30/0x30
[  798.721480]  ? find_held_lock+0x36/0x1c0
[  798.725647]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  798.730492]  page_fault+0x1e/0x30
[  798.733946] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  798.739813] RSP: 0018:ffff88017db8f838 EFLAGS: 00010246
[  798.745176] RAX: ffffed002fb71f2a RBX: 0000000000000040 RCX: 0000000000000040
[  798.752440] RDX: 0000000000000040 RSI: ffff88017db8f910 RDI: 00000000204e0002
[  798.759705] RBP: ffff88017db8f870 R08: ffffed002fb71f2a R09: ffffed002fb71f22
[  798.766961] R10: ffffed002fb71f29 R11: ffff88017db8f94f R12: 00000000204e0042
[  798.774226] R13: 00000000204e0002 R14: ffff88017db8f910 R15: 00007ffffffff000
[  798.781782]  ? _copy_to_user+0xf6/0x110
[  798.785749]  ip6_tnl_ioctl+0x41a/0xbe0
[  798.789629]  ? perf_trace_lock+0xd6/0x900
[  798.793806]  ? ip6_tnl_locate+0x9b0/0x9b0
[  798.797958]  ? zap_class+0x720/0x720
[  798.801691]  ? ip6_tnl_locate+0x9b0/0x9b0
[  798.805827]  dev_ifsioc+0x43e/0xb90
[  798.809442]  ? ip6_tnl_locate+0x9b0/0x9b0
[  798.813575]  ? dev_ifsioc+0x43e/0xb90
[  798.817363]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  798.822541]  ? register_gifconf+0x70/0x70
[  798.826686]  dev_ioctl+0x69a/0xcc0
[  798.830217]  sock_ioctl+0x47e/0x680
[  798.833833]  ? dlci_ioctl_set+0x40/0x40
[  798.837799]  ? expand_files.part.8+0x9a0/0x9a0
[  798.842464]  ? kasan_check_write+0x14/0x20
[  798.846699]  ? wait_for_completion+0x870/0x870
[  798.851267]  ? dlci_ioctl_set+0x40/0x40
[  798.855241]  do_vfs_ioctl+0x1cf/0x16a0
[  798.859294]  ? ioctl_preallocate+0x2e0/0x2e0
[  798.863710]  ? fget_raw+0x20/0x20
[  798.867158]  ? __sb_end_write+0xac/0xe0
[  798.871134]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  798.876658]  ? fput+0x130/0x1a0
[  798.879937]  ? ksys_write+0x1a6/0x250
[  798.883739]  ? security_file_ioctl+0x94/0xc0
[  798.888151]  ksys_ioctl+0xa9/0xd0
[  798.891607]  __x64_sys_ioctl+0x73/0xb0
[  798.895485]  do_syscall_64+0x1b1/0x800
[  798.899469]  ? finish_task_switch+0x1ca/0x840
[  798.903963]  ? syscall_return_slowpath+0x5c0/0x5c0
[  798.908977]  ? syscall_return_slowpath+0x30f/0x5c0
[  798.913908]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  798.919270]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  798.924107]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  798.929370] RIP: 0033:0x455a09
[  798.932545] RSP: 002b:00007f82ca87bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  798.940244] RAX: ffffffffffffffda RBX: 00007f82ca87c6d4 RCX: 0000000000455a09
[  798.947500] RDX: 00000000200000c0 RSI: 00800000000089f0 RDI: 0000000000000014
[  798.954754] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  798.962013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  798.969274] R13: 0000000000000457 R14: 00000000006fb8c8 R15: 0000000000000002
2033/05/18 03:44:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:52 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:52 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:44:52 executing program 6 (fault-call:3 fault-nth:3):
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:52 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfeffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:52 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f00]}, 0x10)

2033/05/18 03:44:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  799.182443] binder: 22601:22602 transaction failed 29189/-22, size 0-0 line 2856
[  799.220290] binder: 22601:22602 ioctl c0306201 20000240 returned -14
2033/05/18 03:44:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

2033/05/18 03:44:53 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:53 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00')
ioctl$KVM_NMI(r1, 0xae9a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)

2033/05/18 03:44:53 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2daf]}, 0x10)

2033/05/18 03:44:53 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  799.246955] binder: 22601:22602 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:53 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x100000000000000, &(0x7f0000000180)="b1"})

2033/05/18 03:44:53 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008948, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  799.418821] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:53 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x77ec000000000000]}, 0x10)

2033/05/18 03:44:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

2033/05/18 03:44:53 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:53 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
sendto$inet6(r0, &(0x7f0000000000)="3bb1f12aeeeafe34122c8e60085bce594b1ed047f99e9c7a4ab193774e34eff7fe566698f4620c957f8961b3f18a31fe91af6bdc3b827b75e76aec77a71e7a0f3505259b41667de15754", 0x4a, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x100, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/106, &(0x7f00000001c0)=0x6a)

[  799.507537] binder: 22634:22636 transaction failed 29189/-22, size 0-0 line 2856
[  799.546108] binder: 22634:22636 ioctl c0306201 20000240 returned -14
2033/05/18 03:44:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  799.606703] binder: 22634:22651 transaction failed 29189/-22, size 0-0 line 2856
[  799.647634] binder: 22634:22656 unknown command 0
[  799.674271] binder: 22634:22656 ioctl c0306201 20000240 returned -22
[  799.726677] IPVS: length: 106 != 8
[  799.741845] binder: undelivered TRANSACTION_ERROR: 29189
[  799.759256] IPVS: length: 106 != 8
2033/05/18 03:44:53 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfdffff00000000, &(0x7f0000000180)="b1"})

2033/05/18 03:44:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:53 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

2033/05/18 03:44:53 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008929, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:53 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x9b, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x200000000000000}, 0xfffffe56)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:53 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7733]}, 0x10)

2033/05/18 03:44:53 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  800.162901] binder: 22684:22685 transaction failed 29189/-22, size 0-0 line 2856
[  800.196765] binder: 22684:22685 ioctl c0306201 20000240 returned -14
2033/05/18 03:44:53 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000005460, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:53 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7c9]}, 0x10)

2033/05/18 03:44:54 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60000, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8000, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  800.223519] binder: 22684:22685 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:54 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:54 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x1000000, &(0x7f0000000180)="b1"})

[  800.318966] binder: undelivered TRANSACTION_ERROR: 29189
[  800.401381] binder: 22713:22715 transaction failed 29189/-22, size 0-0 line 2856
[  800.438846] binder: 22713:22715 ioctl c0306201 20000240 returned -14
[  800.463536] binder: 22713:22715 transaction failed 29189/-22, size 0-0 line 2856
[  800.508882] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:54 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008995, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:54 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3ff2]}, 0x10)

2033/05/18 03:44:54 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:54 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:54 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:54 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfdffff, &(0x7f0000000180)="b1"})

2033/05/18 03:44:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  801.177837] binder: 22728:22740 transaction failed 29189/-22, size 0-0 line 2856
[  801.210286] binder: 22728:22740 ioctl c0306201 20000240 returned -14
2033/05/18 03:44:54 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000005421, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:54 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x505f]}, 0x10)

[  801.244685] binder: 22728:22740 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:55 executing program 0:
rt_sigprocmask(0x2, &(0x7f0000000040)={0x1}, &(0x7f0000000080), 0x8)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a0750906000000000000cdb0bc4d0009ff41f159de82102d"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:55 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:55 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:55 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x9}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  801.362153] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:55 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f1, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  801.417483] binder: 22769:22773 unknown command 101283232
[  801.453373] binder: 22769:22773 ioctl c0306201 20007000 returned -22
[  801.507525] binder: 22769:22773 ioctl c0306201 20000240 returned -11
[  801.527712] binder: 22769:22786 unknown command 101283232
[  801.540638] binder: 22769:22786 ioctl c0306201 20007000 returned -22
2033/05/18 03:44:55 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x54b]}, 0x10)

2033/05/18 03:44:55 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:55 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089a3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:55 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff7fffffff, 0x1)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:55 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xffffffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:55 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:55 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x2, 0x80)
sendmsg$nl_netfilter(r1, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000001440)={&(0x7f0000000200)={0x1214, 0x5, 0x2, 0x720, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x4}, [@typed={0x1004, 0x38, @binary="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"}, @nested={0x1ac, 0x1e, [@typed={0x8, 0x15, @u32=0x4}, @generic="83840e048994a0cbaccdfb227559a0acba370159775bb6dab5bb9d86565c20e63c5c292fe08b07e4764ee17a00c5fc3195c0b7e4cb22edb1273d362622da011900249313aa8875175fb1b3824be96d14e010438989ca48efff9d6c184d1abf2dc47cacb6449c4a1102ff8078f476221903cb681b8c15172c9bbe7440af9d88310b8522056f921d46d8be620113f13129601725fe75377446a2e22207dadf2517f5645f52e17ded187e9cb913f687e3bd74a5b9d8057c4dc15e3be549eb0627983c9528b9b69d9944669ac79cd89abf78e48a85ab1953da3d69674e330836e2510104fc38649ba46ac92e0c2771b9e55df820", @typed={0x10, 0x44, @str='/dev/vcsa#\x00'}, @generic="a838ca0cb9b87c495777f35cb1cf9af1545dab49068ad008c6a34d78292840bda61cc70705227ed46e1d66e61331084dc9b8ba54ce1bac7e99c951323e87257688d4840d0c4a89f239ded1ffa5e652cdb3aa336ba6dd7111476b06977e8e7b2c7e69d67f79d09a2b1d56a11dde7914bf11b9b85ca7197f33c10608fa84dd0d5b9e3f50d72c6ad87956e5425a6a43d47af6f17f47e37069570418d9b488c8"]}, @generic="c4447515504025617ca79cb5b87f11a21fe1d6a109c30f22f53d28c305b9804052cbff1e44ee5a9957b2ee911c6f0fb2f5bd6ed7ffcc487e4ad96a0a691bc5338919806dde0327463431adec7f"]}, 0x1214}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000050)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400)
r3 = accept$alg(r2, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000040)=""/77, &(0x7f00000000c0)=0x4d)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000014c0)=""/197)

[  802.188111] binder: 22812:22814 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008937, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:56 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa7b2000000000000]}, 0x10)

[  802.236012] binder: 22812:22818 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0)

2033/05/18 03:44:56 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:56 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11635840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0xfffffffffffffff7, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008924, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  802.458528] binder: 22840:22841 unknown command 1079534353
[  802.502132] binder: 22840:22841 ioctl c0306201 20007000 returned -22
[  802.526432] binder: 22840:22841 ioctl c0306201 20000000 returned -11
[  802.544288] binder: 22840:22841 unknown command 1079534353
[  802.555593] binder: 22840:22841 ioctl c0306201 20007000 returned -22
2033/05/18 03:44:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:56 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6784]}, 0x10)

2033/05/18 03:44:56 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="be", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0)

2033/05/18 03:44:56 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089a2, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xb804000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:56 executing program 0:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x5, 0x6, 0x7fffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x100, 0x7, 0x4288cc78, 0x80000001, 0x6, 0x0, 0x7ff}, {0x3, 0x8cb1, 0x3f, 0x0, 0xbe01, 0x2ae, 0x3, 0x100000000, 0x7, 0x6, 0x3, 0x0, 0x1}, {0x1, 0x8, 0x4, 0xaa6, 0x3f, 0x3, 0x9, 0x0, 0x64, 0x6, 0x4000000, 0x3f, 0x6}], 0x5})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  803.131393] binder: 22863:22871 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008946, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:56 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:56 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0)

[  803.177346] binder: 22863:22871 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:56 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x100000000000000]}, 0x10)

2033/05/18 03:44:57 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="845aa81278f3d163881ada8186e66aa5207b71677c4002008971")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x8000000802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:57 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000000002, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  803.294676] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000fffffd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  803.360749] binder: 22898:22899 transaction failed 29189/-22, size 0-0 line 2856
[  803.442565] binder: 22898:22899 transaction failed 29189/-22, size 0-0 line 2856
[  803.497270] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:57 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:57 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f00000000000000]}, 0x10)

2033/05/18 03:44:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0xa, &(0x7f0000000280)=[0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff])
r2 = getgid()
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getgroups(0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, <r4=>0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])
r5 = getgid()
getgroups(0x5, &(0x7f00000003c0)=[r1, r2, r3, r4, r5])
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r6, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r7 = syz_open_dev$sndmidi(&(0x7f0000000440)='/dev/snd/midiC#D#\x00', 0x276, 0x80)
connect$netrom(r7, &(0x7f0000000480)=@full={{0x3, {"d96bfb19295888"}}, [{"ce13dd3be39d7e"}, {"fd81bfc2c54343"}, {"91514e94d544ad"}, {"75a9f49248bf07"}, {"64b3b7c2b202e8"}, {"fa43260a20bf62"}, {"03802c41926873"}, {"cf12f898ae862b"}]}, 0x48)
r8 = memfd_create(&(0x7f00000001c0)=')\x00', 0x2)
ioctl$int_out(r8, 0x5462, &(0x7f0000000400))
ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f0000000200))
ioctl$LOOP_SET_FD(r0, 0x4c00, r6)
connect(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x3, 0x4, 0x1, {0xa, 0x4e24, 0xc3b, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}}, 0x80)
ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, &(0x7f0000000240)={0x7fffffff, 0x4, 0x80, 0x200})
socketpair(0x9, 0x7, 0xff, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000080)=0x40)

2033/05/18 03:44:57 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0100000007d82c99244715")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffe01, 0x8b01311fee829b85)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xe0, 0x2fc, "0f7ca982982c6e0f54ed5a18fbb2ac272e04ee84b51c13235ab079de586367caa4dcb49b7b2906bcc2062d04f33070d76c44461b09a31a04db8ffa2cfbcba35723ebddda6ce0d9a2b2ad809a6d78b49fc5aee964e36b3a4eb4153725bb4b2ee524ed457fe02a73c9068f095ef712bc1063adb00a94aff5a4ee82ea19ae4fdb3d8ec98dacb1a467ee497a6f76dd0fa8ff75b281b05414e72c1dade975a0a85503cc65cf409543a14a5e3cba27a049c19473417a97617416171733b4f3e0d28ca9188496a0c21de558451bad660656e9ec2de31930f0dcda17"}, &(0x7f00000001c0), 0x1000)

2033/05/18 03:44:57 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008932, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:57 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x97030000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:57 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:44:57 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008947, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  804.111804] binder: 22926:22927 transaction failed 29189/-22, size 0-0 line 2856
[  804.130528] binder: 22931:22932 transaction failed 29189/-22, size 0-0 line 2856
[  804.145920] binder: 22926:22927 ioctl c0306201 20000240 returned -14
2033/05/18 03:44:57 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:57 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4b05000000000000]}, 0x10)

[  804.179627] binder: 22931:22932 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:58 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:44:58 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008993, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:58 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:58 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
getdents64(r2, &(0x7f0000000040)=""/4, 0x4)
ioctl(r2, 0xffffffff, &(0x7f0000000080)="971551b83d59ba90f3c47a76af63d4c71f68d297e484feb01256350fd70b69ad2dd5b97bde8a6147b9b3fe43e2ec9a3ba42e656d0395c5b6829d14fa5131a8a847207abc8ccbdcabab4ac820f6be5bd4800c46f1681c11ded4a6195b3f287f74b8bf107899d75d3cbdea57e627e32f35849a25de8759f8573dc5f92fd6795827ca257be4f43763436319465e9181d8eb73a657aa8979fdcf1080c9342f772fb3861a0ccd68c587d17ce1d8dc0b02a7d5ab3e84a79653a48d6a6ec8e0091868a2a115f9715422208f5bd2025b19412468d46a05783f13f25b1786aba71318c4f465edc220e80b6be639")

[  804.320581] binder: undelivered TRANSACTION_ERROR: 29189
[  804.359864] binder: 22962:22964 transaction failed 29189/-22, size 0-0 line 2856
[  804.395841] binder: 22969:22971 transaction failed 29189/-22, size 0-0 line 2856
[  804.406920] binder: 22962:22964 ioctl c0306201 20000240 returned -14
[  804.431602] binder: 22969:22971 transaction failed 29189/-22, size 0-0 line 2856
[  804.520363] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:44:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:58 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x8000000000894a, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:58 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:58 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xafe60000]}, 0x10)

2033/05/18 03:44:58 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x40000000}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:58 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:58 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:44:58 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8913, &(0x7f0000000240)="0047fc2f07d82c99240970")
socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x1)
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
accept4$ipx(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x98, 0x0, &(0x7f0000000080)="56adae57e4a0293f41fa306428c51a62f73fdcf4ff7e8e021bec773b7a2e80613b28be783bc32123321d13c9dfda7a856c0e14b63fce9efcc20350d5ded74d7ed635faf5b7fb5d018e95ec0ae965db58552ee3f48e0512492e9807f89d8f4b16cd595b366e62832fed971774df647b39f1591161ede4a63662898d554e5ec53d9d58cf9c4adb55e822f6abb97563346e7d2c45ebacd658fc"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  805.095109] binder: 22989:22990 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:58 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008914, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:58 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8ff7]}, 0x10)

[  805.144920] binder: 22989:22990 ioctl c0306201 20000240 returned -14
2033/05/18 03:44:58 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:59 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  805.197852] binder: 22985:22986 transaction failed 29189/-22, size 0-0 line 2856
[  805.221431] binder: 22985:22986 ioctl c0306201 20000240 returned -11
2033/05/18 03:44:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:59 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000aaff09)="b8", 0x1, 0x48081, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
socket$kcm(0x29, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8105, 0x3ff)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:44:59 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008971, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:59 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  805.309751] binder: 22985:23026 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:44:59 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = msgget$private(0x0, 0x100)
msgctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/3)
mq_unlink(&(0x7f0000000140)='/dev/binder#\x00')
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8, 0x183001)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000340)={0x335, 0x80000001, 0xfffffffffffffff9, 0x2, 0x9, 0x1, 0xff, 0x5, 0x0, 0x3})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8)
openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x80002, 0x0)
setuid(r4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b591b2ff7ced71071351d3d0a35dedf1e404fb247030598aa75f6ee3e9e6800a8ed004e7bdf05cfda4d8f12ed5d110089fb980b0540903636615299bf4fe442ff6d08d1e0e9925a6fd0a37bef2bd8ceaa9f530fdbd5650b94a147a7e0557b1547ad62c6526f58e967115253377250e6becaaf79b73480c67cfb7489c178aa0290bed1745efcf70217cf77dc930bbf40ff8d531b8e9e0a34d63a932e321833f1a9f788e54f2f936510faafe6bda91dcc303c79b96c593b14e4bc48da60e05cd3510170009bc1e7e2e29f0"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:44:59 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:44:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  805.517325] binder: 23052:23053 unknown command -5074507
[  805.550297] binder: 23052:23053 ioctl c0306201 20007000 returned -22
[  805.566177] binder: 23052:23053 ioctl c0306201 200001c0 returned -11
[  805.590456] binder: 23052:23053 unknown command -5074507
[  805.596271] binder: 23052:23053 ioctl c0306201 20007000 returned -22
2033/05/18 03:44:59 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4fa1000000000000]}, 0x10)

2033/05/18 03:44:59 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x8000000000891e, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:59 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:59 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4b8, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:44:59 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:44:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:59 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x6}, 0x8)

2033/05/18 03:44:59 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='-wlan1^-\x00', 0xfffffffffffffffa)
keyctl$invalidate(0x15, r1)
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6f632740e56577e3cd39a60093f0725d4039df8c451e24f41e489aca603db95f0a249261ab0fcf7ec5682f207829f755982d56206c0647bfc81a6645dfb08b4995febc87dddbf6992aab09d345ea27d23e61a3e85af6159cee42e524faa175b204ba753c11cd6b0867d4598bf1f37ef27f0de35e1283684f6ccf7e272d110f3dcef11de2cd54cd7e527e17a27226628e0e4e51798db97088804eec1b432fa84f4a896f0235a35ac4624f99e5557edd1d7b"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffe3d, 0x0, &(0x7f0000000140), 0x1d6, 0x0, &(0x7f0000000180)='Q'})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x30000, 0x0)
accept$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14)
r5 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x99ab, 0x4e21, 0x1, 0x2, 0x0, 0x80, 0x87, r4, r5}, {0x4, 0x6, 0x10001, 0xff, 0x6, 0x48000000000000, 0x6, 0x6}, {0x3, 0x1f, 0x100000000, 0xab}, 0x8, 0x6e6bc0, 0x0, 0x1, 0x1, 0x2}, {{@in6, 0x4d2, 0xff}, 0xa, @in=@loopback=0x7f000001, 0x0, 0x4, 0x1, 0x7, 0x3, 0x4cc9, 0x1}}, 0xe8)

2033/05/18 03:44:59 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  806.081523] binder: 23068:23071 unknown command 1076323183
[  806.108689] binder: 23068:23071 ioctl c0306201 20007000 returned -22
2033/05/18 03:44:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:44:59 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:44:59 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008970, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  806.137481] binder: 23068:23071 ioctl c0306201 200000c0 returned -11
[  806.167177] binder: 23068:23071 unknown command 1076323183
2033/05/18 03:44:59 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xef5b]}, 0x10)

[  806.193472] binder: 23068:23071 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:00 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:00 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ae5f03cf53d5bdfca5fa5c098647e0c6227219f4bb25938f9b1978ced876f7098415fee12552b147df005a774869634c307c4b43ad6245afb6ca86b2089f240000"], 0x0, 0x0, &(0x7f0000000040)})
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100, 0x400)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:00 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

[  806.417928] binder: 23118:23119 unknown command 0
[  806.439643] binder: 23118:23119 ioctl c0306201 20000080 returned -22
[  806.450419] binder: 23118:23119 ioctl c0306201 20000240 returned -11
[  806.461651] binder: 23118:23119 unknown command 0
[  806.468972] binder: 23118:23119 ioctl c0306201 20000080 returned -22
2033/05/18 03:45:00 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40000)
connect$ipx(r2, &(0x7f0000000040)={0x4, 0x8, 0x7fff, "1157bfc800a7", 0x1ff}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4)
getrandom(&(0x7f00000000c0), 0x0, 0x2)

2033/05/18 03:45:00 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

2033/05/18 03:45:00 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x8000004020940d, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:00 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xacdf]}, 0x10)

2033/05/18 03:45:00 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:00 executing program 0:
r0 = socket$kcm(0x29, 0x1005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

[  807.101583] binder: 23142:23143 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:00 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xcf440000]}, 0x10)

[  807.151264] binder: 23142:23143 transaction failed 29189/-22, size 0-0 line 2856
[  807.266240] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:01 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089b1, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:01 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:01 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0xfffffffffffffeff)

2033/05/18 03:45:01 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

2033/05/18 03:45:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffff000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:01 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f8000000000000]}, 0x10)

2033/05/18 03:45:01 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r1=>0x0, 0x10001, 0x7, [0x400, 0x2, 0x49, 0x5, 0x8, 0x2, 0x4]}, &(0x7f0000000080)=0x16)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0xbb46}, &(0x7f0000000100)=0x8)
socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x2000008912, &(0x7f0000000540)="0047fc2f07d82c992409700e57ed05777a3049a1a969c9725aafb8bf0300000000000000f649ba55e118d781450e44bcca94fe9a35a9a7d22de7cb6e7be880774c9a2660da2fb7e14148695ef2232b1ecd950045cf681289817adc28efb6a64d77c9be3c2815b85237f24441532a4954c9f2e63a0d3e9d047f9cde63ee166ce7cb1b5dd2dc53719e56195b6ed6c2b93c3635408985d1f41bed8e8ec25c3fd8c5903649e3efe45cedbf90f941aeb8e9de970d9c25cea37cf534a7d1abcb02a5c120a274603a10b727a7cf64243d1c128db549366eebeb1027dc8ba69be73cecb2336005b92cd683338d07c97e37eb3a14e696df6f465dd2aef48b1aedf6ae383b3dac1d567a7a32bd0954668512eeb10dee0ed5c0567d6bae7f436a98c62b3b01c4ae63e6771e4f84102ce6a6f256f2c318adf9b6ec3316a2a00128c9ff7f51662b4ab19f6ae45b6573e0e17b8b01c329a7cf3243d314ec148d7044486028844e3b3a2ef79636d4da65f8653027a573b3df055383d000ad8aab8854c47cbe075e87f958df8c6c190a25236737d46ba40a0e1eebd18abe83c840831a6f9b96255f")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="32a84337ecfb83208366fa8785fa23664397e56023eddf399732485bf90e2467ee29f4ecd78f9ac0ded3e8e12ebc45ac21a8ef364aad98df5337b8d7280210b75da58c5d1cdef9d0789ca54e01514a0b9bac9b3d406a66744201d4a6f19dbf743fa189a91eec2a0a155a02c5e2056e4d260d39b4f1907230da04f049126e3487e41543ade159ef29a5c691b411cca5cf96dcb3c55ed7e10cc2eaa8c982dd4bb2a38ff9655b6719411bc840580ab8362e296b91ea84e7e97d3c34a2ecfaacb70b3b073397106775905705fe08e5653be8aa62ec9f4c78e727bd045ede2b2c132fd92ffc07a950a426"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  808.082235] binder: 23178:23180 transaction failed 29189/-22, size 0-0 line 2856
[  808.083835] binder: 23176:23179 unknown command 927180850
2033/05/18 03:45:01 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008913, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  808.138297] binder: 23176:23179 ioctl c0306201 20007000 returned -22
[  808.144568] binder: 23178:23180 ioctl c0306201 20000240 returned -14
[  808.176643] binder: 23176:23179 ioctl c0306201 20000240 returned -11
2033/05/18 03:45:01 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:01 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xb7610000]}, 0x10)

2033/05/18 03:45:02 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:02 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x6fce, 0x0, 0x8, 0x8, 0x1}, 0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  808.216300] binder: 23176:23193 unknown command 927180850
[  808.245818] binder: 23176:23193 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:02 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x26, 0x0, &(0x7f0000000040)="addfca0a429dd0a81e4546b04eb8ed0efb87ad6bd6fa16c55dcb2aa80a20b194dcfcb2d35fda9f2b71b322f52ad98e73eaf3f68d177451505f528785b6f8842fb1704424a9b985b4b2961a7667726d854d5381248362306ec4858c21fe2dd3308187e417115bedfc7c3bbb8e947bd30651ecef987fceb2d64f6f65b0a106000000000000002771f7718355616a3eac8fc0e327afef630e168b225e2eaaf5164a1ac44b61863bee4b73004169cdb79a2c52"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000005452, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  808.300698] binder: 23203:23204 transaction failed 29189/-22, size 0-0 line 2856
[  808.358105] binder: 23203:23204 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:02 executing program 7:
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:02 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3705]}, 0x10)

2033/05/18 03:45:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  808.430482] binder: 23217:23218 transaction failed 29189/-22, size 0-0 line 2856
[  808.492101] binder: 23229:23230 transaction failed 29189/-22, size 0-0 line 2856
[  808.508798] binder: 23217:23218 transaction failed 29189/-22, size 0-0 line 2856
[  808.564690] binder: 23229:23230 ioctl c0306201 20000240 returned -14
[  808.595636] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:02 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8a7, 0x2)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={<r1=>0x0, 0x9}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x9}, 0x8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="270000b7fac5de44eaf503000000000000000047cb341e520000a624ef99183a10dcb10000000000000000"], &(0x7f00000002c0)=0x2f)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
rt_sigtimedwait(&(0x7f00000001c0)={0x5}, &(0x7f0000000200), &(0x7f0000000240), 0x8)
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0xffff)

2033/05/18 03:45:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x8000000000891f, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:02 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xdc05]}, 0x10)

2033/05/18 03:45:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:02 executing program 0:
r0 = socket$kcm(0x29, 0x7, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x41)
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r1)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:02 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3f000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:02 executing program 7:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:02 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  809.092589] binder: 23248:23258 transaction failed 29189/-22, size 0-0 line 2856
[  809.092881] binder: 23246:23257 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:02 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:02 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe]}, 0x10)

2033/05/18 03:45:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000005451, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  809.141945] binder: 23248:23260 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:02 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:02 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80040, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000140)={0x0, 0x81, 0x3ff, &(0x7f0000000100)=0x1f})
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  809.233876] binder: undelivered TRANSACTION_ERROR: 29189
[  809.254500] binder: 23246:23257 ioctl c0306201 20000240 returned -14
[  809.319978] binder: 23283:23284 transaction failed 29189/-22, size 0-0 line 2856
[  809.358978] binder: 23283:23284 transaction failed 29189/-22, size 0-0 line 2856
[  809.428852] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:03 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x2]}, 0x10)

2033/05/18 03:45:03 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008911, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:03 executing program 7:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:03 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0)

2033/05/18 03:45:03 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x100005, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x17, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0)
getsockname$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:03 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:03 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@empty, @broadcast, <r3=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xa4, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x931, 0x70bd27, 0x25dfdbfb, {0x0, r3, {0xffff, 0xc}, {}, {0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x91}, @TCA_STAB={0x20, 0x8, @TCA_STAB_BASE={0x1c, 0x1, {0x1, 0x9, 0x9, 0x2, 0x0, 0x1, 0x8}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x7c}, 0x1}, 0x4000080)
ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000300)={0x9, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')

[  810.101867] binder: 23306:23308 transaction failed 29189/-22, size 0-0 line 2856
[  810.105321] binder: 23297:23299 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:03 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0)

2033/05/18 03:45:03 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008920, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  810.154649] binder: 23306:23308 ioctl c0306201 20000240 returned -14
[  810.156996] binder: 23297:23299 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:03 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x8, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040))
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:03 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x3f000000]}, 0x10)

2033/05/18 03:45:04 executing program 7:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:04 executing program 0:
r0 = add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="7fcb0ed96b3126c3fbd78e48d4d1dd76933f5951cf6051ee11e6d288551edd5a3f6b7e7fd78054fd8574323265f0a4a85103d40cdae57587ddb0cc7512dac92408763aae479ea42b2abc634f09296183f7eca48a1b006b56f883d888414d3226270c9ca8568b5f9947e9b18e19b49bd399f0e84c5e85af4156cec721c1cd2dd0be01826d6c920af108c76c10c01fd4d5f017a8af1308bdb8d6c57e57d4062536c6e4589ac9c815400d40476a084debcf3c", 0xb1, 0xfffffffffffffffc)
request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='/dev/binder#\x00', r0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:04 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1}, 0x0)

2033/05/18 03:45:04 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000c0045878, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  810.309145] binder: undelivered TRANSACTION_ERROR: 29189
[  810.336965] binder: 23336:23337 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:04 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc8050000]}, 0x10)

[  810.387233] binder: 23341:23345 ioctl c0306201 20000240 returned -11
[  810.402783] binder: 23336:23337 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:04 executing program 7:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:04 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/vsock\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000c80)={{0x7, 0xfffffffffffffffb, 0x8, 0xff, 0x1, 0x5}, 0x1, 0x1, 0xb2, 0x0, 0x1000, "65a9c5250aac505e3538a71c8d18c49bf3e9b4d62b13e84d8121298ec9c4ef68e79c7d1c328aea80f792b8cbe8addaf68d876afbd7021f9cc61ecae717f1ac71ceba878cd773e7af0e07f868743c43bc606fc8a9ac5c71237d316defe15c4366cf7153ca5ed499db9004881d8d3c564c46a902126af3253b89677da46ea7467e"})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x220101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000f00))
socket$inet6(0xa, 0x2, 0x4)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x4e, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000d40)=0xfffffffffffffda3)
ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000c00))
r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)})
recvmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000a40)=""/210, 0xd2}], 0x2, &(0x7f0000000b80)=""/23, 0x17, 0xffffffffffffff4f}, 0x1)
r4 = semget$private(0x0, 0x3, 0x20)
semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/90)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000e80)=0xe8)
r6 = getegid()
fchown(r1, r5, r6)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8)
sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@hci={0x1f, r7, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="1493bbc44d22e762d5dfadce84d7d470e4dcb908880755f769b2e453eaddf11dd7afac24c93bafcddb1a6b4be44d13597ebfd2540fe846583c6a36035624bcdf6bc3557d49fa6a1ee5f713d1432923f8e53e33cceb4b26ac14517c55deff0f40bb4c0131d0b63063a6d9f4b72a95a1ad192fa88ad188d2f406bfe04c943430af434565c9741816fbaeb861e0775f46aead296ae7467b8410969b8420727bb9da232c74425b7f96dac8614041ca3704939c", 0xb1}, {&(0x7f00000001c0)="ce92a90d6dd3f08cf8839f9d1ebf59a898f2299d03b7c22228239d3d046e39d41c74462909caf176f61d8df9919dad91c82f", 0x32}, {&(0x7f0000000440)="af251ff9ee130664ba529a8296eccbbda05bf18c75de0d12be81a74a5be16154dd6562163e3fb434b1ff46b9e2d0e9cb3ded3479f4b83566ed257faf53f87153b47d18f33a21b1ffb3ea057f6a264ca81c5fe50c7312515dd3795395c26bb7985a60f9220cc9d47b91e690fa1c61a29433e7fb3821118b932b46d00e704b421da9958771b4c0ea3882a9b19a2061fa21d894dd278079c9ef2c0b2fa334df4517b27db58f1eb7c1db287c89c6864ef297bd654dc9ab1d8088609b1209ff4e", 0xbe}], 0x3, &(0x7f0000000540)=[{0x58, 0x1ff, 0x9, "f38b1e68b5499aca62ad140c18a5350bb382ce3c095dac88a9e18c4985c3fec9f79516c49516b803a7c45f693c4995ecf1f5d37a1325de776d154fc40699799a6cab0e"}, {0xb0, 0xff, 0x4, "621dcaef6d8769589d9dcb28fb8eef865a1aa815b8c5117c9ee2f3ed048f2cdb50818c023268b65edcd4bbe4e26fd69cab6d05cdb1fd268e7b2d28c928d011797a10797f09f57daa07b636c7a9a49add48538b2d1c8e1aa6b5ffb83a868f25a154473e4804691395cabcf9e5fb770700d89777a13a865b7ada5b92b1070f3255d5635c10c7fcf3ff280ccd8c236decdd84b21d269d531db3b9e54274a047ecd1"}, {0x30, 0x103, 0x8, "0dd440796d9fcedef54b7400928d0dc598bfcbcc66d276f2cfcb1ca79964"}, {0xd0, 0x103, 0x5, "97ea2e0800b942ae889d92dc38ec27f212fadb15c4a64d77a50d76ffb255edca5182c419fc8890589a85a098529142c40662191075340c4f683a88612e09096e6ff5c7d75c4177f550203c6947bbe7971f4c434618708834a5c18031f272c901f8c5c8b60bfc592c55f961b476801c6865daffc37dd71d1f7c8e348d837b6b931067dc372065e60920e6c349852a4ce5392ab5df0a81f131e5f4b4ecec85d6de8425300986f19d8d8a82f15fd320f6b753d108ca55b79f4fb4fb0d9265"}, {0xb0, 0x117, 0x2f73, "c082a0ef6ab680fd4d40c083b9be0686d7e6ed69b115edf978ed9a3098686cc03ead3f2a37681d9619fec28583f74e75186c9754caecf53b778c9499aacd6984ab7ff2772f46ba7d6fd1cd3f5f6d04b476ed7861ed73d229f41723c28efe604e67f7c99fd743558df84a1857114b1ec65241d8f2a60c9b949cc2990305ea0e42162213a4007a5a2b7d8153fca9e54ad3046d5a1d153bdc2f351e4a5e"}, {0xc8, 0x10d, 0x6, "b9abde766c513470cecac5442302df756b6f8cfe8d70d928a0d4bf1bcdb0da564abf89be83a7eb0ebfd774b1a6ffe23f6ea51bfd8f13d9e2b87c18612760102763723c5079614567d4ceaabda224589fbac87b451a7dddc43663766b90c2397bb9f9aad1eab6a90206d0fb7a09d52c1c86449aa4023f78bd3f4e2b282b2d2cb2b67f008e42a9931693df73c01744b6cc71ee7910f35a55378a0780cbeed0f36491e9e83a9f986226cd3b55622f32109ecc9a"}], 0x380, 0x8010}, 0x40010)

[  810.586760] Unknown ioctl -2147202861
[  810.590853] binder: 23367:23369 transaction failed 29189/-22, size 0-0 line 2856
[  810.638317] binder: 23367:23369 ioctl c0306201 20000240 returned -14
[  810.643568] binder: 23366:23370 unknown command 0
[  810.652242] binder: 23366:23370 ioctl c0306201 20007000 returned -22
[  811.504210] Unknown ioctl -2147202861
2033/05/18 03:45:05 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x800, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:05 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7494f89618634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40000, 0x0)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @multicast2=0xe0000002}, {0x7}, 0x4c, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 'yam0\x00'})

2033/05/18 03:45:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:05 executing program 7:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008942, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:05 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3f00, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:05 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfffff000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xbf95]}, 0x10)

[  811.529913] binder: 23366:23382 unknown command 0
[  811.534880] binder: 23366:23382 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008994, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  811.625004] binder: 23396:23397 transaction failed 29189/-22, size 0-0 line 2856
[  811.640894] binder: 23404:23405 unknown command -1762093964
[  811.664448] binder: 23404:23405 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f22]}, 0x10)

[  811.671835] binder: 23396:23397 ioctl c0306201 20000240 returned -14
[  811.691331] binder: 23404:23405 ioctl c0306201 20000240 returned -11
[  811.714643] binder: 23404:23405 unknown command -1762093964
2033/05/18 03:45:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:05 executing program 7:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  811.742239] binder: 23404:23405 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:05 executing program 0:
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100)=0xb76, 0x4)
socket$kcm(0x29, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8d0886aa1ed059503fe388c0f1123d956caa7ee33cb17af1d6f21eb82fc7fe6d79edc3bd259e7d1981fe64419d03c308233faecd26b7fa7e08cf1cc75d3693549a8da7e966c2a0c12abde32cc7fbe03729e0d6f76a268ce2eedcc6f75f054b79ce8b27f9e0eea94b49349a6d0c83ddc327aab80fd6b9e52f9b12ee96959d21e4602f2eed775a5e8f3ce44334d2758e4e24ae48e92baba7a6f1d02ce4932ff2dd2e0885f63afb1c34585f3209017567a4ec083f3235b48b09b2b724bfcbd6de92a817746dadd626dc7f3a9283ab2274dd9e09b25709c5ad"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008949, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  811.825117] binder: 23427:23429 transaction failed 29189/-22, size 0-0 line 2856
[  811.857626] binder: 23427:23429 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:05 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x974a000000000000]}, 0x10)

2033/05/18 03:45:05 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  811.931969] binder: 23435:23437 unknown command -1434056563
[  811.953910] binder: 23435:23437 ioctl c0306201 20007000 returned -22
[  811.982834] binder: 23443:23444 transaction failed 29189/-22, size 0-0 line 2856
[  812.004480] binder: 23435:23437 ioctl c0306201 20000240 returned -11
2033/05/18 03:45:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f2, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  812.032988] binder: 23443:23444 ioctl c0306201 20000240 returned -14
[  812.039968] binder: 23435:23454 unknown command -1434056563
[  812.052135] binder: 23435:23454 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:06 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x397, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:06 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1fdb000000000000]}, 0x10)

2033/05/18 03:45:06 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:06 executing program 0:
r0 = socket$kcm(0x29, 0x80000000008, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="eba63007655bb9f6b1d49c905a1881257e45054086fc9b2985d7768e5e093146ddfc2da3b9e48543e42957a01a6d07eab0cdaefb75c975198988688183959e5cd49b41f4ae0ae348a49ab54dac304773d2a4d2ad20b4867362f312945c52db80e5bc23fcfee5b5c2ccf054706a628ea80f3dc5aa3e01ce46b751b39d3c9155503083ef9a3f1751d31493e3abd063a33fe1b3"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400400, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x7, 0x1, 0xf, 0x17, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d4, 0x10001, 0xf71a00000000, 0x8c, 0x2, 0x1}, @sadb_key={0x8, 0x0, 0x1a8, 0x0, "524e5b9f8d92470d4440cc195f56550cc4c6e4722c0feb4726e93670f88b31181c5522bf290132c98b8a5e35975230e8922fa31e8e"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@dev={0xfe, 0x80, [], 0x15}, 0x11, 0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x9, 0xfa, 0x4, 0x80000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x8000}]}, 0xb8}, 0x1}, 0x91)
setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000003c0)={0x7ff}, 0x4)

2033/05/18 03:45:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x8000000000891d, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsync(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:06 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
getdents64(r2, &(0x7f0000000040)=""/4, 0x4)
ioctl(r2, 0xffffffff, &(0x7f0000000080)="971551b83d59ba90f3c47a76af63d4c71f68d297e484feb01256350fd70b69ad2dd5b97bde8a6147b9b3fe43e2ec9a3ba42e656d0395c5b6829d14fa5131a8a847207abc8ccbdcabab4ac820f6be5bd4800c46f1681c11ded4a6195b3f287f74b8bf107899d75d3cbdea57e627e32f35849a25de8759f8573dc5f92fd6795827ca257be4f43763436319465e9181d8eb73a657aa8979fdcf1080c9342f772fb3861a0ccd68c587d17ce1d8dc0b02a7d5ab3e84a79653a48d6a6ec8e0091868a2a115f9715422208f5bd2025b19412468d46a05783f13f25b1786aba71318c4f465edc220e80b6be639")

[  812.543788] binder: 23472:23473 transaction failed 29189/-22, size 0-0 line 2856
[  812.546254] binder: 23481:23486 unknown command 120628971
[  812.552907] binder: 23476:23480 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008943, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:06 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:06 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:06 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa7b20000]}, 0x10)

[  812.584847] binder: 23472:23473 ioctl c0306201 20000240 returned -14
[  812.595681] binder: 23481:23486 ioctl c0306201 20007000 returned -22
[  812.621527] binder: 23481:23486 ioctl c0306201 20000240 returned -11
2033/05/18 03:45:06 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}, r1}, 0x14)
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x18}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:06 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11636840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000000)="b1"})
recvmmsg(r0, &(0x7f0000009040)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/217, 0xd9}], 0x5, &(0x7f0000000540)=""/147, 0x93, 0x6}, 0xc35}, {{&(0x7f0000000600)=@l2, 0x80, &(0x7f0000002740)=[{&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/10, 0xa}], 0x4, &(0x7f0000002780)=""/4096, 0x1000, 0x1}, 0x5d}, {{&(0x7f0000003780)=@pptp, 0x80, &(0x7f0000004980)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/56, 0x38}, {&(0x7f0000004840)=""/31, 0x1f}, {&(0x7f0000004880)=""/201, 0xc9}], 0x4, &(0x7f00000049c0)=""/216, 0xd8, 0x2}, 0x2}, {{&(0x7f0000004ac0)=@alg, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/51, 0x33, 0x418}, 0x80000001}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004bc0)=""/70, 0x46}, {&(0x7f0000004c40)=""/68, 0x44}, {&(0x7f0000004cc0)=""/163, 0xa3}, {&(0x7f0000004d80)=""/68, 0x44}, {&(0x7f0000004e00)=""/191, 0xbf}, {&(0x7f0000004ec0)=""/131, 0x83}, {&(0x7f0000004f80)=""/20, 0x14}, {&(0x7f0000004fc0)=""/72, 0x48}, {&(0x7f0000005040)=""/236, 0xec}], 0x9, &(0x7f0000005200)=""/187, 0xbb, 0x5}, 0x7}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000052c0)=""/231, 0xe7}], 0x1, 0x0, 0x0, 0x1}, 0x38c}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005400)=""/119, 0x77}, {&(0x7f0000005480)=""/175, 0xaf}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x3, &(0x7f0000005580)=""/62, 0x3e, 0xfffffffffffffffc}, 0x3}, {{&(0x7f00000055c0)=@pppol2tpv3={0x0, 0x0, {0x0, <r2=>0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005640)=""/205, 0xcd}, {&(0x7f0000005740)=""/19, 0x13}, {&(0x7f0000005780)=""/66, 0x42}, {&(0x7f0000005800)=""/45, 0x2d}, {&(0x7f0000005840)=""/202, 0xca}, {&(0x7f0000005940)=""/39, 0x27}, {&(0x7f0000005980)=""/255, 0xff}], 0x7, &(0x7f0000005b00)=""/55, 0x37, 0x4}, 0x10000}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005b40)=""/221, 0xdd}, {&(0x7f0000005c40)=""/63, 0x3f}], 0x2, &(0x7f0000007040)=""/4096, 0x1000, 0x6}}, {{&(0x7f0000005cc0)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d40)=""/14, 0xe}, {&(0x7f0000005d80)=""/45, 0x2d}, {&(0x7f0000005dc0)=""/145, 0x91}], 0x3, &(0x7f0000008040)=""/4096, 0x1000}, 0x9}], 0xa, 0x40, &(0x7f0000005ec0)={0x77359400})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000005f00), &(0x7f0000005f40)=0x14)

[  812.670360] binder: 23481:23486 unknown command 120628971
[  812.690652] binder: 23481:23486 ioctl c0306201 20007000 returned -22
[  812.809074] binder: 23508:23514 transaction failed 29189/-22, size 0-0 line 2856
[  812.867570] binder: 23522:23523 unknown command 1080582929
[  812.874739] binder: 23508:23514 ioctl c0306201 20000240 returned -14
[  812.900272] binder: 23522:23523 ioctl c0306201 20007000 returned -22
[  812.929912] binder: 23522:23523 ioctl c0306201 20000240 returned -11
[  812.956300] binder: 23522:23523 unknown command 1080582929
[  812.975210] binder: 23522:23523 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:07 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe00000000000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008927, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:07 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa00]}, 0x10)

2033/05/18 03:45:07 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x8001)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x5, 0x9f, &(0x7f0000000040)="73822bc24a4c3cb10a5954065347bf26d67174fca86adceb168e7516161af3358067ef81a13bb763948ee8e45cc258c7ffa5d072eb8541f03218f0815627a7698055a818b96c11cab564fc979c1c434f8627d4beae012c54ced313840919fcabac0928ba01dc14b78b919be59fae63caf04dde52b708cc3670e0ba14ed88987be5dee9d4cf083fe82c0fd1a7d62a2023e121479260ba0d9be8bcacceb35f67"})

2033/05/18 03:45:07 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:07 executing program 3 (fault-call:3 fault-nth:0):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:07 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x4, &(0x7f0000000240)="0047fc2f07d82c99240370")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000c0189436, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  813.559371] FAULT_INJECTION: forcing a failure.
[  813.559371] name failslab, interval 1, probability 0, space 0, times 0
[  813.570710] CPU: 0 PID: 23549 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  813.577999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  813.587367] Call Trace:
[  813.589977]  dump_stack+0x1b9/0x294
[  813.593627]  ? dump_stack_print_info.cold.2+0x52/0x52
[  813.598830]  ? lock_downgrade+0x8e0/0x8e0
[  813.602998]  should_fail.cold.4+0xa/0x1a
[  813.607076]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  813.612191]  ? __local_bh_enable_ip+0x161/0x230
[  813.616882]  ? _raw_spin_unlock_bh+0x30/0x40
[  813.621301]  ? release_sock+0x1e2/0x2b0
[  813.625282]  ? rcu_is_watching+0x85/0x140
[  813.629446]  ? __release_sock+0x3a0/0x3a0
[  813.633609]  ? find_held_lock+0x36/0x1c0
[  813.637707]  ? check_same_owner+0x320/0x320
[  813.642047]  ? rcu_note_context_switch+0x710/0x710
[  813.646993]  ? __netlink_lookup+0x5cf/0xaa0
[  813.651337]  __should_failslab+0x124/0x180
[  813.655592]  should_failslab+0x9/0x14
[  813.659406]  kmem_cache_alloc_node+0x272/0x780
[  813.663998]  ? find_held_lock+0x36/0x1c0
[  813.668079]  __alloc_skb+0x111/0x780
[  813.671799]  ? skb_scrub_packet+0x580/0x580
[  813.676119]  ? rcu_is_watching+0x85/0x140
[  813.680260]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  813.685456]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  813.691073]  ? netlink_autobind.isra.34+0x240/0x330
[  813.696083]  netlink_sendmsg+0xb01/0xfa0
[  813.700141]  ? netlink_unicast+0x740/0x740
[  813.704371]  ? security_socket_sendmsg+0x94/0xc0
[  813.709117]  ? netlink_unicast+0x740/0x740
[  813.713348]  sock_sendmsg+0xd5/0x120
[  813.717065]  ___sys_sendmsg+0x805/0x940
[  813.721048]  ? copy_msghdr_from_user+0x560/0x560
[  813.725807]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  813.731422]  ? proc_fail_nth_write+0x96/0x1f0
[  813.735913]  ? __fget_light+0x2ef/0x430
[  813.739884]  ? fget_raw+0x20/0x20
[  813.743327]  ? find_held_lock+0x36/0x1c0
[  813.747488]  ? kasan_check_write+0x14/0x20
[  813.751805]  ? wait_for_completion+0x870/0x870
[  813.756389]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  813.761917]  ? sockfd_lookup_light+0xc5/0x160
[  813.766406]  __sys_sendmsg+0x115/0x270
[  813.770293]  ? __ia32_sys_shutdown+0x80/0x80
[  813.774693]  ? __sb_end_write+0xac/0xe0
[  813.778658]  ? fput+0x130/0x1a0
[  813.781935]  ? ksys_write+0x1a6/0x250
[  813.785738]  __x64_sys_sendmsg+0x78/0xb0
[  813.789791]  do_syscall_64+0x1b1/0x800
[  813.793672]  ? finish_task_switch+0x1ca/0x840
[  813.798156]  ? syscall_return_slowpath+0x5c0/0x5c0
[  813.803076]  ? syscall_return_slowpath+0x30f/0x5c0
[  813.808012]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  813.813374]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  813.818220]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  813.823401] RIP: 0033:0x455a09
[  813.826574] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  813.834359] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  813.841627] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  813.848886] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
2033/05/18 03:45:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008990, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  813.856143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  813.863396] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000000
[  813.873191] binder: 23541:23542 transaction failed 29189/-22, size 0-0 line 2856
[  813.881881] binder: 23539:23552 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:07 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x5, 0x8001}, {0x100000001, 0x2}, 0x5d50a251, 0x5, 0x8000})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:07 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:07 executing program 3 (fault-call:3 fault-nth:1):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  813.906695] binder: 23539:23552 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:07 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x800, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000480))
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffd, 0x400000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0x400}}, 0x10000, 0x2e6}, &(0x7f0000000100)=0x90)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={r4, 0x8, 0x0, 0x6, 0x892}, &(0x7f0000000400)=0x18)
keyctl$get_keyring_id(0x0, r2, 0x401)
r5 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x8e, 0x0, &(0x7f0000000280)="93e9419fb91c377c6e4f4eef38a26c473381cc9d0015f3b96138fb00d4a92407ae792d17fa3c84b1b51e79362c092d7cba0c83eae12a3c5941313064ebbca8b81d86958dee8bcb5a77e529d836845e85bdc16db703fea1ee0561b86ee1c3376c83e94a000063f688602f6b1b05d2ec7c508800b87eb75b32b6abb09dd32fd3642e8999f71e42a18ef7e7a5a1517a"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f00000000c0))

2033/05/18 03:45:07 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x9f7e]}, 0x10)

2033/05/18 03:45:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000c020660b, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  813.981849] binder: 23541:23542 ioctl c0306201 20000240 returned -14
[  814.011044] binder: undelivered TRANSACTION_ERROR: 29189
[  814.063728] binder: 23578:23579 transaction failed 29189/-22, size 0-0 line 2856
[  814.098388] binder: 23578:23579 ioctl c0306201 20000240 returned -11
[  814.137513] binder: 23578:23591 transaction failed 29189/-22, size 0-0 line 2856
[  814.147922] FAULT_INJECTION: forcing a failure.
[  814.147922] name failslab, interval 1, probability 0, space 0, times 0
[  814.159245] CPU: 1 PID: 23576 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  814.166529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  814.175888] Call Trace:
[  814.178492]  dump_stack+0x1b9/0x294
[  814.182151]  ? dump_stack_print_info.cold.2+0x52/0x52
[  814.187360]  ? is_bpf_text_address+0xd7/0x170
[  814.191882]  should_fail.cold.4+0xa/0x1a
[  814.195957]  ? __save_stack_trace+0x7e/0xd0
[  814.200294]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  814.205422]  ? save_stack+0x43/0xd0
[  814.209062]  ? kasan_kmalloc+0xc4/0xe0
[  814.212957]  ? kasan_slab_alloc+0x12/0x20
[  814.217121]  ? find_held_lock+0x36/0x1c0
[  814.221210]  ? check_same_owner+0x320/0x320
[  814.225546]  ? rcu_note_context_switch+0x710/0x710
[  814.232371]  __should_failslab+0x124/0x180
[  814.236726]  should_failslab+0x9/0x14
[  814.240528]  kmem_cache_alloc_node_trace+0x26f/0x770
[  814.245630]  __kmalloc_node_track_caller+0x33/0x70
[  814.250552]  __kmalloc_reserve.isra.38+0x3a/0xe0
[  814.255301]  __alloc_skb+0x14d/0x780
[  814.259016]  ? skb_scrub_packet+0x580/0x580
[  814.263346]  ? rcu_is_watching+0x85/0x140
[  814.267505]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  814.272693]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  814.278217]  ? netlink_autobind.isra.34+0x240/0x330
[  814.283228]  netlink_sendmsg+0xb01/0xfa0
[  814.287281]  ? netlink_unicast+0x740/0x740
[  814.291507]  ? security_socket_sendmsg+0x94/0xc0
[  814.296257]  ? netlink_unicast+0x740/0x740
[  814.300489]  sock_sendmsg+0xd5/0x120
[  814.304210]  ___sys_sendmsg+0x805/0x940
[  814.308182]  ? copy_msghdr_from_user+0x560/0x560
[  814.312945]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  814.318476]  ? proc_fail_nth_write+0x96/0x1f0
[  814.323067]  ? __fget_light+0x2ef/0x430
[  814.327052]  ? fget_raw+0x20/0x20
[  814.330508]  ? find_held_lock+0x36/0x1c0
[  814.334561]  ? kasan_check_write+0x14/0x20
[  814.338873]  ? wait_for_completion+0x870/0x870
[  814.343451]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  814.349074]  ? sockfd_lookup_light+0xc5/0x160
[  814.353567]  __sys_sendmsg+0x115/0x270
[  814.357469]  ? __ia32_sys_shutdown+0x80/0x80
[  814.361883]  ? __sb_end_write+0xac/0xe0
[  814.365861]  ? fput+0x130/0x1a0
[  814.369217]  ? ksys_write+0x1a6/0x250
[  814.373028]  __x64_sys_sendmsg+0x78/0xb0
[  814.377109]  do_syscall_64+0x1b1/0x800
[  814.381007]  ? finish_task_switch+0x1ca/0x840
[  814.385507]  ? syscall_return_slowpath+0x5c0/0x5c0
[  814.390430]  ? syscall_return_slowpath+0x30f/0x5c0
[  814.395354]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  814.400724]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  814.405572]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  814.410758] RIP: 0033:0x455a09
[  814.413941] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  814.421653] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  814.428922] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  814.436199] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  814.443466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  814.450738] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000001
2033/05/18 03:45:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xfeffffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:08 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:08 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008930, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:08 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x101, 0x620040)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000001c0)={0x3, 0x8000})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000100)={0x2013})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f00000002c0)={'veth1_to_bridge\x00', {0x4, 0x3, 0x2, "0bc62c6c8aaf", 0x5}})
r4 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb)
keyctl$invalidate(0x15, r4)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)={0x7, 0x3, 0x2a69, 0x0, 0x58, 0x38, 0xfffffffffffffff7, 0x1, 0x8000, 0x7, 0x9, 0x2, 0x0, 0x8, 0x9, 0x100000001, 0x8, 0x80000000, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:08 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf401]}, 0x10)

2033/05/18 03:45:08 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x8000, 0x3, 0x3, <r2=>0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x200, 0x8, 0x1, 0x763, r2}, 0x10)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={<r3=>0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x3ff}, &(0x7f0000000240)=0x8)

2033/05/18 03:45:08 executing program 3 (fault-call:3 fault-nth:2):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  814.516967] binder: 23601:23602 transaction failed 29189/-22, size 0-0 line 2856
[  814.530146] FAULT_INJECTION: forcing a failure.
[  814.530146] name failslab, interval 1, probability 0, space 0, times 0
[  814.541908] CPU: 1 PID: 23605 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  814.549195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  814.552670] binder: 23610:23612 transaction failed 29189/-22, size 0-0 line 2856
[  814.558549] Call Trace:
[  814.558637]  dump_stack+0x1b9/0x294
[  814.558662]  ? dump_stack_print_info.cold.2+0x52/0x52
[  814.577569]  ? check_noncircular+0x20/0x20
[  814.581820]  should_fail.cold.4+0xa/0x1a
[  814.585899]  ? check_noncircular+0x20/0x20
[  814.590146]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  814.595260]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  814.600814]  ? zap_class+0x720/0x720
[  814.604537]  ? graph_lock+0x170/0x170
[  814.608346]  ? graph_lock+0x170/0x170
[  814.612168]  ? find_held_lock+0x36/0x1c0
[  814.616249]  ? __lock_is_held+0xb5/0x140
[  814.620348]  ? check_same_owner+0x320/0x320
[  814.624713]  ? rcu_note_context_switch+0x710/0x710
[  814.629650]  ? __lock_acquire+0x7f5/0x5140
[  814.633896]  __should_failslab+0x124/0x180
[  814.638143]  should_failslab+0x9/0x14
[  814.641955]  __kmalloc+0x2c8/0x760
[  814.645509]  ? debug_check_no_locks_freed+0x310/0x310
[  814.650706]  ? wiphy_new_nm+0x819/0x2290
[  814.654789]  wiphy_new_nm+0x819/0x2290
[  814.658693]  ? print_usage_bug+0xc0/0xc0
2033/05/18 03:45:08 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe7e0000000000000]}, 0x10)

2033/05/18 03:45:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  814.662944]  ? cfg80211_dev_check_name.isra.7+0x420/0x420
[  814.668488]  ? __lock_acquire+0x7f5/0x5140
[  814.672319] binder: 23601:23602 ioctl c0306201 20000240 returned -14
[  814.672724]  ? __lock_acquire+0x7f5/0x5140
[  814.672741]  ? check_noncircular+0x20/0x20
[  814.672758]  ? perf_trace_lock+0xd6/0x900
[  814.672776]  ? print_usage_bug+0xc0/0xc0
[  814.672791]  ? zap_class+0x720/0x720
[  814.672801]  ? __lock_acquire+0x7f5/0x5140
[  814.672817]  ? print_usage_bug+0xc0/0xc0
[  814.707996]  ? print_usage_bug+0xc0/0xc0
[  814.712097]  ? zap_class+0x720/0x720
[  814.715827]  ? print_usage_bug+0xc0/0xc0
[  814.719904]  ? print_usage_bug+0xc0/0xc0
[  814.723979]  ? print_usage_bug+0xc0/0xc0
[  814.728055]  ? print_usage_bug+0xc0/0xc0
[  814.732132]  ? __lock_acquire+0x7f5/0x5140
[  814.736377]  ? check_noncircular+0x20/0x20
[  814.740655]  ? __lock_acquire+0x7f5/0x5140
[  814.744910]  ? debug_check_no_locks_freed+0x310/0x310
[  814.750119]  ? debug_check_no_locks_freed+0x310/0x310
[  814.755336]  ? print_usage_bug+0xc0/0xc0
[  814.759415]  ? print_usage_bug+0xc0/0xc0
[  814.763599]  ? __lock_acquire+0x7f5/0x5140
2033/05/18 03:45:08 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  814.767845]  ? unwind_get_return_address+0x61/0xa0
[  814.772790]  ? __save_stack_trace+0x7e/0xd0
[  814.777125]  ieee80211_alloc_hw_nm+0x4c9/0x2080
[  814.781805]  ? print_usage_bug+0xc0/0xc0
[  814.785910]  ? ieee80211_restart_work+0x1a0/0x1a0
[  814.790769]  ? perf_trace_lock+0xd6/0x900
[  814.794934]  ? __lock_acquire+0x7f5/0x5140
[  814.799286]  ? zap_class+0x720/0x720
[  814.803026]  ? graph_lock+0x170/0x170
[  814.806838]  ? debug_check_no_locks_freed+0x310/0x310
[  814.812047]  ? debug_check_no_locks_freed+0x310/0x310
[  814.817249]  ? print_usage_bug+0xc0/0xc0
[  814.821332]  ? print_usage_bug+0xc0/0xc0
[  814.825402]  ? find_held_lock+0x36/0x1c0
[  814.829487]  ? lock_downgrade+0x8e0/0x8e0
[  814.833647]  ? mark_held_locks+0xc9/0x160
[  814.837802]  ? kasan_check_read+0x11/0x20
[  814.841963]  ? __local_bh_enable_ip+0x161/0x230
[  814.846637]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  814.851642]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  814.856735]  ? trace_hardirqs_on+0xd/0x10
[  814.860872]  ? __local_bh_enable_ip+0x161/0x230
[  814.865548]  mac80211_hwsim_new_radio+0x235/0x3410
[  814.870469]  ? graph_lock+0x170/0x170
[  814.874271]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  814.880414]  ? lock_release+0xa10/0xa10
[  814.884381]  ? check_same_owner+0x320/0x320
[  814.888697]  ? rcu_note_context_switch+0x710/0x710
[  814.893622]  ? __lock_acquire+0x7f5/0x5140
[  814.897848]  ? __might_sleep+0x95/0x190
[  814.901816]  ? kasan_check_write+0x14/0x20
[  814.906058]  ? __mutex_lock+0x7d9/0x17f0
[  814.910109]  ? genl_rcv_msg+0x13a/0x170
[  814.914075]  ? __lock_acquire+0x7f5/0x5140
[  814.918297]  ? mutex_trylock+0x2a0/0x2a0
[  814.922352]  ? perf_trace_lock+0xd6/0x900
[  814.926499]  ? graph_lock+0x170/0x170
[  814.930661]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  814.935842]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  814.940845]  ? validate_nla+0x2d9/0x7b0
[  814.944811]  hwsim_new_radio_nl+0x7b8/0xa60
[  814.949125]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  814.954308]  ? __netlink_ns_capable+0x100/0x130
[  814.958976]  genl_family_rcv_msg+0x889/0x1120
[  814.963465]  ? genl_rcv+0x40/0x40
[  814.966907]  ? lock_downgrade+0x8e0/0x8e0
[  814.971045]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  814.976059]  ? lock_acquire+0x1dc/0x520
[  814.980027]  ? genl_rcv+0x19/0x40
[  814.983484]  genl_rcv_msg+0xc6/0x170
[  814.987191]  netlink_rcv_skb+0x172/0x440
[  814.991239]  ? genl_family_rcv_msg+0x1120/0x1120
[  814.995991]  ? netlink_ack+0xbc0/0xbc0
[  814.999868]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  815.005051]  ? netlink_skb_destructor+0x210/0x210
[  815.009891]  genl_rcv+0x28/0x40
[  815.013162]  netlink_unicast+0x58b/0x740
[  815.017218]  ? netlink_attachskb+0x970/0x970
[  815.021618]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.027152]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  815.032278]  ? security_netlink_send+0x88/0xb0
[  815.036852]  netlink_sendmsg+0x9f0/0xfa0
[  815.040909]  ? netlink_unicast+0x740/0x740
[  815.045136]  ? security_socket_sendmsg+0x94/0xc0
[  815.049879]  ? netlink_unicast+0x740/0x740
[  815.054113]  sock_sendmsg+0xd5/0x120
[  815.057820]  ___sys_sendmsg+0x805/0x940
[  815.061790]  ? copy_msghdr_from_user+0x560/0x560
[  815.066544]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  815.072070]  ? proc_fail_nth_write+0x96/0x1f0
[  815.076566]  ? __fget_light+0x2ef/0x430
[  815.080540]  ? fget_raw+0x20/0x20
[  815.083980]  ? find_held_lock+0x36/0x1c0
[  815.088044]  ? kasan_check_write+0x14/0x20
[  815.092276]  ? wait_for_completion+0x870/0x870
[  815.096874]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  815.102400]  ? sockfd_lookup_light+0xc5/0x160
[  815.106884]  __sys_sendmsg+0x115/0x270
[  815.110774]  ? __ia32_sys_shutdown+0x80/0x80
[  815.115171]  ? __sb_end_write+0xac/0xe0
[  815.119136]  ? fput+0x130/0x1a0
[  815.122403]  ? ksys_write+0x1a6/0x250
[  815.126207]  __x64_sys_sendmsg+0x78/0xb0
[  815.130262]  do_syscall_64+0x1b1/0x800
[  815.134138]  ? finish_task_switch+0x1ca/0x840
[  815.138623]  ? syscall_return_slowpath+0x5c0/0x5c0
[  815.143543]  ? syscall_return_slowpath+0x30f/0x5c0
[  815.148465]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  815.153822]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  815.158659]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  815.163842] RIP: 0033:0x455a09
[  815.167019] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  815.174731] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  815.181986] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  815.189250] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  815.196504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  815.203762] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000002
2033/05/18 03:45:09 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008921, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  815.224936] binder: 23610:23612 transaction failed 29189/-22, size 0-0 line 2856
[  815.248251] binder: 23629:23633 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x571c000000000000]}, 0x10)

2033/05/18 03:45:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  815.273293] binder: 23629:23633 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:09 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffff8cc, 0x8000)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0xef, "97723f296a2602571eff8fc63abd8f2f6e8322258281eba7d2a5e37c44148b6d962f64ae6ff7e5335aedc0163b453f752fab4021589cf507f569c87ee5f9909579592b175bbedb091851c510b82abef93ecf16fc7964d4523d4713647b33917000b837a111c9252e301957b4df3c65b3a03fd5bd93f8571c733a9ee7c8e229b65c0aeba111062f35e8c4acdc9738b830cdb297c27f20c57b061b48a0923dbf10f0dd87f3584a3057009f62ac28bc78a551fbd5a3e49095fe899921874523271f90bc0291e23f56a25b8b843893773b7bb28c301341d2f4e0e63d564a9476195004d49af8c4a05a5b75ab069f46fabb"})

[  815.325068] binder: undelivered TRANSACTION_ERROR: 29189
[  815.365401] binder: 23644:23646 transaction failed 29189/-22, size 0-0 line 2856
[  815.394785] binder: 23652:23653 transaction failed 29189/-22, size 0-0 line 2856
[  815.409339] binder: 23644:23646 ioctl c0306201 20000240 returned -14
[  815.436262] binder: 23652:23653 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:09 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9effffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:09 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r1, 0x20}, &(0x7f0000000080)=0x8)

2033/05/18 03:45:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x476d]}, 0x10)

2033/05/18 03:45:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:09 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089b0, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:09 executing program 0:
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team_slave_1\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000040)="b1"})

2033/05/18 03:45:09 executing program 3 (fault-call:3 fault-nth:3):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  815.478727] binder: undelivered TRANSACTION_ERROR: 29189
[  815.532954] FAULT_INJECTION: forcing a failure.
[  815.532954] name failslab, interval 1, probability 0, space 0, times 0
[  815.544273] CPU: 0 PID: 23664 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  815.551557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  815.560947] Call Trace:
[  815.563556]  dump_stack+0x1b9/0x294
[  815.567209]  ? dump_stack_print_info.cold.2+0x52/0x52
[  815.569915] binder: 23667:23668 transaction failed 29189/-22, size 0-0 line 2856
[  815.572416]  should_fail.cold.4+0xa/0x1a
[  815.572444]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  815.589232]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  815.593841] binder: 23667:23668 ioctl c0306201 20000240 returned -14
[  815.594433]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  815.594453]  ? graph_lock+0x170/0x170
[  815.594474]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.594494]  ? put_dec_trunc8+0x273/0x300
[  815.594508]  ? find_held_lock+0x36/0x1c0
[  815.594525]  ? __lock_is_held+0xb5/0x140
[  815.627806]  ? check_same_owner+0x320/0x320
[  815.632141]  ? save_stack+0x43/0xd0
[  815.635776]  ? kasan_kmalloc+0xc4/0xe0
[  815.639671]  ? rcu_note_context_switch+0x710/0x710
[  815.644618]  __should_failslab+0x124/0x180
[  815.648869]  should_failslab+0x9/0x14
[  815.652675]  __kmalloc_track_caller+0x2c4/0x760
[  815.657349]  ? pointer+0xa10/0xa10
[  815.660912]  ? print_usage_bug+0xc0/0xc0
[  815.665181]  ? kvasprintf_const+0x67/0x190
[  815.669424]  kvasprintf+0xa9/0x130
[  815.672970]  ? bust_spinlocks+0xe0/0xe0
[  815.676953]  kvasprintf_const+0x67/0x190
[  815.681024]  kobject_set_name_vargs+0x5b/0x150
[  815.685609]  dev_set_name+0xa4/0xc0
[  815.689242]  ? device_initialize+0x5d0/0x5d0
[  815.693675]  ? debug_check_no_locks_freed+0x310/0x310
[  815.695435] binder: 23680:23682 transaction failed 29189/-22, size 0-0 line 2856
[  815.698868]  ? wiphy_new_nm+0x819/0x2290
[  815.698889]  wiphy_new_nm+0x94e/0x2290
[  815.698909]  ? cfg80211_dev_check_name.isra.7+0x420/0x420
[  815.698924]  ? __lock_acquire+0x7f5/0x5140
[  815.698937]  ? __lock_acquire+0x7f5/0x5140
[  815.698953]  ? check_noncircular+0x20/0x20
[  815.725135] binder: 23680:23682 ioctl c0306201 20000240 returned -14
[  815.729949]  ? print_usage_bug+0xc0/0xc0
[  815.729967]  ? __lock_acquire+0x7f5/0x5140
[  815.729980]  ? print_usage_bug+0xc0/0xc0
[  815.729996]  ? __lock_acquire+0x7f5/0x5140
[  815.730014]  ? print_usage_bug+0xc0/0xc0
[  815.730039]  ? print_usage_bug+0xc0/0xc0
[  815.766165]  ? print_usage_bug+0xc0/0xc0
[  815.770240]  ? print_usage_bug+0xc0/0xc0
[  815.774400]  ? __lock_acquire+0x7f5/0x5140
[  815.778647]  ? check_noncircular+0x20/0x20
[  815.782891]  ? __lock_acquire+0x7f5/0x5140
[  815.787138]  ? debug_check_no_locks_freed+0x310/0x310
[  815.792348]  ? debug_check_no_locks_freed+0x310/0x310
[  815.797630]  ? print_usage_bug+0xc0/0xc0
[  815.801703]  ? print_usage_bug+0xc0/0xc0
[  815.805790]  ? __lock_acquire+0x7f5/0x5140
[  815.810033]  ? unwind_get_return_address+0x61/0xa0
[  815.814975]  ? __save_stack_trace+0x7e/0xd0
[  815.819305]  ieee80211_alloc_hw_nm+0x4c9/0x2080
[  815.824066]  ? print_usage_bug+0xc0/0xc0
[  815.825093] binder: 23688:23689 transaction failed 29189/-22, size 0-0 line 2856
[  815.828129]  ? ieee80211_restart_work+0x1a0/0x1a0
[  815.828148]  ? __lock_acquire+0x7f5/0x5140
[  815.828163]  ? __lock_acquire+0x7f5/0x5140
[  815.828179]  ? kasan_slab_alloc+0x12/0x20
[  815.828192]  ? kmem_cache_alloc+0x12e/0x760
[  815.828204]  ? __d_alloc+0xc0/0xd30
[  815.828223]  ? graph_lock+0x170/0x170
[  815.859427] binder: 23688:23689 ioctl c0306201 20000240 returned -14
[  815.861074]  ? debug_check_no_locks_freed+0x310/0x310
[  815.861091]  ? debug_check_no_locks_freed+0x310/0x310
[  815.861104]  ? print_usage_bug+0xc0/0xc0
[  815.861124]  ? print_usage_bug+0xc0/0xc0
[  815.861137]  ? find_held_lock+0x36/0x1c0
[  815.861157]  ? lock_downgrade+0x8e0/0x8e0
[  815.898354]  ? mark_held_locks+0xc9/0x160
[  815.902518]  ? kasan_check_read+0x11/0x20
[  815.906685]  ? __local_bh_enable_ip+0x161/0x230
[  815.911360]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  815.916474]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  815.921591]  ? trace_hardirqs_on+0xd/0x10
[  815.925786]  ? __local_bh_enable_ip+0x161/0x230
[  815.930467]  mac80211_hwsim_new_radio+0x235/0x3410
[  815.935418]  ? graph_lock+0x170/0x170
[  815.939236]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  815.945409]  ? lock_release+0xa10/0xa10
[  815.949404]  ? check_same_owner+0x320/0x320
[  815.950222] binder: 23695:23696 transaction failed 29189/-22, size 0-0 line 2856
[  815.953750]  ? rcu_note_context_switch+0x710/0x710
[  815.953766]  ? __lock_acquire+0x7f5/0x5140
[  815.953785]  ? __might_sleep+0x95/0x190
[  815.953805]  ? kasan_check_write+0x14/0x20
[  815.953827]  ? __mutex_lock+0x7d9/0x17f0
[  815.983326]  ? genl_rcv_msg+0x13a/0x170
[  815.987328]  ? __lock_acquire+0x7f5/0x5140
[  815.991582]  ? mutex_trylock+0x2a0/0x2a0
[  815.995672]  ? graph_lock+0x170/0x170
[  815.999485]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  815.999734] binder: 23695:23696 ioctl c0306201 20000240 returned -14
[  816.005205]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  816.005221]  ? validate_nla+0x2d9/0x7b0
[  816.005238]  hwsim_new_radio_nl+0x7b8/0xa60
[  816.005253]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  816.005274]  ? __netlink_ns_capable+0x100/0x130
[  816.005300]  genl_family_rcv_msg+0x889/0x1120
[  816.039488]  ? genl_rcv+0x40/0x40
[  816.042958]  ? lock_downgrade+0x8e0/0x8e0
[  816.047122]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  816.052157]  ? kasan_check_read+0x11/0x20
[  816.056433]  ? lock_acquire+0x1dc/0x520
[  816.060508]  ? genl_rcv+0x19/0x40
[  816.064015]  genl_rcv_msg+0xc6/0x170
[  816.067746]  netlink_rcv_skb+0x172/0x440
[  816.071822]  ? genl_family_rcv_msg+0x1120/0x1120
[  816.076595]  ? netlink_ack+0xbc0/0xbc0
[  816.080494]  ? rcu_bh_force_quiescent_state+0x20/0x20
2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x34000]}, 0x10)

2033/05/18 03:45:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x67840000]}, 0x10)

2033/05/18 03:45:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1fdb]}, 0x10)

2033/05/18 03:45:09 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xafe6]}, 0x10)

2033/05/18 03:45:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x5f50]}, 0x10)

[  816.085705]  ? netlink_skb_destructor+0x210/0x210
[  816.090567]  genl_rcv+0x28/0x40
[  816.093856]  netlink_unicast+0x58b/0x740
[  816.097937]  ? netlink_attachskb+0x970/0x970
[  816.102360]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  816.107914]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  816.112945]  ? security_netlink_send+0x88/0xb0
[  816.117564]  netlink_sendmsg+0x9f0/0xfa0
[  816.121638]  ? netlink_unicast+0x740/0x740
[  816.125877]  ? security_socket_sendmsg+0x94/0xc0
[  816.130629]  ? netlink_unicast+0x740/0x740
[  816.134865]  sock_sendmsg+0xd5/0x120
[  816.138571]  ___sys_sendmsg+0x805/0x940
[  816.142549]  ? copy_msghdr_from_user+0x560/0x560
[  816.147306]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  816.152832]  ? proc_fail_nth_write+0x96/0x1f0
[  816.157329]  ? __fget_light+0x2ef/0x430
[  816.161295]  ? fget_raw+0x20/0x20
[  816.164744]  ? find_held_lock+0x36/0x1c0
[  816.168805]  ? kasan_check_write+0x14/0x20
[  816.173041]  ? wait_for_completion+0x870/0x870
[  816.177620]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  816.183143]  ? sockfd_lookup_light+0xc5/0x160
[  816.187628]  __sys_sendmsg+0x115/0x270
[  816.191507]  ? __ia32_sys_shutdown+0x80/0x80
[  816.195905]  ? __sb_end_write+0xac/0xe0
[  816.199868]  ? fput+0x130/0x1a0
[  816.203135]  ? ksys_write+0x1a6/0x250
[  816.206945]  __x64_sys_sendmsg+0x78/0xb0
[  816.210995]  do_syscall_64+0x1b1/0x800
[  816.214891]  ? finish_task_switch+0x1ca/0x840
[  816.219377]  ? syscall_return_slowpath+0x5c0/0x5c0
[  816.224298]  ? syscall_return_slowpath+0x30f/0x5c0
[  816.229221]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  816.234605]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  816.239443]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  816.244617] RIP: 0033:0x455a09
[  816.247793] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  816.255498] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  816.262755] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  816.270010] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  816.277276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  816.284539] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000003
[  816.305480] binder: 23708:23711 transaction failed 29189/-22, size 0-0 line 2856
[  816.319708] binder: 23708:23713 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:10 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x40000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:10 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:10 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa717]}, 0x10)

2033/05/18 03:45:10 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008931, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:10 executing program 3 (fault-call:3 fault-nth:4):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:10 executing program 0:
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="fc2f07d82c992409702b6435ade3e2902aada89b81bcd9fdc0a6d15ecf46c6449cdd43a76a5f631fff2fbe473046ef15537f3e7053b0af4d4bee88facb32e6419930ed78b95c141c3a83d1a164d64c0fe7a4")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = socket(0x8, 0x8000f, 0x9)
getpeername$unix(r2, &(0x7f0000000100)=@abs, &(0x7f00000001c0)=0x6e)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "a03beaa93cc45746fa128524554a01453f88ca25165f91fe99447d0d867a65f233b84501aed520f93b227cf65d03badc92992cab5a1a4a798b5b9b5e0d8337c1354df6c19a606b37d373dc5f56152d4e8f04b0aab72efc84b7d981b94eb7f3c0"}, 0x64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:10 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  816.517805] binder: 23724:23736 transaction failed 29189/-22, size 0-0 line 2856
[  816.530014] FAULT_INJECTION: forcing a failure.
[  816.530014] name failslab, interval 1, probability 0, space 0, times 0
[  816.531342] binder: 23731:23732 transaction failed 29189/-22, size 0-0 line 2856
[  816.541381] CPU: 1 PID: 23733 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  816.556178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  816.565537] Call Trace:
[  816.568146]  dump_stack+0x1b9/0x294
[  816.571788]  ? dump_stack_print_info.cold.2+0x52/0x52
[  816.576395] binder: 23724:23736 transaction failed 29189/-22, size 0-0 line 2856
[  816.576996]  should_fail.cold.4+0xa/0x1a
[  816.588677]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  816.593789]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  816.598988]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  816.604185]  ? graph_lock+0x170/0x170
[  816.607996]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  816.613541]  ? put_dec_trunc8+0x273/0x300
[  816.617720]  ? find_held_lock+0x36/0x1c0
[  816.621799]  ? __lock_is_held+0xb5/0x140
[  816.625865]  ? ZSTD_compressBlock_lazy2+0x3d50/0x4380
[  816.631091]  ? check_same_owner+0x320/0x320
[  816.635696]  ? save_stack+0x43/0xd0
[  816.639333]  ? kasan_kmalloc+0xc4/0xe0
[  816.643227]  ? rcu_note_context_switch+0x710/0x710
[  816.648169]  __should_failslab+0x124/0x180
[  816.652414]  should_failslab+0x9/0x14
[  816.654756] binder: 23731:23732 ioctl c0306201 20000240 returned -14
[  816.656213]  __kmalloc_track_caller+0x2c4/0x760
2033/05/18 03:45:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:10 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8467]}, 0x10)

2033/05/18 03:45:10 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  816.656228]  ? pointer+0xa10/0xa10
[  816.656245]  ? print_usage_bug+0xc0/0xc0
[  816.656268]  ? kvasprintf_const+0x67/0x190
[  816.675956] binder: undelivered TRANSACTION_ERROR: 29189
[  816.679192]  kvasprintf+0xa9/0x130
[  816.679207]  ? bust_spinlocks+0xe0/0xe0
[  816.679228]  kvasprintf_const+0x67/0x190
[  816.679248]  kobject_set_name_vargs+0x5b/0x150
[  816.679263]  dev_set_name+0xa4/0xc0
[  816.679275]  ? device_initialize+0x5d0/0x5d0
[  816.679294]  ? wiphy_new_nm+0x819/0x2290
[  816.679311]  wiphy_new_nm+0x94e/0x2290
2033/05/18 03:45:10 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000005450, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  816.679330]  ? cfg80211_dev_check_name.isra.7+0x420/0x420
[  816.679344]  ? __lock_acquire+0x7f5/0x5140
[  816.679358]  ? __lock_acquire+0x7f5/0x5140
[  816.679370]  ? check_noncircular+0x20/0x20
[  816.679387]  ? perf_trace_lock+0xd6/0x900
[  816.739203]  ? print_usage_bug+0xc0/0xc0
[  816.743272]  ? zap_class+0x720/0x720
[  816.746990]  ? __lock_acquire+0x7f5/0x5140
[  816.751229]  ? print_usage_bug+0xc0/0xc0
[  816.755295]  ? zap_class+0x720/0x720
[  816.759014]  ? print_usage_bug+0xc0/0xc0
[  816.763088]  ? print_usage_bug+0xc0/0xc0
[  816.767161]  ? print_usage_bug+0xc0/0xc0
[  816.771254]  ? print_usage_bug+0xc0/0xc0
[  816.775321]  ? __lock_acquire+0x7f5/0x5140
[  816.779561]  ? check_noncircular+0x20/0x20
[  816.781631] binder: 23750:23751 transaction failed 29189/-22, size 0-0 line 2856
[  816.783809]  ? __lock_acquire+0x7f5/0x5140
[  816.783830]  ? debug_check_no_locks_freed+0x310/0x310
[  816.783854]  ? debug_check_no_locks_freed+0x310/0x310
[  816.783871]  ? print_usage_bug+0xc0/0xc0
[  816.810041]  ? print_usage_bug+0xc0/0xc0
[  816.814129]  ? __lock_acquire+0x7f5/0x5140
2033/05/18 03:45:10 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  816.818382]  ? unwind_get_return_address+0x61/0xa0
[  816.823323]  ? __save_stack_trace+0x7e/0xd0
[  816.827650]  ieee80211_alloc_hw_nm+0x4c9/0x2080
[  816.832324]  ? print_usage_bug+0xc0/0xc0
[  816.836390]  ? ieee80211_restart_work+0x1a0/0x1a0
[  816.841256]  ? perf_trace_lock+0xd6/0x900
[  816.845420]  ? __lock_acquire+0x7f5/0x5140
[  816.849666]  ? zap_class+0x720/0x720
[  816.853397]  ? graph_lock+0x170/0x170
[  816.857206]  ? debug_check_no_locks_freed+0x310/0x310
[  816.862403]  ? debug_check_no_locks_freed+0x310/0x310
[  816.867597]  ? print_usage_bug+0xc0/0xc0
[  816.868696] binder: 23750:23751 transaction failed 29189/-22, size 0-0 line 2856
[  816.871660]  ? print_usage_bug+0xc0/0xc0
[  816.871678]  ? find_held_lock+0x36/0x1c0
[  816.871703]  ? lock_downgrade+0x8e0/0x8e0
[  816.871718]  ? mark_held_locks+0xc9/0x160
[  816.871733]  ? kasan_check_read+0x11/0x20
[  816.871750]  ? __local_bh_enable_ip+0x161/0x230
[  816.871764]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  816.871780]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  816.914528]  ? trace_hardirqs_on+0xd/0x10
2033/05/18 03:45:10 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008910, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  816.918689]  ? __local_bh_enable_ip+0x161/0x230
[  816.923370]  mac80211_hwsim_new_radio+0x235/0x3410
[  816.924553] binder: 23766:23767 transaction failed 29189/-22, size 0-0 line 2856
[  816.928304]  ? graph_lock+0x170/0x170
[  816.928333]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  816.928353]  ? lock_release+0xa10/0xa10
[  816.928369]  ? check_same_owner+0x320/0x320
[  816.928390]  ? rcu_note_context_switch+0x710/0x710
[  816.959026]  ? __lock_acquire+0x7f5/0x5140
[  816.963275]  ? __might_sleep+0x95/0x190
[  816.967263]  ? kasan_check_write+0x14/0x20
[  816.971513]  ? __mutex_lock+0x7d9/0x17f0
[  816.975586]  ? genl_rcv_msg+0x13a/0x170
[  816.979569]  ? __lock_acquire+0x7f5/0x5140
[  816.983815]  ? mutex_trylock+0x2a0/0x2a0
[  816.987884]  ? perf_trace_lock+0xd6/0x900
[  816.992040]  ? graph_lock+0x170/0x170
[  816.995853]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  817.001053]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  817.001795] binder: 23766:23767 ioctl c0306201 20000240 returned -14
[  817.006086]  ? validate_nla+0x2d9/0x7b0
[  817.006106]  hwsim_new_radio_nl+0x7b8/0xa60
[  817.006124]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  817.006146]  ? __netlink_ns_capable+0x100/0x130
[  817.006167]  genl_family_rcv_msg+0x889/0x1120
[  817.032913] binder: undelivered TRANSACTION_ERROR: 29189
[  817.035256]  ? genl_rcv+0x40/0x40
[  817.035276]  ? lock_downgrade+0x8e0/0x8e0
[  817.035294]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  817.035316]  ? lock_acquire+0x1dc/0x520
[  817.057300]  ? genl_rcv+0x19/0x40
[  817.060781]  genl_rcv_msg+0xc6/0x170
[  817.064506]  netlink_rcv_skb+0x172/0x440
[  817.068573]  ? genl_family_rcv_msg+0x1120/0x1120
[  817.073338]  ? netlink_ack+0xbc0/0xbc0
[  817.077233]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  817.082432]  ? netlink_skb_destructor+0x210/0x210
[  817.087290]  genl_rcv+0x28/0x40
[  817.090577]  netlink_unicast+0x58b/0x740
[  817.094652]  ? netlink_attachskb+0x970/0x970
[  817.099077]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  817.104623]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  817.109650]  ? security_netlink_send+0x88/0xb0
[  817.114255]  netlink_sendmsg+0x9f0/0xfa0
[  817.118330]  ? netlink_unicast+0x740/0x740
[  817.122574]  ? security_socket_sendmsg+0x94/0xc0
[  817.127337]  ? netlink_unicast+0x740/0x740
[  817.131580]  sock_sendmsg+0xd5/0x120
[  817.135302]  ___sys_sendmsg+0x805/0x940
[  817.139289]  ? copy_msghdr_from_user+0x560/0x560
[  817.144076]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  817.149622]  ? proc_fail_nth_write+0x96/0x1f0
[  817.154132]  ? __fget_light+0x2ef/0x430
[  817.158119]  ? fget_raw+0x20/0x20
[  817.161574]  ? find_held_lock+0x36/0x1c0
[  817.165648]  ? kasan_check_write+0x14/0x20
[  817.169897]  ? wait_for_completion+0x870/0x870
[  817.174495]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  817.180039]  ? sockfd_lookup_light+0xc5/0x160
[  817.184549]  __sys_sendmsg+0x115/0x270
[  817.188442]  ? __ia32_sys_shutdown+0x80/0x80
[  817.192859]  ? __sb_end_write+0xac/0xe0
[  817.196847]  ? fput+0x130/0x1a0
[  817.200133]  ? ksys_write+0x1a6/0x250
[  817.203953]  __x64_sys_sendmsg+0x78/0xb0
[  817.208027]  do_syscall_64+0x1b1/0x800
[  817.211924]  ? finish_task_switch+0x1ca/0x840
[  817.216413]  ? syscall_return_slowpath+0x5c0/0x5c0
[  817.221330]  ? syscall_return_slowpath+0x30f/0x5c0
[  817.226254]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  817.231610]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  817.236444]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  817.241620] RIP: 0033:0x455a09
[  817.244793] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  817.252488] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  817.259743] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  817.267007] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  817.274268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  817.281529] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000004
2033/05/18 03:45:11 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9effffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:11 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x80000000)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0x3}, {0x4, 0x8000}, {0xf, 0x3}, {0x2, 0x7f}, {0x4, 0xe9b}], 0x5)

2033/05/18 03:45:11 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8000000000000000]}, 0x10)

2033/05/18 03:45:11 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008922, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:11 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:11 executing program 3 (fault-call:3 fault-nth:5):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fgetxattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)=""/80, 0x50)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0xfffffffffffffffc, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3ff, 0x0, 0x23a2, 0x1, <r2=>0x0}, &(0x7f0000000040)=0x10)
clock_gettime(0x0, &(0x7f0000001740)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/165, 0xa5}], 0x1, 0x0, 0x0, 0xfffffffffffffff8}, 0xee11}, {{&(0x7f0000000400)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/101, 0x65}], 0xa, &(0x7f0000000bc0)=""/188, 0xbc, 0xff}, 0x4}, {{&(0x7f0000000c80)=@rc, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d00)=""/18, 0x12}, {&(0x7f0000000d40)=""/150, 0x96}, {&(0x7f0000000e00)=""/110, 0x6e}, {&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/222, 0xde}, {&(0x7f0000000fc0)=""/51, 0x33}, {&(0x7f0000001000)=""/59, 0x3b}, {&(0x7f0000001040)=""/26, 0x1a}], 0x8, 0x0, 0x0, 0x2}, 0x101}, {{&(0x7f0000001100)=@pppol2tpv3={0x0, 0x0, {0x0, <r5=>0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001180)=""/85, 0x55}, {&(0x7f0000001200)=""/48, 0x30}, {&(0x7f0000001240)=""/181, 0xb5}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/206, 0xce}, {&(0x7f0000001440)=""/240, 0xf0}], 0x6, &(0x7f00000015c0)=""/247, 0xf7, 0x2}, 0x8001}, {{&(0x7f00000016c0)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001740)}, {&(0x7f0000001780)=""/91, 0x5b}], 0x2, &(0x7f0000001840)=""/119, 0x77, 0xfffffffffffffbff}, 0x2}, {{&(0x7f00000018c0)=@can, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)=""/129, 0x81}, {&(0x7f0000001a00)=""/36, 0x24}, {&(0x7f0000001a40)=""/89, 0x59}], 0x3, &(0x7f0000001b00)=""/214, 0xd6, 0x4ee}, 0x2}, {{&(0x7f0000001c00)=@ll, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/202, 0xca}], 0x2, &(0x7f0000002dc0)=""/6, 0x6, 0x8}}], 0x7, 0x10001, &(0x7f0000003000)={r3, r4+30000000})
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000003040)=@sack_info={r2, 0x401, 0xa8}, &(0x7f0000003080)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r2, 0xc9}, 0x8)
fadvise64(r0, 0x0, 0x10001, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000240)=0x80, 0x4)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000002fc0)=0x8fb2, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  817.836926] FAULT_INJECTION: forcing a failure.
[  817.836926] name failslab, interval 1, probability 0, space 0, times 0
[  817.848266] CPU: 1 PID: 23786 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  817.849665] binder: 23792:23793 transaction failed 29189/-22, size 0-0 line 2856
[  817.855562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  817.855567] Call Trace:
[  817.855594]  dump_stack+0x1b9/0x294
[  817.855615]  ? dump_stack_print_info.cold.2+0x52/0x52
2033/05/18 03:45:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  817.855640]  ? print_usage_bug+0xc0/0xc0
[  817.887943]  should_fail.cold.4+0xa/0x1a
[  817.892025]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  817.897144]  ? graph_lock+0x170/0x170
[  817.900244] binder: 23792:23793 transaction failed 29189/-22, size 0-0 line 2856
[  817.900951]  ? mark_held_locks+0xc9/0x160
[  817.900970]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  817.917197]  ? find_held_lock+0x36/0x1c0
[  817.921269]  ? __lock_is_held+0xb5/0x140
[  817.925347]  ? check_same_owner+0x320/0x320
[  817.929676]  ? rcu_note_context_switch+0x710/0x710
2033/05/18 03:45:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  817.934606]  __should_failslab+0x124/0x180
[  817.938847]  should_failslab+0x9/0x14
[  817.942650]  __kmalloc+0x2c8/0x760
[  817.946198]  ? lockdep_init_map+0x9/0x10
[  817.950267]  ? rfkill_alloc+0xf2/0x390
[  817.954164]  rfkill_alloc+0xf2/0x390
[  817.957885]  ? rfkill_fop_read+0x710/0x710
[  817.962214]  ? __lockdep_init_map+0x105/0x590
[  817.966710]  wiphy_new_nm+0x1633/0x2290
[  817.970691]  ? cfg80211_dev_check_name.isra.7+0x420/0x420
[  817.976233]  ? __lock_acquire+0x7f5/0x5140
[  817.976339] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:11 executing program 0:
r0 = socket$kcm(0x29, 0x3, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  817.980461]  ? __lock_acquire+0x7f5/0x5140
[  817.980477]  ? check_noncircular+0x20/0x20
[  817.980497]  ? print_usage_bug+0xc0/0xc0
[  817.980513]  ? __lock_acquire+0x7f5/0x5140
[  817.980526]  ? print_usage_bug+0xc0/0xc0
[  817.980542]  ? __lock_acquire+0x7f5/0x5140
[  817.980560]  ? print_usage_bug+0xc0/0xc0
[  817.980579]  ? print_usage_bug+0xc0/0xc0
[  817.980593]  ? print_usage_bug+0xc0/0xc0
[  817.980609]  ? print_usage_bug+0xc0/0xc0
[  818.027300]  ? __lock_acquire+0x7f5/0x5140
[  818.031550]  ? check_noncircular+0x20/0x20
2033/05/18 03:45:11 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  818.035792]  ? __lock_acquire+0x7f5/0x5140
[  818.036191] binder: 23810:23811 unknown command 4743953
[  818.040039]  ? debug_check_no_locks_freed+0x310/0x310
[  818.040054]  ? print_usage_bug+0xc0/0xc0
[  818.040069]  ? print_usage_bug+0xc0/0xc0
[  818.040083]  ? __lock_acquire+0x7f5/0x5140
[  818.040101]  ? unwind_get_return_address+0x61/0xa0
[  818.040118]  ? __save_stack_trace+0x7e/0xd0
[  818.040135]  ieee80211_alloc_hw_nm+0x4c9/0x2080
[  818.040151]  ? print_usage_bug+0xc0/0xc0
[  818.064243] binder: 23810:23811 ioctl c0306201 20007000 returned -22
[  818.067904]  ? ieee80211_restart_work+0x1a0/0x1a0
[  818.067924]  ? __lock_acquire+0x7f5/0x5140
[  818.067940]  ? __lock_acquire+0x7f5/0x5140
[  818.067957]  ? kasan_slab_alloc+0x12/0x20
[  818.067971]  ? kmem_cache_alloc+0x12e/0x760
[  818.067990]  ? __d_alloc+0xc0/0xd30
[  818.068018]  ? graph_lock+0x170/0x170
[  818.078459] binder: 23810:23811 ioctl c0306201 20000240 returned -11
[  818.081030]  ? debug_check_no_locks_freed+0x310/0x310
[  818.081047]  ? debug_check_no_locks_freed+0x310/0x310
[  818.081063]  ? print_usage_bug+0xc0/0xc0
[  818.137483]  ? print_usage_bug+0xc0/0xc0
[  818.141555]  ? find_held_lock+0x36/0x1c0
[  818.145615]  ? lock_downgrade+0x8e0/0x8e0
[  818.149766]  ? mark_held_locks+0xc9/0x160
[  818.153903]  ? kasan_check_read+0x11/0x20
[  818.158045]  ? __local_bh_enable_ip+0x161/0x230
[  818.162710]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  818.167715]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  818.172805]  ? trace_hardirqs_on+0xd/0x10
[  818.176940]  ? __local_bh_enable_ip+0x161/0x230
[  818.181601]  mac80211_hwsim_new_radio+0x235/0x3410
[  818.186518]  ? graph_lock+0x170/0x170
[  818.190323]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  818.196547]  ? lock_release+0xa10/0xa10
[  818.200510]  ? check_same_owner+0x320/0x320
[  818.204847]  ? rcu_note_context_switch+0x710/0x710
[  818.209852]  ? __lock_acquire+0x7f5/0x5140
[  818.214077]  ? __might_sleep+0x95/0x190
[  818.218048]  ? kasan_check_write+0x14/0x20
[  818.222272]  ? __mutex_lock+0x7d9/0x17f0
[  818.226321]  ? genl_rcv_msg+0x13a/0x170
[  818.231912]  ? __lock_acquire+0x7f5/0x5140
[  818.236151]  ? mutex_trylock+0x2a0/0x2a0
[  818.240203]  ? graph_lock+0x170/0x170
[  818.243996]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  818.249181]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  818.254184]  ? validate_nla+0x2d9/0x7b0
[  818.258149]  hwsim_new_radio_nl+0x7b8/0xa60
[  818.262461]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  818.267645]  ? __netlink_ns_capable+0x100/0x130
[  818.272316]  genl_family_rcv_msg+0x889/0x1120
[  818.276807]  ? genl_rcv+0x40/0x40
[  818.280356]  ? lock_downgrade+0x8e0/0x8e0
[  818.284495]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  818.289508]  ? kasan_check_read+0x11/0x20
[  818.293647]  ? lock_acquire+0x1dc/0x520
[  818.297609]  ? genl_rcv+0x19/0x40
[  818.301066]  genl_rcv_msg+0xc6/0x170
[  818.304775]  netlink_rcv_skb+0x172/0x440
[  818.308913]  ? genl_family_rcv_msg+0x1120/0x1120
[  818.313659]  ? netlink_ack+0xbc0/0xbc0
[  818.317534]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  818.322722]  ? netlink_skb_destructor+0x210/0x210
[  818.327559]  genl_rcv+0x28/0x40
[  818.330826]  netlink_unicast+0x58b/0x740
[  818.334882]  ? netlink_attachskb+0x970/0x970
[  818.339280]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  818.344807]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  818.349831]  ? security_netlink_send+0x88/0xb0
[  818.354403]  netlink_sendmsg+0x9f0/0xfa0
[  818.358467]  ? netlink_unicast+0x740/0x740
[  818.362695]  ? security_socket_sendmsg+0x94/0xc0
[  818.367444]  ? netlink_unicast+0x740/0x740
[  818.371672]  sock_sendmsg+0xd5/0x120
[  818.375376]  ___sys_sendmsg+0x805/0x940
[  818.379345]  ? copy_msghdr_from_user+0x560/0x560
[  818.384101]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  818.389633]  ? proc_fail_nth_write+0x96/0x1f0
[  818.394235]  ? __fget_light+0x2ef/0x430
[  818.398210]  ? fget_raw+0x20/0x20
[  818.401658]  ? find_held_lock+0x36/0x1c0
[  818.405735]  ? kasan_check_write+0x14/0x20
[  818.409972]  ? wait_for_completion+0x870/0x870
[  818.414551]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  818.420077]  ? sockfd_lookup_light+0xc5/0x160
[  818.424564]  __sys_sendmsg+0x115/0x270
[  818.428443]  ? __ia32_sys_shutdown+0x80/0x80
[  818.432840]  ? __sb_end_write+0xac/0xe0
[  818.436804]  ? fput+0x130/0x1a0
[  818.440074]  ? ksys_write+0x1a6/0x250
[  818.443875]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  818.448714]  __x64_sys_sendmsg+0x78/0xb0
[  818.452774]  do_syscall_64+0x1b1/0x800
[  818.456649]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  818.461482]  ? syscall_return_slowpath+0x5c0/0x5c0
[  818.466414]  ? syscall_return_slowpath+0x30f/0x5c0
[  818.471343]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  818.476698]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  818.481534]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  818.486706] RIP: 0033:0x455a09
[  818.489878] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  818.497584] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  818.504845] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  818.512101] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  818.519355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  818.526608] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000005
2033/05/18 03:45:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7733000000000000]}, 0x10)

2033/05/18 03:45:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008923, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  818.541563] binder: 23794:23813 transaction failed 29189/-22, size 0-0 line 2856
[  818.548761] binder: 23810:23811 unknown command 4743953
[  818.559902] ip6tnl0: Invalid MTU 541982722 requested, hw max 65392
[  818.570800] binder: 23810:23811 ioctl c0306201 20007000 returned -22
[  818.576228] binder: 23794:23813 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:12 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  818.661690] binder: 23824:23827 transaction failed 29189/-22, size 0-0 line 2856
[  818.687372] : renamed from ip6tnl0
[  818.725223] binder: 23824:23827 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf0ffffff00000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:12 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="19634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:12 executing program 3 (fault-call:3 fault-nth:6):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf73]}, 0x10)

2033/05/18 03:45:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008933, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:12 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:12 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x4, 0x7, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r2=>0x0, 0x84, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x2}, @in6={0xa, 0x4e20, 0xccc, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in6={0xa, 0x4e24, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in6={0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0xa}, 0x1ff}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000017c0)=ANY=[@ANYRES32=r2, @ANYBLOB="b90000004a49ade2ade48361ed92f27987f82a63bbdce9e0314c1cb9d7cedb3d1c9f11079e45084ce9c997b96335d6c17cb97be8820abbda0f925bd58fce0e1c11dbdf96733a94f6f34aa451ee77c0fb943542cef3314c9b0eb9fef7c4617c02c5e55a72acfe9c40b397b4397750e551a567d4e9d7f661a94b0863232f7d4c1ba4ddd2bef2cc26a814246e94647083633b19369685d6ab3d7c93a0d912088a7135ef4c92dd7e86f6b6ea710b34749bc6558e136748c20ba0193ec366798bdbea66b264c8f7e76392a4ffbc4b9e46bab1266b09a40b"], &(0x7f0000000300)=0xc1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
sendmmsg$inet_sctp(r1, &(0x7f0000001780)=[{&(0x7f0000000340)=@in6={0xa, 0x4e22, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffff}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="a97cd32a864f9d448e289ca90e04", 0xe}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="68e64e68b3c2522ed264fd15ee4e224d99c27d44c249edf40500a1e326746010ab8b1b5e7d7d30a41b86a6", 0x2b}, {&(0x7f0000001400)="7baf1316b7b0ee21b096565614627fab791d1d2203974d2a57f60d85a8243e294cb003b7721037352f574c7545c201d181e43ecaa20eced18bcd23b2e95ff994006ed714b7dfe325ae2fba338538474e7f0f769799b09e8df5b117cb4d4353c6d239f95632e1d9dfe6f1d3078651419562b68c72bcf94d74637ed590d9eec900ab1ba7458648498decf0a1df690850560c5cd5de32d7704c67dfd999e2ef2beea94ca8500537a1fc274ec4842665ddaa298b42481bcd9f993ef1d234752c1f8e30adc52f458b8a1e515a4e33c6a63b", 0xcf}, {&(0x7f0000001500)="8b652cf0fc6a2a94a00849ac257ef02306299fe8c7ff40f4622f55b35a28a8614853d9c434457d5fa094161cba5518a11065b65f1fdc9c4512660c6415af9ed772335ce1e8f0fe962903dc43c905", 0x4e}, {&(0x7f0000001580)="8813ae2438fc968892e2c74ddefa55b5490fc454bbe930f44499bc6f38a252a5d239030596be5b37cfdf0b12f97c384f7cec4ece29edaf635a12088af991f7fd2bee5732fc49042a2bb6953fe124", 0x4e}, {&(0x7f0000001600)="d828e839102b1d658ed9fc14803c49e65794b12cef996242f4a21faf4cba5f66e8870305f9e887210f6a43cff57d51f0387b3a124622ebd0683d392916da468d58156317885a3c31af593fcc13b7d4eb0f09e3f8f86c401b81e88befc3e210eb438cbb948a53cca5eabf059a3f797191fa310d5dfc1b7af197e700d6d5ffe995212e8ce2934ae3d6a7fcadaed910d062e5b946521b69fa334659e36c5c331f38627880d158c0a1e0efcddc4cb0581f4d9b7b87cfa8dfc01f6b5922fb244b6b8179f0f9fc8decbfe9b76546c562cd497803e3d141997d321d", 0xd8}], 0x7, 0x0, 0x0, 0x48000}], 0x1, 0x4000000)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000200)=""/249)

2033/05/18 03:45:12 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  818.877113] binder: 23846:23848 unknown command 1078485785
[  818.880200] binder: 23852:23857 transaction failed 29189/-22, size 0-0 line 2856
[  818.890822] FAULT_INJECTION: forcing a failure.
[  818.890822] name failslab, interval 1, probability 0, space 0, times 0
[  818.899222] binder: 23846:23848 ioctl c0306201 20007000 returned -22
[  818.902165] CPU: 1 PID: 23855 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  818.916401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  818.925758] Call Trace:
[  818.928361]  dump_stack+0x1b9/0x294
[  818.932012]  ? dump_stack_print_info.cold.2+0x52/0x52
[  818.936993] binder: 23846:23848 ioctl c0306201 20000240 returned -11
[  818.937213]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  818.937244]  should_fail.cold.4+0xa/0x1a
[  818.947113] binder: 23846:23848 unknown command 1078485785
[  818.948918]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  818.948946]  ? unwind_get_return_address+0x61/0xa0
[  818.953198] binder: 23846:23848 ioctl c0306201 20007000 returned -22
[  818.958594]  ? __save_stack_trace+0x7e/0xd0
[  818.958611]  ? graph_lock+0x170/0x170
[  818.958631]  ? find_held_lock+0x36/0x1c0
[  818.958649]  ? __lock_is_held+0xb5/0x140
[  818.958675]  ? check_same_owner+0x320/0x320
[  818.995612]  ? rcu_note_context_switch+0x710/0x710
[  819.000536]  __should_failslab+0x124/0x180
[  819.004762]  should_failslab+0x9/0x14
[  819.008554]  kmem_cache_alloc_node_trace+0x26f/0x770
[  819.013644]  ? __kmalloc_node+0x33/0x70
[  819.017603]  ? __kmalloc_node+0x33/0x70
[  819.021566]  ? rcu_read_lock_sched_held+0x108/0x120
[  819.026576]  __kmalloc_node+0x33/0x70
[  819.030370]  kvmalloc_node+0x6b/0x100
[  819.034164]  alloc_bucket_spinlocks+0x92/0x1a0
[  819.038739]  bucket_table_alloc+0x17e/0x5d0
[  819.043050]  ? __raw_spin_lock_init+0x1c/0x100
[  819.047621]  ? rhashtable_insert_one+0xb20/0xb20
[  819.052365]  ? __lockdep_init_map+0x105/0x590
[  819.056856]  rhashtable_init+0x5ba/0xaa0
[  819.060912]  ? rhashtable_rehash_alloc+0x100/0x100
[  819.065832]  ? graph_lock+0x170/0x170
[  819.069624]  ? __lock_acquire+0x7f5/0x5140
[  819.073859]  rhltable_init+0x58/0xb0
[  819.077562]  sta_info_init+0x75/0x1e0
[  819.081345]  ? print_usage_bug+0xc0/0xc0
[  819.085394]  ? sta_info_recalc_tim+0x20/0x20
[  819.089789]  ? print_usage_bug+0xc0/0xc0
[  819.093839]  ? update_load_avg+0x2d9/0x2570
[  819.098160]  ? unwind_get_return_address+0x61/0xa0
[  819.103090]  ? __save_stack_trace+0x7e/0xd0
[  819.107405]  ieee80211_alloc_hw_nm+0x74e/0x2080
[  819.112061]  ? print_usage_bug+0xc0/0xc0
[  819.116117]  ? ieee80211_restart_work+0x1a0/0x1a0
[  819.120946]  ? __lock_acquire+0x7f5/0x5140
[  819.125168]  ? __lock_acquire+0x7f5/0x5140
[  819.129394]  ? kasan_slab_alloc+0x12/0x20
[  819.133539]  ? graph_lock+0x170/0x170
[  819.137328]  ? debug_check_no_locks_freed+0x310/0x310
[  819.142506]  ? debug_check_no_locks_freed+0x310/0x310
[  819.147681]  ? print_usage_bug+0xc0/0xc0
[  819.151737]  ? print_usage_bug+0xc0/0xc0
[  819.155785]  ? find_held_lock+0x36/0x1c0
[  819.159842]  ? lock_downgrade+0x8e0/0x8e0
[  819.163980]  ? mark_held_locks+0xc9/0x160
[  819.168115]  ? kasan_check_read+0x11/0x20
[  819.172254]  ? __local_bh_enable_ip+0x161/0x230
[  819.176912]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  819.181914]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  819.187005]  ? trace_hardirqs_on+0xd/0x10
[  819.191154]  ? __local_bh_enable_ip+0x161/0x230
[  819.195815]  mac80211_hwsim_new_radio+0x235/0x3410
[  819.200733]  ? graph_lock+0x170/0x170
[  819.204533]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  819.210681]  ? lock_release+0xa10/0xa10
[  819.214653]  ? check_same_owner+0x320/0x320
[  819.218984]  ? rcu_note_context_switch+0x710/0x710
[  819.223908]  ? __lock_acquire+0x7f5/0x5140
[  819.228229]  ? __might_sleep+0x95/0x190
[  819.232197]  ? kasan_check_write+0x14/0x20
[  819.236428]  ? __mutex_lock+0x7d9/0x17f0
[  819.240481]  ? genl_rcv_msg+0x13a/0x170
[  819.244445]  ? __lock_acquire+0x7f5/0x5140
[  819.248670]  ? mutex_trylock+0x2a0/0x2a0
[  819.252721]  ? graph_lock+0x170/0x170
[  819.256512]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  819.261692]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  819.266704]  ? validate_nla+0x2d9/0x7b0
[  819.270669]  hwsim_new_radio_nl+0x7b8/0xa60
[  819.274983]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  819.280168]  ? __netlink_ns_capable+0x100/0x130
[  819.284920]  genl_family_rcv_msg+0x889/0x1120
[  819.289497]  ? genl_rcv+0x40/0x40
[  819.292939]  ? lock_downgrade+0x8e0/0x8e0
[  819.297083]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  819.302090]  ? kasan_check_read+0x11/0x20
[  819.306226]  ? lock_acquire+0x1dc/0x520
[  819.310195]  ? genl_rcv+0x19/0x40
[  819.313823]  genl_rcv_msg+0xc6/0x170
[  819.317527]  netlink_rcv_skb+0x172/0x440
[  819.321584]  ? genl_family_rcv_msg+0x1120/0x1120
[  819.326330]  ? netlink_ack+0xbc0/0xbc0
[  819.330206]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  819.335387]  ? netlink_skb_destructor+0x210/0x210
[  819.340233]  genl_rcv+0x28/0x40
[  819.343499]  netlink_unicast+0x58b/0x740
[  819.347556]  ? netlink_attachskb+0x970/0x970
[  819.351951]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  819.357477]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  819.362484]  ? security_netlink_send+0x88/0xb0
[  819.367056]  netlink_sendmsg+0x9f0/0xfa0
[  819.371113]  ? netlink_unicast+0x740/0x740
[  819.375340]  ? security_socket_sendmsg+0x94/0xc0
[  819.380084]  ? netlink_unicast+0x740/0x740
[  819.384312]  sock_sendmsg+0xd5/0x120
[  819.388021]  ___sys_sendmsg+0x805/0x940
[  819.392004]  ? copy_msghdr_from_user+0x560/0x560
[  819.396776]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  819.402301]  ? proc_fail_nth_write+0x96/0x1f0
[  819.406789]  ? __fget_light+0x2ef/0x430
[  819.410752]  ? fget_raw+0x20/0x20
[  819.414194]  ? find_held_lock+0x36/0x1c0
[  819.418250]  ? kasan_check_write+0x14/0x20
[  819.422481]  ? wait_for_completion+0x870/0x870
[  819.427063]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  819.432612]  ? sockfd_lookup_light+0xc5/0x160
[  819.437095]  __sys_sendmsg+0x115/0x270
[  819.440973]  ? __ia32_sys_shutdown+0x80/0x80
[  819.445370]  ? __sb_end_write+0xac/0xe0
[  819.449337]  ? fput+0x130/0x1a0
[  819.452612]  ? ksys_write+0x1a6/0x250
[  819.456420]  __x64_sys_sendmsg+0x78/0xb0
[  819.460470]  do_syscall_64+0x1b1/0x800
[  819.464346]  ? finish_task_switch+0x1ca/0x840
[  819.468832]  ? syscall_return_slowpath+0x5c0/0x5c0
[  819.473764]  ? syscall_return_slowpath+0x30f/0x5c0
[  819.478688]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  819.484050]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  819.488892]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  819.494066] RIP: 0033:0x455a09
[  819.497326] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  819.505030] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  819.512295] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  819.519560] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
2033/05/18 03:45:13 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x37be]}, 0x10)

[  819.526821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  819.534083] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000006
[  819.548281] binder: 23852:23857 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:13 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:13 executing program 3 (fault-call:3 fault-nth:7):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:13 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="f0b589"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x4000)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x7)
syncfs(r2)

2033/05/18 03:45:13 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000c0045877, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  819.678419] binder: 23878:23879 transaction failed 29189/-22, size 0-0 line 2856
[  819.703659] FAULT_INJECTION: forcing a failure.
[  819.703659] name failslab, interval 1, probability 0, space 0, times 0
[  819.715005] CPU: 1 PID: 23882 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  819.722289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  819.731652] Call Trace:
[  819.734259]  dump_stack+0x1b9/0x294
[  819.737908]  ? dump_stack_print_info.cold.2+0x52/0x52
[  819.743119]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  819.748340]  should_fail.cold.4+0xa/0x1a
[  819.750112] binder: 23887:23889 unknown command 9025008
[  819.752418]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  819.752443]  ? unwind_get_return_address+0x61/0xa0
[  819.752460]  ? __save_stack_trace+0x7e/0xd0
[  819.752479]  ? graph_lock+0x170/0x170
2033/05/18 03:45:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  819.774934] binder: 23887:23889 ioctl c0306201 20007000 returned -22
[  819.775966]  ? find_held_lock+0x36/0x1c0
[  819.775990]  ? __lock_is_held+0xb5/0x140
[  819.776024]  ? check_same_owner+0x320/0x320
[  819.789460] binder: 23887:23889 ioctl c0306201 20000240 returned -11
[  819.790607]  ? rcu_note_context_switch+0x710/0x710
[  819.790627]  __should_failslab+0x124/0x180
[  819.790647]  should_failslab+0x9/0x14
[  819.810304] binder: 23887:23889 unknown command 9025008
[  819.810589]  kmem_cache_alloc_node_trace+0x26f/0x770
[  819.810606]  ? __kmalloc_node+0x33/0x70
[  819.824791] binder: 23887:23889 ioctl c0306201 20007000 returned -22
[  819.824849]  ? __kmalloc_node+0x33/0x70
[  819.839258]  ? rcu_read_lock_sched_held+0x108/0x120
[  819.844290]  __kmalloc_node+0x33/0x70
[  819.848101]  kvmalloc_node+0x6b/0x100
[  819.851912]  alloc_bucket_spinlocks+0x92/0x1a0
[  819.856509]  bucket_table_alloc+0x17e/0x5d0
[  819.860841]  ? __raw_spin_lock_init+0x1c/0x100
[  819.865445]  ? rhashtable_insert_one+0xb20/0xb20
[  819.870205]  ? __lockdep_init_map+0x105/0x590
[  819.874714]  rhashtable_init+0x5ba/0xaa0
[  819.878783]  ? rhashtable_rehash_alloc+0x100/0x100
[  819.883719]  ? check_noncircular+0x20/0x20
[  819.887970]  ? __lock_acquire+0x7f5/0x5140
[  819.892228]  rhltable_init+0x58/0xb0
[  819.895948]  sta_info_init+0x75/0x1e0
[  819.899753]  ? print_usage_bug+0xc0/0xc0
[  819.903823]  ? sta_info_recalc_tim+0x20/0x20
[  819.908322]  ? print_usage_bug+0xc0/0xc0
[  819.912379]  ? __lock_acquire+0x7f5/0x5140
[  819.912836] binder: 23878:23879 ioctl c0306201 20000240 returned -14
[  819.916607]  ? unwind_get_return_address+0x61/0xa0
[  819.916626]  ? __save_stack_trace+0x7e/0xd0
[  819.916645]  ieee80211_alloc_hw_nm+0x74e/0x2080
[  819.916661]  ? print_usage_bug+0xc0/0xc0
[  819.916674]  ? ieee80211_restart_work+0x1a0/0x1a0
[  819.916688]  ? perf_trace_lock+0xd6/0x900
[  819.916700]  ? __lock_acquire+0x7f5/0x5140
[  819.916717]  ? zap_class+0x720/0x720
[  819.958005]  ? graph_lock+0x170/0x170
[  819.961815]  ? debug_check_no_locks_freed+0x310/0x310
[  819.967014]  ? debug_check_no_locks_freed+0x310/0x310
[  819.972211]  ? print_usage_bug+0xc0/0xc0
[  819.976295]  ? print_usage_bug+0xc0/0xc0
[  819.980364]  ? find_held_lock+0x36/0x1c0
[  819.984441]  ? lock_downgrade+0x8e0/0x8e0
[  819.988609]  ? mark_held_locks+0xc9/0x160
[  819.992763]  ? kasan_check_read+0x11/0x20
[  819.996922]  ? __local_bh_enable_ip+0x161/0x230
[  820.001600]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  820.006630]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  820.011737]  ? trace_hardirqs_on+0xd/0x10
[  820.015895]  ? __local_bh_enable_ip+0x161/0x230
[  820.020576]  mac80211_hwsim_new_radio+0x235/0x3410
[  820.025510]  ? graph_lock+0x170/0x170
[  820.029331]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  820.035498]  ? lock_release+0xa10/0xa10
[  820.039479]  ? check_same_owner+0x320/0x320
[  820.043818]  ? rcu_note_context_switch+0x710/0x710
[  820.049078]  ? __lock_acquire+0x7f5/0x5140
[  820.053325]  ? __might_sleep+0x95/0x190
[  820.057316]  ? kasan_check_write+0x14/0x20
[  820.061567]  ? __mutex_lock+0x7d9/0x17f0
[  820.065640]  ? genl_rcv_msg+0x13a/0x170
[  820.069626]  ? __lock_acquire+0x7f5/0x5140
[  820.073875]  ? mutex_trylock+0x2a0/0x2a0
[  820.077933]  ? perf_trace_lock+0xd6/0x900
[  820.082068]  ? graph_lock+0x170/0x170
[  820.085860]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  820.091043]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  820.096047]  ? validate_nla+0x2d9/0x7b0
[  820.100018]  hwsim_new_radio_nl+0x7b8/0xa60
[  820.104335]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  820.109518]  ? __netlink_ns_capable+0x100/0x130
[  820.114183]  genl_family_rcv_msg+0x889/0x1120
[  820.118681]  ? genl_rcv+0x40/0x40
[  820.122121]  ? lock_downgrade+0x8e0/0x8e0
[  820.126266]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  820.131276]  ? lock_acquire+0x1dc/0x520
[  820.135244]  ? genl_rcv+0x19/0x40
[  820.138699]  genl_rcv_msg+0xc6/0x170
[  820.142402]  netlink_rcv_skb+0x172/0x440
[  820.146451]  ? genl_family_rcv_msg+0x1120/0x1120
[  820.151203]  ? netlink_ack+0xbc0/0xbc0
[  820.155085]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  820.160271]  ? netlink_skb_destructor+0x210/0x210
[  820.165118]  genl_rcv+0x28/0x40
[  820.168387]  netlink_unicast+0x58b/0x740
[  820.172440]  ? netlink_attachskb+0x970/0x970
[  820.176838]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  820.182361]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  820.187368]  ? security_netlink_send+0x88/0xb0
[  820.191940]  netlink_sendmsg+0x9f0/0xfa0
[  820.195995]  ? netlink_unicast+0x740/0x740
[  820.200223]  ? security_socket_sendmsg+0x94/0xc0
[  820.204966]  ? netlink_unicast+0x740/0x740
[  820.209202]  sock_sendmsg+0xd5/0x120
[  820.212907]  ___sys_sendmsg+0x805/0x940
[  820.216874]  ? copy_msghdr_from_user+0x560/0x560
[  820.221644]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  820.227170]  ? proc_fail_nth_write+0x96/0x1f0
[  820.232772]  ? __fget_light+0x2ef/0x430
[  820.236739]  ? fget_raw+0x20/0x20
[  820.240179]  ? find_held_lock+0x36/0x1c0
[  820.244234]  ? kasan_check_write+0x14/0x20
[  820.248463]  ? wait_for_completion+0x870/0x870
[  820.253047]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  820.258571]  ? sockfd_lookup_light+0xc5/0x160
[  820.263056]  __sys_sendmsg+0x115/0x270
[  820.266935]  ? __ia32_sys_shutdown+0x80/0x80
[  820.271333]  ? __sb_end_write+0xac/0xe0
[  820.275299]  ? fput+0x130/0x1a0
[  820.278567]  ? ksys_write+0x1a6/0x250
[  820.282450]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  820.287284]  __x64_sys_sendmsg+0x78/0xb0
[  820.291334]  do_syscall_64+0x1b1/0x800
[  820.295210]  ? finish_task_switch+0x1ca/0x840
[  820.299691]  ? syscall_return_slowpath+0x5c0/0x5c0
[  820.304607]  ? syscall_return_slowpath+0x30f/0x5c0
[  820.309536]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  820.314895]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  820.319729]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  820.324905] RIP: 0033:0x455a09
[  820.328078] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  820.335774] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  820.343038] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  820.350299] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  820.357553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  820.364817] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000007
2033/05/18 03:45:14 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xe000000, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:14 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000002c0)=0xfffffffffffffffd)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d71087706000000000000001ef4c98ecc6847c61a63131fb5b350addcea6d6f52da13875362d7a7f8f6ea9be78315495b0e7867ff7b2b2cef89259d6b1d9b8094c71ce5849fa9f5af7c5bd14ecc22b88f194534d39ed4ff7ec90843561d675766da830cecfb761cd2de91496cf55d0b3fbe5490ba2f77c90b1fae428b7ba49f03036052bcf0ba68cf5bab3c0df83481d17d8d1647c5745bda833ee966aca88f5e1c812bbdb3e6a22239a2aa37ebbe14bbc4ef4a3ab8da4e7d385dbb0695f79a4374dca041e11ea6ee7aff0a9b1589df5ae89eebda860e6d33502dd3169dd03d266f7fe2e5b6ff5abb8d1eb47e7987526a30987548cc3388ced7c081da423afac4f64bb4377b81a50610192b572d860701eee2df77f22b9592e84bccadb206a075ed905f3f9b94e2d51a6ab2514291fdf80b4a989f208789d96f1a854be529be21cdf81769a5b3d0d7566d26db5b80eb6b53748e565a3b25986c4eed61abedc8358b87fa93ce9c30002ce45bce"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000300)={"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"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:14 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x476d0000]}, 0x10)

2033/05/18 03:45:14 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000000008992, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = memfd_create(&(0x7f0000000000)='{\x00', 0x1)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:14 executing program 3 (fault-call:3 fault-nth:8):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  820.539345] FAULT_INJECTION: forcing a failure.
[  820.539345] name failslab, interval 1, probability 0, space 0, times 0
[  820.550638] CPU: 0 PID: 23915 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  820.557932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  820.567296] Call Trace:
[  820.569904]  dump_stack+0x1b9/0x294
[  820.573555]  ? dump_stack_print_info.cold.2+0x52/0x52
[  820.578766]  should_fail.cold.4+0xa/0x1a
[  820.580777] binder: 23916:23917 transaction failed 29189/-22, size 0-0 line 2856
[  820.582842]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  820.582869]  ? graph_lock+0x170/0x170
[  820.582894]  ? find_held_lock+0x36/0x1c0
[  820.603511]  ? __lock_is_held+0xb5/0x140
[  820.607604]  ? check_same_owner+0x320/0x320
[  820.611939]  ? trace_hardirqs_on+0xd/0x10
[  820.616103]  ? rcu_note_context_switch+0x710/0x710
[  820.618280] binder: 23916:23917 ioctl c0306201 20000240 returned -14
[  820.621059]  __should_failslab+0x124/0x180
[  820.621082]  should_failslab+0x9/0x14
[  820.621100]  __kmalloc_track_caller+0x2c4/0x760
[  820.621114]  ? pointer+0xa10/0xa10
[  820.621132]  ? print_usage_bug+0xc0/0xc0
[  820.621146]  ? kasprintf+0xa2/0xc0
[  820.621163]  kvasprintf+0xa9/0x130
[  820.654939]  ? bust_spinlocks+0xe0/0xe0
[  820.658921]  ? __lockdep_init_map+0x105/0x590
[  820.663419]  kasprintf+0xa2/0xc0
[  820.666806]  ? kvasprintf_const+0x190/0x190
[  820.671141]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  820.676171]  ieee80211_alloc_led_names+0x85/0x410
[  820.681020]  ieee80211_alloc_hw_nm+0x1aee/0x2080
[  820.685789]  ? ieee80211_restart_work+0x1a0/0x1a0
[  820.690650]  ? __lock_acquire+0x7f5/0x5140
[  820.694890]  ? zap_class+0x720/0x720
[  820.698617]  ? graph_lock+0x170/0x170
[  820.702423]  ? debug_check_no_locks_freed+0x310/0x310
[  820.707610]  ? print_usage_bug+0xc0/0xc0
[  820.711668]  ? print_usage_bug+0xc0/0xc0
[  820.715716]  ? find_held_lock+0x36/0x1c0
[  820.719773]  ? lock_downgrade+0x8e0/0x8e0
[  820.723914]  ? mark_held_locks+0xc9/0x160
[  820.728053]  ? kasan_check_read+0x11/0x20
[  820.732195]  ? __local_bh_enable_ip+0x161/0x230
[  820.736963]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  820.742051]  ? trace_hardirqs_on+0xd/0x10
[  820.746189]  ? __local_bh_enable_ip+0x161/0x230
[  820.750855]  mac80211_hwsim_new_radio+0x235/0x3410
[  820.755773]  ? graph_lock+0x170/0x170
[  820.759570]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  820.765706]  ? lock_release+0xa10/0xa10
[  820.769669]  ? check_same_owner+0x320/0x320
[  820.774000]  ? rcu_note_context_switch+0x710/0x710
[  820.778920]  ? __lock_acquire+0x7f5/0x5140
[  820.783143]  ? __might_sleep+0x95/0x190
[  820.787109]  ? kasan_check_write+0x14/0x20
[  820.791329]  ? __mutex_lock+0x7d9/0x17f0
[  820.795384]  ? genl_rcv_msg+0x13a/0x170
[  820.799349]  ? __lock_acquire+0x7f5/0x5140
[  820.803576]  ? mutex_trylock+0x2a0/0x2a0
[  820.807620]  ? perf_trace_lock+0xd6/0x900
[  820.811761]  ? graph_lock+0x170/0x170
[  820.815553]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  820.820740]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  820.825744]  ? validate_nla+0x2d9/0x7b0
[  820.829719]  hwsim_new_radio_nl+0x7b8/0xa60
[  820.834044]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  820.839228]  ? __netlink_ns_capable+0x100/0x130
[  820.843905]  genl_family_rcv_msg+0x889/0x1120
[  820.848393]  ? genl_rcv+0x40/0x40
[  820.851836]  ? lock_downgrade+0x8e0/0x8e0
[  820.855973]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  820.860988]  ? lock_acquire+0x1dc/0x520
[  820.865066]  ? genl_rcv+0x19/0x40
[  820.868523]  genl_rcv_msg+0xc6/0x170
[  820.872227]  netlink_rcv_skb+0x172/0x440
[  820.876286]  ? genl_family_rcv_msg+0x1120/0x1120
[  820.881038]  ? netlink_ack+0xbc0/0xbc0
[  820.884914]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  820.890094]  ? netlink_skb_destructor+0x210/0x210
[  820.894929]  genl_rcv+0x28/0x40
[  820.898204]  netlink_unicast+0x58b/0x740
[  820.902277]  ? netlink_attachskb+0x970/0x970
[  820.906675]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  820.912201]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  820.917206]  ? security_netlink_send+0x88/0xb0
[  820.921782]  netlink_sendmsg+0x9f0/0xfa0
[  820.925839]  ? netlink_unicast+0x740/0x740
[  820.930066]  ? security_socket_sendmsg+0x94/0xc0
[  820.934810]  ? netlink_unicast+0x740/0x740
[  820.939040]  sock_sendmsg+0xd5/0x120
[  820.942746]  ___sys_sendmsg+0x805/0x940
[  820.946724]  ? copy_msghdr_from_user+0x560/0x560
[  820.951567]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  820.957091]  ? proc_fail_nth_write+0x96/0x1f0
[  820.961576]  ? __fget_light+0x2ef/0x430
[  820.965540]  ? fget_raw+0x20/0x20
[  820.968988]  ? find_held_lock+0x36/0x1c0
[  820.973046]  ? kasan_check_write+0x14/0x20
[  820.977285]  ? wait_for_completion+0x870/0x870
[  820.981862]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  820.987393]  ? sockfd_lookup_light+0xc5/0x160
[  820.991875]  __sys_sendmsg+0x115/0x270
[  820.995753]  ? __ia32_sys_shutdown+0x80/0x80
[  821.000150]  ? __sb_end_write+0xac/0xe0
[  821.004126]  ? fput+0x130/0x1a0
[  821.007405]  ? ksys_write+0x1a6/0x250
[  821.011208]  __x64_sys_sendmsg+0x78/0xb0
[  821.015273]  do_syscall_64+0x1b1/0x800
[  821.019146]  ? finish_task_switch+0x1ca/0x840
[  821.023631]  ? syscall_return_slowpath+0x5c0/0x5c0
[  821.028547]  ? syscall_return_slowpath+0x30f/0x5c0
[  821.033469]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  821.038823]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  821.043661]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  821.048836] RIP: 0033:0x455a09
[  821.052018] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  821.059730] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  821.066985] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  821.074240] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  821.081497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
2033/05/18 03:45:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x80000040049409, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:14 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:14 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f8]}, 0x10)

[  821.088764] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000008
[  821.104949] binder: 23921:23923 unknown command 1997041965
2033/05/18 03:45:14 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"e07036746e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  821.159656] binder: 23921:23923 ioctl c0306201 20007000 returned -22
[  821.177978] binder: 23939:23940 transaction failed 29189/-22, size 0-0 line 2856
[  821.190632] binder: 23921:23923 ioctl c0306201 20000240 returned -11
2033/05/18 03:45:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa]}, 0x10)

2033/05/18 03:45:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"69e036746e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  821.210712] binder: 23921:23923 unknown command 1997041965
[  821.228841] binder: 23939:23940 ioctl c0306201 20000240 returned -14
[  821.232699] binder: 23921:23923 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:15 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x608480, 0x0)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x4a5, 0x24})
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
pause()
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x3ff, 0x10001, 0x23, 0x4})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0x6, 0xffff, 0xbf, 0x9, 0x0, 0x1f, 0x80000, 0x8, 0xfff, 0x7ff, 0x6, 0x7, 0x0, 0xff, 0xcde0, 0x3, 0x0, 0xdf, 0x26cc62a9, 0xfffffffffffffff8, 0x80, 0x7, 0x9, 0x9, 0xfffffffffffffff8, 0x3, 0x100, 0x5ecd, 0x3, 0x1a5a, 0x8, 0x950b, 0x4, 0x401, 0x8, 0x6, 0x0, 0x8, 0x2, @perf_config_ext={0xd1f, 0x6}, 0x8, 0x3ff, 0x6, 0x7, 0xfff, 0x7, 0x5})
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x11, @multicast2=0xe0000002, 0x4e23, 0x0, 'wlc\x00', 0x37, 0x100000000, 0x44}, {@multicast1=0xe0000001, 0x4e24, 0x2, 0x6, 0x1, 0x7}}, 0x44)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:15 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:15 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xfffffffe, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:15 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x1a0, 0x0, &(0x7f0000000280)="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"})
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"6970e0746e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:15 executing program 3 (fault-call:3 fault-nth:9):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000000ffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc805000000000000]}, 0x10)

[  821.533826] binder: 23989:23991 transaction failed 29189/-22, size 0-0 line 2856
[  821.542412] binder: 23987:23992 transaction failed 29189/-22, size 0-0 line 2856
[  821.545521] FAULT_INJECTION: forcing a failure.
[  821.545521] name failslab, interval 1, probability 0, space 0, times 0
[  821.561395] CPU: 1 PID: 23988 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  821.568678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  821.578145] Call Trace:
2033/05/18 03:45:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  821.578992] binder: 23987:23992 ioctl c0306201 20000240 returned -11
[  821.580748]  dump_stack+0x1b9/0x294
[  821.580770]  ? dump_stack_print_info.cold.2+0x52/0x52
[  821.580793]  ? __save_stack_trace+0x7e/0xd0
[  821.593007] binder: 23989:23991 ioctl c0306201 20000240 returned -14
[  821.596092]  should_fail.cold.4+0xa/0x1a
[  821.596114]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  821.596136]  ? save_stack+0x43/0xd0
[  821.619725] binder: 23987:23992 transaction failed 29189/-22, size 0-0 line 2856
[  821.619930]  ? kasan_kmalloc+0xc4/0xe0
[  821.631324]  ? __kmalloc_track_caller+0x14a/0x760
[  821.636172]  ? kvasprintf+0xa9/0x130
[  821.639894]  ? kasprintf+0xa2/0xc0
[  821.643440]  ? ieee80211_alloc_led_names+0x85/0x410
[  821.648563]  ? graph_lock+0x170/0x170
[  821.652386]  ? genl_rcv_msg+0xc6/0x170
[  821.656293]  ? netlink_rcv_skb+0x172/0x440
[  821.660532]  ? genl_rcv+0x28/0x40
[  821.663986]  ? netlink_unicast+0x58b/0x740
[  821.668220]  ? netlink_sendmsg+0x9f0/0xfa0
[  821.672456]  ? sock_sendmsg+0xd5/0x120
[  821.676353]  ? find_held_lock+0x36/0x1c0
[  821.680423]  ? __lock_is_held+0xb5/0x140
2033/05/18 03:45:15 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:15 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
clock_adjtime(0x6, &(0x7f0000000040)={0x9de, 0x1ea7, 0x9, 0xb645, 0x2, 0x6, 0x804b, 0x5, 0x7e9, 0x9, 0x9, 0x8, 0x0, 0x9, 0x7, 0x8001, 0xb1, 0x3ff, 0x10001, 0x0, 0x1, 0x4, 0x7, 0x7, 0x1, 0x2})
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6e, 0x10400)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  821.684501]  ? check_same_owner+0x320/0x320
[  821.688836]  ? rcu_note_context_switch+0x710/0x710
[  821.693882]  __should_failslab+0x124/0x180
[  821.698126]  should_failslab+0x9/0x14
[  821.701936]  __kmalloc_track_caller+0x2c4/0x760
[  821.706613]  ? pointer+0xa10/0xa10
[  821.710164]  ? print_usage_bug+0xc0/0xc0
[  821.714228]  ? kasprintf+0xa2/0xc0
[  821.717775]  kvasprintf+0xa9/0x130
[  821.721323]  ? bust_spinlocks+0xe0/0xe0
[  821.725309]  ? __lockdep_init_map+0x105/0x590
[  821.729815]  kasprintf+0xa2/0xc0
[  821.733191]  ? kvasprintf_const+0x190/0x190
[  821.737526]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  821.742558]  ieee80211_alloc_led_names+0x118/0x410
[  821.747576]  ieee80211_alloc_hw_nm+0x1aee/0x2080
[  821.752348]  ? ieee80211_restart_work+0x1a0/0x1a0
[  821.755070] binder: 24008:24010 transaction failed 29189/-22, size 0-0 line 2856
[  821.757196]  ? __lock_acquire+0x7f5/0x5140
[  821.757214]  ? zap_class+0x720/0x720
[  821.757236]  ? graph_lock+0x170/0x170
[  821.757254]  ? debug_check_no_locks_freed+0x310/0x310
2033/05/18 03:45:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  821.781748]  ? print_usage_bug+0xc0/0xc0
[  821.785826]  ? print_usage_bug+0xc0/0xc0
[  821.789893]  ? find_held_lock+0x36/0x1c0
[  821.793969]  ? lock_downgrade+0x8e0/0x8e0
[  821.798126]  ? mark_held_locks+0xc9/0x160
[  821.800718] binder: 24008:24014 transaction failed 29189/-22, size 0-0 line 2856
[  821.802273]  ? kasan_check_read+0x11/0x20
[  821.802294]  ? __local_bh_enable_ip+0x161/0x230
[  821.802313]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  821.802330]  ? trace_hardirqs_on+0xd/0x10
[  821.827877]  ? __local_bh_enable_ip+0x161/0x230
2033/05/18 03:45:15 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  821.832560]  mac80211_hwsim_new_radio+0x235/0x3410
[  821.837499]  ? graph_lock+0x170/0x170
[  821.841319]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  821.847476]  ? lock_release+0xa10/0xa10
[  821.851466]  ? check_same_owner+0x320/0x320
[  821.855807]  ? rcu_note_context_switch+0x710/0x710
[  821.860750]  ? __lock_acquire+0x7f5/0x5140
[  821.864993]  ? __might_sleep+0x95/0x190
[  821.868991]  ? kasan_check_write+0x14/0x20
[  821.873231]  ? __mutex_lock+0x7d9/0x17f0
[  821.877303]  ? genl_rcv_msg+0x13a/0x170
[  821.881288]  ? __lock_acquire+0x7f5/0x5140
2033/05/18 03:45:15 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffe, 0xda, 0x3, @scatter={0x6, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/223, 0xdf}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000300)=""/248, 0xf8}]}, &(0x7f0000000480)="517a10b0893d726aa4a76d251d073b480b9bbfb77ba5bf8808c7158bfb1014bb12cd0ef8c7f8ad279115c6d5f995cebdcb147d4ff6bfd081a8038a40a919dad10cf4fe8e048b488fb66f15c2e37e3e2f3447957e278901cbabcf92aca13aabedf9910c56bd051c5cb9f0c13b16f1654b910a594f807f2b14aaeab1520d267e84619c253c11dd4139802288aad49ea85b404a6f45b46af79853e95b04eec4edbb93edf8042bd0e7cfdce879d50753c26f57ece99f84c582dcf8762811c89fa296f8632e8bbe8c563a7aeb0fb027cec9d465530d16236997754445", &(0x7f0000000580)=""/111, 0xfffffffffffffff8, 0x2, 0x3, &(0x7f0000000600)})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={<r3=>0x0}, &(0x7f0000000700)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7, 0x0, 0x6, 0x5, r3}, 0x10)

2033/05/18 03:45:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  821.883313] binder: undelivered TRANSACTION_ERROR: 29189
[  821.885538]  ? mutex_trylock+0x2a0/0x2a0
[  821.885554]  ? perf_trace_lock+0xd6/0x900
[  821.885570]  ? graph_lock+0x170/0x170
[  821.885588]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  821.885606]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  821.913202]  ? validate_nla+0x2d9/0x7b0
[  821.917190]  hwsim_new_radio_nl+0x7b8/0xa60
[  821.921526]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  821.926724]  ? __netlink_ns_capable+0x100/0x130
[  821.931405]  genl_family_rcv_msg+0x889/0x1120
[  821.935915]  ? genl_rcv+0x40/0x40
[  821.939378]  ? lock_downgrade+0x8e0/0x8e0
[  821.943533]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  821.948565]  ? lock_acquire+0x1dc/0x520
[  821.952547]  ? genl_rcv+0x19/0x40
[  821.953415] binder: 24021:24022 transaction failed 29189/-22, size 0-0 line 2856
[  821.956025]  genl_rcv_msg+0xc6/0x170
[  821.956046]  netlink_rcv_skb+0x172/0x440
[  821.956062]  ? genl_family_rcv_msg+0x1120/0x1120
[  821.956079]  ? netlink_ack+0xbc0/0xbc0
[  821.979976]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  821.985191]  ? netlink_skb_destructor+0x210/0x210
[  821.990053]  genl_rcv+0x28/0x40
[  821.993457]  netlink_unicast+0x58b/0x740
[  821.997528]  ? netlink_attachskb+0x970/0x970
[  822.001944]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  822.002630] binder: 24021:24022 transaction failed 29189/-22, size 0-0 line 2856
[  822.007484]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  822.007503]  ? security_netlink_send+0x88/0xb0
[  822.007525]  netlink_sendmsg+0x9f0/0xfa0
[  822.007546]  ? netlink_unicast+0x740/0x740
[  822.032909]  ? security_socket_sendmsg+0x94/0xc0
[  822.037673]  ? netlink_unicast+0x740/0x740
[  822.041916]  sock_sendmsg+0xd5/0x120
[  822.045647]  ___sys_sendmsg+0x805/0x940
[  822.049637]  ? copy_msghdr_from_user+0x560/0x560
[  822.054410]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  822.059953]  ? proc_fail_nth_write+0x96/0x1f0
[  822.064461]  ? __fget_light+0x2ef/0x430
[  822.068444]  ? fget_raw+0x20/0x20
[  822.071900]  ? find_held_lock+0x36/0x1c0
[  822.075972]  ? kasan_check_write+0x14/0x20
[  822.079985] binder: undelivered TRANSACTION_ERROR: 29189
[  822.080214]  ? wait_for_completion+0x870/0x870
[  822.080240]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  822.095773]  ? sockfd_lookup_light+0xc5/0x160
[  822.100282]  __sys_sendmsg+0x115/0x270
[  822.104180]  ? __ia32_sys_shutdown+0x80/0x80
[  822.108599]  ? __sb_end_write+0xac/0xe0
[  822.112588]  ? fput+0x130/0x1a0
[  822.115867]  ? ksys_write+0x1a6/0x250
[  822.119688]  __x64_sys_sendmsg+0x78/0xb0
[  822.123779]  do_syscall_64+0x1b1/0x800
[  822.127675]  ? finish_task_switch+0x1ca/0x840
[  822.132195]  ? syscall_return_slowpath+0x5c0/0x5c0
[  822.137126]  ? syscall_return_slowpath+0x30f/0x5c0
[  822.142068]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  822.147440]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  822.152298]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  822.157481] RIP: 0033:0x455a09
[  822.160655] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  822.168355] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  822.175628] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  822.182889] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  822.190143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  822.197406] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000009
2033/05/18 03:45:16 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5b, 0x100)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ';#bdeveth1'}, {0x20, "5e2d6370757365745e21ae5b76626f786e657431"}, {0x20, 'cpuset]ppp1{keyring'}], 0xa, "245b7542ae8238d4af37f3b236f178111b9014426a599ecc"}, 0x57)
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={<r2=>0x0, 0xffffffff, 0x20}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:16 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0x4})
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48441, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040))

2033/05/18 03:45:16 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:16 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036e06e6c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:16 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x7f80000]}, 0x10)

2033/05/18 03:45:16 executing program 3 (fault-call:3 fault-nth:10):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffffff00000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

[  822.550861] FAULT_INJECTION: forcing a failure.
[  822.550861] name failslab, interval 1, probability 0, space 0, times 0
[  822.562338] CPU: 0 PID: 24051 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  822.569628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  822.578984] Call Trace:
[  822.581597]  dump_stack+0x1b9/0x294
[  822.585245]  ? dump_stack_print_info.cold.2+0x52/0x52
[  822.590442]  ? __save_stack_trace+0x7e/0xd0
[  822.594780]  should_fail.cold.4+0xa/0x1a
[  822.598855]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  822.603965]  ? save_stack+0x43/0xd0
[  822.607596]  ? kasan_kmalloc+0xc4/0xe0
[  822.611490]  ? __kmalloc_track_caller+0x14a/0x760
[  822.616330]  ? kvasprintf+0xa9/0x130
[  822.620037]  ? kasprintf+0xa2/0xc0
[  822.623576]  ? ieee80211_alloc_led_names+0x118/0x410
[  822.628677]  ? graph_lock+0x170/0x170
[  822.632553]  ? genl_rcv_msg+0xc6/0x170
[  822.636429]  ? netlink_rcv_skb+0x172/0x440
[  822.640651]  ? genl_rcv+0x28/0x40
[  822.644094]  ? netlink_unicast+0x58b/0x740
[  822.648318]  ? netlink_sendmsg+0x9f0/0xfa0
[  822.652540]  ? sock_sendmsg+0xd5/0x120
[  822.656421]  ? find_held_lock+0x36/0x1c0
[  822.660478]  ? __lock_is_held+0xb5/0x140
[  822.664538]  ? check_same_owner+0x320/0x320
[  822.668852]  ? rcu_note_context_switch+0x710/0x710
[  822.673777]  __should_failslab+0x124/0x180
[  822.678010]  should_failslab+0x9/0x14
[  822.681804]  __kmalloc_track_caller+0x2c4/0x760
[  822.686459]  ? pointer+0xa10/0xa10
[  822.690004]  ? print_usage_bug+0xc0/0xc0
[  822.694058]  ? kasprintf+0xa2/0xc0
[  822.697595]  kvasprintf+0xa9/0x130
[  822.701126]  ? bust_spinlocks+0xe0/0xe0
[  822.705091]  ? __lockdep_init_map+0x105/0x590
[  822.709661]  kasprintf+0xa2/0xc0
[  822.713021]  ? kvasprintf_const+0x190/0x190
[  822.717338]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  822.722349]  ieee80211_alloc_led_names+0x1ab/0x410
[  822.727270]  ieee80211_alloc_hw_nm+0x1aee/0x2080
[  822.732017]  ? ieee80211_restart_work+0x1a0/0x1a0
[  822.736852]  ? __lock_acquire+0x7f5/0x5140
[  822.741077]  ? __lock_acquire+0x7f5/0x5140
[  822.745320]  ? kasan_slab_alloc+0x12/0x20
[  822.749455]  ? kmem_cache_alloc+0x12e/0x760
[  822.753783]  ? __d_alloc+0xc0/0xd30
[  822.757405]  ? graph_lock+0x170/0x170
[  822.761194]  ? debug_check_no_locks_freed+0x310/0x310
[  822.766369]  ? print_usage_bug+0xc0/0xc0
[  822.770424]  ? print_usage_bug+0xc0/0xc0
[  822.774472]  ? find_held_lock+0x36/0x1c0
[  822.778531]  ? lock_downgrade+0x8e0/0x8e0
[  822.782668]  ? mark_held_locks+0xc9/0x160
[  822.786801]  ? kasan_check_read+0x11/0x20
[  822.790938]  ? __local_bh_enable_ip+0x161/0x230
[  822.795599]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  822.800689]  ? trace_hardirqs_on+0xd/0x10
[  822.804825]  ? __local_bh_enable_ip+0x161/0x230
[  822.809488]  mac80211_hwsim_new_radio+0x235/0x3410
[  822.814415]  ? graph_lock+0x170/0x170
[  822.818212]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  822.824355]  ? lock_release+0xa10/0xa10
[  822.828319]  ? check_same_owner+0x320/0x320
[  822.832639]  ? rcu_note_context_switch+0x710/0x710
[  822.837553]  ? __lock_acquire+0x7f5/0x5140
[  822.841790]  ? __might_sleep+0x95/0x190
[  822.845754]  ? kasan_check_write+0x14/0x20
[  822.849976]  ? __mutex_lock+0x7d9/0x17f0
[  822.854034]  ? genl_rcv_msg+0x13a/0x170
[  822.858015]  ? __lock_acquire+0x7f5/0x5140
[  822.862245]  ? mutex_trylock+0x2a0/0x2a0
[  822.866300]  ? graph_lock+0x170/0x170
[  822.870094]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  822.875274]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  822.880277]  ? validate_nla+0x2d9/0x7b0
[  822.884241]  hwsim_new_radio_nl+0x7b8/0xa60
[  822.888554]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  822.893734]  ? __netlink_ns_capable+0x100/0x130
[  822.898395]  genl_family_rcv_msg+0x889/0x1120
[  822.902889]  ? genl_rcv+0x40/0x40
[  822.906340]  ? lock_downgrade+0x8e0/0x8e0
[  822.910475]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  822.915495]  ? kasan_check_read+0x11/0x20
[  822.919632]  ? lock_acquire+0x1dc/0x520
[  822.923591]  ? genl_rcv+0x19/0x40
[  822.927049]  genl_rcv_msg+0xc6/0x170
[  822.930758]  netlink_rcv_skb+0x172/0x440
[  822.934807]  ? genl_family_rcv_msg+0x1120/0x1120
[  822.939637]  ? netlink_ack+0xbc0/0xbc0
[  822.943522]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  822.948701]  ? netlink_skb_destructor+0x210/0x210
[  822.953537]  genl_rcv+0x28/0x40
[  822.956808]  netlink_unicast+0x58b/0x740
[  822.960867]  ? netlink_attachskb+0x970/0x970
[  822.965262]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  822.970786]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  822.975792]  ? security_netlink_send+0x88/0xb0
[  822.980361]  netlink_sendmsg+0x9f0/0xfa0
[  822.984415]  ? netlink_unicast+0x740/0x740
[  822.988641]  ? security_socket_sendmsg+0x94/0xc0
[  822.993383]  ? netlink_unicast+0x740/0x740
[  822.997605]  sock_sendmsg+0xd5/0x120
[  823.001310]  ___sys_sendmsg+0x805/0x940
[  823.005279]  ? copy_msghdr_from_user+0x560/0x560
[  823.010037]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  823.015576]  ? proc_fail_nth_write+0x96/0x1f0
[  823.020067]  ? __fget_light+0x2ef/0x430
[  823.024068]  ? fget_raw+0x20/0x20
[  823.027507]  ? find_held_lock+0x36/0x1c0
[  823.031558]  ? kasan_check_write+0x14/0x20
[  823.035789]  ? wait_for_completion+0x870/0x870
[  823.040367]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  823.045900]  ? sockfd_lookup_light+0xc5/0x160
[  823.050385]  __sys_sendmsg+0x115/0x270
[  823.054262]  ? __ia32_sys_shutdown+0x80/0x80
[  823.058660]  ? __sb_end_write+0xac/0xe0
[  823.062627]  ? fput+0x130/0x1a0
[  823.065896]  ? ksys_write+0x1a6/0x250
[  823.069697]  __x64_sys_sendmsg+0x78/0xb0
[  823.073746]  do_syscall_64+0x1b1/0x800
[  823.077626]  ? finish_task_switch+0x1ca/0x840
[  823.082109]  ? syscall_return_slowpath+0x5c0/0x5c0
[  823.087033]  ? syscall_return_slowpath+0x30f/0x5c0
[  823.091958]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  823.097314]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  823.102147]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  823.107321] RIP: 0033:0x455a09
[  823.110497] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.118197] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  823.125451] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  823.132705] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  823.139970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
2033/05/18 03:45:16 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6fb8]}, 0x10)

2033/05/18 03:45:16 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"69703674e06c3000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  823.147225] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000a
[  823.167739] binder: 24060:24061 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:16 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  823.211480] QAT: Invalid ioctl
[  823.229198] binder: 24060:24061 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:17 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x730f]}, 0x10)

[  823.256164] QAT: Invalid ioctl
2033/05/18 03:45:17 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x4040, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1=0xe0000001}, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x4, {0x2, 0x4e24, @multicast2=0xe0000002}, 'nr0\x00'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x408000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:17 executing program 3 (fault-call:3 fault-nth:11):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  823.313907] binder: undelivered TRANSACTION_ERROR: 29189
[  823.400483] binder: 24095:24096 transaction failed 29189/-22, size 0-0 line 2856
[  823.428362] FAULT_INJECTION: forcing a failure.
[  823.428362] name failslab, interval 1, probability 0, space 0, times 0
[  823.439419] binder: 24095:24096 transaction failed 29189/-22, size 0-0 line 2856
[  823.439721] CPU: 1 PID: 24100 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  823.454402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  823.463756] Call Trace:
[  823.466361]  dump_stack+0x1b9/0x294
[  823.470088]  ? dump_stack_print_info.cold.2+0x52/0x52
[  823.475295]  ? __save_stack_trace+0x7e/0xd0
[  823.479635]  should_fail.cold.4+0xa/0x1a
[  823.483712]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  823.488831]  ? save_stack+0x43/0xd0
[  823.492478]  ? kasan_kmalloc+0xc4/0xe0
[  823.493253] binder: undelivered TRANSACTION_ERROR: 29189
[  823.496368]  ? __kmalloc_track_caller+0x14a/0x760
[  823.496384]  ? kvasprintf+0xa9/0x130
[  823.496396]  ? kasprintf+0xa2/0xc0
[  823.496415]  ? ieee80211_alloc_led_names+0x1ab/0x410
[  823.496429]  ? graph_lock+0x170/0x170
[  823.496447]  ? genl_rcv_msg+0xc6/0x170
[  823.526907]  ? netlink_rcv_skb+0x172/0x440
[  823.531129]  ? genl_rcv+0x28/0x40
[  823.534570]  ? netlink_unicast+0x58b/0x740
[  823.538793]  ? netlink_sendmsg+0x9f0/0xfa0
[  823.543017]  ? sock_sendmsg+0xd5/0x120
[  823.546900]  ? find_held_lock+0x36/0x1c0
[  823.550956]  ? __lock_is_held+0xb5/0x140
[  823.555029]  ? check_same_owner+0x320/0x320
[  823.559344]  ? rcu_note_context_switch+0x710/0x710
[  823.564267]  __should_failslab+0x124/0x180
[  823.568492]  should_failslab+0x9/0x14
[  823.572286]  __kmalloc_track_caller+0x2c4/0x760
[  823.576943]  ? pointer+0xa10/0xa10
[  823.580473]  ? print_usage_bug+0xc0/0xc0
[  823.584524]  ? kasprintf+0xa2/0xc0
[  823.588055]  kvasprintf+0xa9/0x130
[  823.591581]  ? bust_spinlocks+0xe0/0xe0
[  823.595541]  ? __lockdep_init_map+0x105/0x590
[  823.600035]  kasprintf+0xa2/0xc0
[  823.603388]  ? kvasprintf_const+0x190/0x190
[  823.607703]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  823.612713]  ieee80211_alloc_led_names+0x240/0x410
[  823.617642]  ieee80211_alloc_hw_nm+0x1aee/0x2080
[  823.622387]  ? ieee80211_restart_work+0x1a0/0x1a0
[  823.627220]  ? __lock_acquire+0x7f5/0x5140
[  823.631444]  ? zap_class+0x720/0x720
[  823.635153]  ? graph_lock+0x170/0x170
[  823.638940]  ? debug_check_no_locks_freed+0x310/0x310
[  823.644120]  ? print_usage_bug+0xc0/0xc0
[  823.648175]  ? print_usage_bug+0xc0/0xc0
[  823.652224]  ? find_held_lock+0x36/0x1c0
[  823.656288]  ? lock_downgrade+0x8e0/0x8e0
[  823.660437]  ? mark_held_locks+0xc9/0x160
[  823.664570]  ? kasan_check_read+0x11/0x20
[  823.668709]  ? __local_bh_enable_ip+0x161/0x230
[  823.673368]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  823.678457]  ? trace_hardirqs_on+0xd/0x10
[  823.682601]  ? __local_bh_enable_ip+0x161/0x230
[  823.687276]  mac80211_hwsim_new_radio+0x235/0x3410
[  823.692201]  ? graph_lock+0x170/0x170
[  823.695997]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  823.702136]  ? lock_release+0xa10/0xa10
[  823.706100]  ? check_same_owner+0x320/0x320
[  823.710414]  ? rcu_note_context_switch+0x710/0x710
[  823.715330]  ? __lock_acquire+0x7f5/0x5140
[  823.719563]  ? __might_sleep+0x95/0x190
[  823.723529]  ? kasan_check_write+0x14/0x20
[  823.727753]  ? __mutex_lock+0x7d9/0x17f0
[  823.731803]  ? genl_rcv_msg+0x13a/0x170
[  823.735766]  ? __lock_acquire+0x7f5/0x5140
[  823.739990]  ? mutex_trylock+0x2a0/0x2a0
[  823.744044]  ? perf_trace_lock+0xd6/0x900
[  823.748179]  ? graph_lock+0x170/0x170
[  823.751969]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  823.757152]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  823.762156]  ? validate_nla+0x2d9/0x7b0
[  823.766119]  hwsim_new_radio_nl+0x7b8/0xa60
[  823.770429]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  823.775616]  ? __netlink_ns_capable+0x100/0x130
[  823.780315]  genl_family_rcv_msg+0x889/0x1120
[  823.784806]  ? genl_rcv+0x40/0x40
[  823.788256]  ? lock_downgrade+0x8e0/0x8e0
[  823.792391]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  823.797402]  ? lock_acquire+0x1dc/0x520
[  823.801373]  ? genl_rcv+0x19/0x40
[  823.804827]  genl_rcv_msg+0xc6/0x170
[  823.808531]  netlink_rcv_skb+0x172/0x440
[  823.812582]  ? genl_family_rcv_msg+0x1120/0x1120
[  823.817352]  ? netlink_ack+0xbc0/0xbc0
[  823.821226]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  823.826589]  ? netlink_skb_destructor+0x210/0x210
[  823.831437]  genl_rcv+0x28/0x40
[  823.834800]  netlink_unicast+0x58b/0x740
[  823.838855]  ? netlink_attachskb+0x970/0x970
[  823.843340]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  823.848874]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  823.853879]  ? security_netlink_send+0x88/0xb0
[  823.858452]  netlink_sendmsg+0x9f0/0xfa0
[  823.862512]  ? netlink_unicast+0x740/0x740
[  823.866737]  ? security_socket_sendmsg+0x94/0xc0
[  823.871495]  ? netlink_unicast+0x740/0x740
[  823.875723]  sock_sendmsg+0xd5/0x120
[  823.879448]  ___sys_sendmsg+0x805/0x940
[  823.883429]  ? copy_msghdr_from_user+0x560/0x560
[  823.888275]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  823.893820]  ? proc_fail_nth_write+0x96/0x1f0
[  823.898308]  ? __fget_light+0x2ef/0x430
[  823.902272]  ? fget_raw+0x20/0x20
[  823.905812]  ? find_held_lock+0x36/0x1c0
[  823.909866]  ? kasan_check_write+0x14/0x20
[  823.914095]  ? wait_for_completion+0x870/0x870
[  823.918675]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  823.924200]  ? sockfd_lookup_light+0xc5/0x160
[  823.928683]  __sys_sendmsg+0x115/0x270
[  823.932565]  ? __ia32_sys_shutdown+0x80/0x80
[  823.936970]  ? __sb_end_write+0xac/0xe0
[  823.940934]  ? fput+0x130/0x1a0
[  823.944209]  ? ksys_write+0x1a6/0x250
[  823.948008]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  823.952851]  __x64_sys_sendmsg+0x78/0xb0
[  823.956905]  do_syscall_64+0x1b1/0x800
[  823.960793]  ? finish_task_switch+0x1ca/0x840
[  823.965279]  ? syscall_return_slowpath+0x5c0/0x5c0
[  823.970198]  ? syscall_return_slowpath+0x30f/0x5c0
[  823.975121]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  823.980479]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  823.985325]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  823.990500] RIP: 0033:0x455a09
[  823.993678] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.001376] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  824.008639] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  824.015895] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  824.023159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  824.030417] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000b
2033/05/18 03:45:17 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:17 executing program 3 (fault-call:3 fault-nth:12):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:17 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746ee03000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffffe00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:17 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf0ffffff, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:17 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000))
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:17 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x9f7e000000000000]}, 0x10)

[  824.154230] binder: 24121:24122 transaction failed 29189/-22, size 0-0 line 2856
[  824.175846] FAULT_INJECTION: forcing a failure.
[  824.175846] name failslab, interval 1, probability 0, space 0, times 0
[  824.187315] CPU: 1 PID: 24128 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  824.194603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
2033/05/18 03:45:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  824.197322] binder: 24121:24130 transaction failed 29189/-22, size 0-0 line 2856
[  824.203972] Call Trace:
[  824.204001]  dump_stack+0x1b9/0x294
[  824.204024]  ? dump_stack_print_info.cold.2+0x52/0x52
[  824.204045]  ? ieee80211_roc_setup+0x3b7/0x510
[  824.204067]  should_fail.cold.4+0xa/0x1a
[  824.204088]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  824.240644]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  824.245683]  ? graph_lock+0x170/0x170
[  824.249508]  ? ieee80211_alloc_led_names+0x240/0x410
[  824.254637]  ? find_held_lock+0x36/0x1c0
[  824.258716]  ? __lock_is_held+0xb5/0x140
[  824.262801]  ? check_same_owner+0x320/0x320
[  824.267135]  ? graph_lock+0x170/0x170
[  824.270955]  ? rcu_note_context_switch+0x710/0x710
[  824.275900]  ? print_usage_bug+0xc0/0xc0
[  824.279980]  __should_failslab+0x124/0x180
[  824.284230]  should_failslab+0x9/0x14
[  824.288040]  kmem_cache_alloc_trace+0x2cb/0x780
[  824.292736]  ? find_held_lock+0x36/0x1c0
[  824.296822]  device_create_groups_vargs+0xa7/0x270
2033/05/18 03:45:18 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x404000, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x7fff, 0x4)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x0, 0x1, 0x9, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20)
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000280)={0x6591, {{0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, [], 0x1a}, 0x1b3d}}, 0x1, 0x8, [{{0xa, 0x4e21, 0xfffffffffffffffe, @local={0xfe, 0x80, [], 0xaa}, 0x6}}, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x5}}, {{0xa, 0x4e21, 0x7fffffff, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x6601}}, {{0xa, 0x4e24, 0x7f, @ipv4={[], [0xff, 0xff], @rand_addr=0x8001}, 0x8}}, {{0xa, 0x4e21, 0xf000000000000000, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}}, {{0xa, 0x4e21, 0x2b20, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, {{0xa, 0x4e24, 0x1000, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x7}}, {{0xa, 0x4e21, 0x1f, @loopback={0x0, 0x1}, 0x9}}]}, 0x490)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163482d"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  824.301390] binder: undelivered TRANSACTION_ERROR: 29189
[  824.301773]  device_create+0xd3/0x100
[  824.301794]  ? device_create_vargs+0x60/0x60
[  824.315434]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  824.320544]  ? trace_hardirqs_on+0xd/0x10
[  824.324701]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  824.329641]  ? graph_lock+0x170/0x170
[  824.333532]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  824.339694]  ? lock_release+0xa10/0xa10
[  824.343687]  ? check_same_owner+0x320/0x320
[  824.348019]  ? rcu_note_context_switch+0x710/0x710
[  824.352966]  ? __lock_acquire+0x7f5/0x5140
[  824.357212]  ? __might_sleep+0x95/0x190
[  824.361201]  ? kasan_check_write+0x14/0x20
[  824.365455]  ? __mutex_lock+0x7d9/0x17f0
[  824.369527]  ? genl_rcv_msg+0x13a/0x170
[  824.371724] binder: 24138:24140 unknown command 759718673
[  824.373505]  ? __lock_acquire+0x7f5/0x5140
[  824.373525]  ? mutex_trylock+0x2a0/0x2a0
[  824.373537]  ? perf_trace_lock+0xd6/0x900
[  824.373553]  ? graph_lock+0x170/0x170
[  824.395292]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  824.400504]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  824.405526]  ? validate_nla+0x2d9/0x7b0
[  824.409511]  hwsim_new_radio_nl+0x7b8/0xa60
[  824.411917] binder: 24138:24140 ioctl c0306201 20007000 returned -22
[  824.413834]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  824.413858]  ? __netlink_ns_capable+0x100/0x130
[  824.413881]  genl_family_rcv_msg+0x889/0x1120
[  824.413909]  ? genl_rcv+0x40/0x40
[  824.438138]  ? lock_downgrade+0x8e0/0x8e0
[  824.442280]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  824.447295]  ? lock_acquire+0x1dc/0x520
[  824.451260]  ? genl_rcv+0x19/0x40
[  824.454715]  genl_rcv_msg+0xc6/0x170
[  824.458426]  netlink_rcv_skb+0x172/0x440
[  824.462476]  ? genl_family_rcv_msg+0x1120/0x1120
[  824.467222]  ? netlink_ack+0xbc0/0xbc0
[  824.471106]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  824.476284]  ? netlink_skb_destructor+0x210/0x210
[  824.481122]  genl_rcv+0x28/0x40
[  824.484389]  netlink_unicast+0x58b/0x740
[  824.488449]  ? netlink_attachskb+0x970/0x970
[  824.492854]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  824.498378]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  824.503399]  ? security_netlink_send+0x88/0xb0
[  824.507976]  netlink_sendmsg+0x9f0/0xfa0
[  824.512040]  ? netlink_unicast+0x740/0x740
[  824.516274]  ? security_socket_sendmsg+0x94/0xc0
[  824.521025]  ? netlink_unicast+0x740/0x740
[  824.525255]  sock_sendmsg+0xd5/0x120
[  824.528961]  ___sys_sendmsg+0x805/0x940
[  824.532929]  ? copy_msghdr_from_user+0x560/0x560
[  824.537683]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  824.543209]  ? proc_fail_nth_write+0x96/0x1f0
[  824.547698]  ? __fget_light+0x2ef/0x430
[  824.551665]  ? fget_raw+0x20/0x20
[  824.555107]  ? find_held_lock+0x36/0x1c0
[  824.559161]  ? kasan_check_write+0x14/0x20
[  824.563391]  ? wait_for_completion+0x870/0x870
[  824.567973]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  824.573499]  ? sockfd_lookup_light+0xc5/0x160
[  824.577999]  __sys_sendmsg+0x115/0x270
[  824.581883]  ? __ia32_sys_shutdown+0x80/0x80
[  824.586282]  ? __sb_end_write+0xac/0xe0
[  824.590254]  ? fput+0x130/0x1a0
[  824.593522]  ? ksys_write+0x1a6/0x250
[  824.597330]  __x64_sys_sendmsg+0x78/0xb0
[  824.601385]  do_syscall_64+0x1b1/0x800
[  824.605263]  ? finish_task_switch+0x1ca/0x840
[  824.609834]  ? syscall_return_slowpath+0x5c0/0x5c0
[  824.614755]  ? syscall_return_slowpath+0x30f/0x5c0
[  824.619675]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  824.625065]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  824.629900]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  824.635079] RIP: 0033:0x455a09
[  824.638257] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.645959] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  824.653221] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  824.660476] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  824.667737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  824.674994] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000c
2033/05/18 03:45:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6ce000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:18 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x700]}, 0x10)

[  824.702858] binder: 24138:24140 ioctl c0306201 20000240 returned -11
[  824.722235] binder: 24138:24145 unknown command 759718673
[  824.764941] binder: 24138:24145 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:18 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xcf8f]}, 0x10)

2033/05/18 03:45:18 executing program 3 (fault-call:3 fault-nth:13):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:18 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840605332d2684f8dbbceb11caf4f488d066ddac161929c9396ca3353dda3dfd500930479a0c4ddb2adc1d48e8e9885ab03006e63c55bc3a00244718c2776d09c090087bb5b000000000000008000000000f80200dae0b2b68d99c7e340a05c31d76aed55afa9062502ed197b91cb94dae330e4cce370f351b4f80a"], 0x0, 0x0, &(0x7f0000002000)})
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0))
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x1, 0xff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)=0x4, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x0, 0x7fff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20)
ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000080)={0x5, 0x62b4, 0x2, 0x100, 0x47f})

2033/05/18 03:45:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:18 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xfeffffff, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:18 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:18 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {<r3=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2})
r4 = gettid()
perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x3, 0x0, 0x7ff, 0x3, 0x0, 0x1, 0x100, 0x3, 0x35, 0xfffffffffffff001, 0x4, 0x8654, 0xc743, 0x8, 0x29b48a96, 0x8001, 0x2, 0x9, 0x5, 0x1, 0x5, 0x63bd6978, 0xec9, 0x8001, 0x2, 0x7fff, 0xfffffffffffffffb, 0xd1, 0x601, 0x5, 0x400, 0xffff, 0x1, 0x1, 0x10002, 0x6, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xb}, 0x2, 0x297, 0x1f, 0x5, 0x0, 0x3, 0x8}, r4, 0x10, r2, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x2, @empty, 0x6}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0xb}, 0x6b}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e23, @rand_addr=0x4c}], 0xfffffef8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  825.095556] binder: 24172:24173 got transaction to invalid handle
[  825.101925] binder: 24172:24173 transaction failed 29201/-22, size -5930433922717907821-264451893404554433 line 2856
[  825.121602] FAULT_INJECTION: forcing a failure.
[  825.121602] name failslab, interval 1, probability 0, space 0, times 0
[  825.132937] CPU: 1 PID: 24180 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  825.140221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  825.149583] Call Trace:
[  825.152192]  dump_stack+0x1b9/0x294
[  825.155839]  ? dump_stack_print_info.cold.2+0x52/0x52
[  825.158237] binder: 24172:24173 got transaction to invalid handle
[  825.161048]  should_fail.cold.4+0xa/0x1a
[  825.161071]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  825.161088]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  825.161106]  ? __lockdep_init_map+0x105/0x590
[  825.167362] binder: 24172:24173 transaction failed 29201/-22, size -5930433922717907821-264451893404554433 line 2856
[  825.171394]  ? graph_lock+0x170/0x170
[  825.171417]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  825.171440]  ? put_dec_trunc8+0x273/0x300
[  825.210114]  ? find_held_lock+0x36/0x1c0
[  825.214194]  ? __lock_is_held+0xb5/0x140
[  825.216273] binder: undelivered TRANSACTION_ERROR: 29201
[  825.218371]  ? should_remove_suid+0xe0/0x130
[  825.218404]  ? check_same_owner+0x320/0x320
[  825.218421]  ? device_pm_sleep_init+0xe8/0x200
[  825.218441]  ? rcu_note_context_switch+0x710/0x710
[  825.218459]  __should_failslab+0x124/0x180
[  825.246545]  should_failslab+0x9/0x14
[  825.250372]  __kmalloc_track_caller+0x2c4/0x760
[  825.255056]  ? pointer+0xa10/0xa10
[  825.258619]  ? kvasprintf_const+0x67/0x190
[  825.262867]  kvasprintf+0xa9/0x130
[  825.266415]  ? bust_spinlocks+0xe0/0xe0
[  825.270402]  ? rcu_read_lock_sched_held+0x108/0x120
[  825.275427]  kvasprintf_const+0x67/0x190
[  825.279496]  kobject_set_name_vargs+0x5b/0x150
[  825.284175]  device_create_groups_vargs+0x1ce/0x270
[  825.289202]  device_create+0xd3/0x100
[  825.293013]  ? device_create_vargs+0x60/0x60
[  825.293458] binder: 24195:24196 transaction failed 29189/-22, size 0-0 line 2856
[  825.297429]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  825.297447]  ? trace_hardirqs_on+0xd/0x10
[  825.297467]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  825.297483]  ? graph_lock+0x170/0x170
[  825.297508]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  825.297524]  ? lock_release+0xa10/0xa10
[  825.297545]  ? check_same_owner+0x320/0x320
[  825.337412]  ? rcu_note_context_switch+0x710/0x710
[  825.342357]  ? __lock_acquire+0x7f5/0x5140
[  825.343543] binder: 24195:24199 transaction failed 29189/-22, size 0-0 line 2856
[  825.346599]  ? __might_sleep+0x95/0x190
[  825.346621]  ? kasan_check_write+0x14/0x20
[  825.346639]  ? __mutex_lock+0x7d9/0x17f0
[  825.346659]  ? genl_rcv_msg+0x13a/0x170
[  825.346675]  ? __lock_acquire+0x7f5/0x5140
[  825.346693]  ? mutex_trylock+0x2a0/0x2a0
[  825.378676]  ? perf_trace_lock+0xd6/0x900
[  825.382830]  ? graph_lock+0x170/0x170
[  825.386643]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  825.391868]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  825.396902]  ? validate_nla+0x2d9/0x7b0
[  825.400886]  hwsim_new_radio_nl+0x7b8/0xa60
[  825.405215]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  825.410420]  ? __netlink_ns_capable+0x100/0x130
[  825.415107]  genl_family_rcv_msg+0x889/0x1120
[  825.419622]  ? genl_rcv+0x40/0x40
[  825.423084]  ? lock_downgrade+0x8e0/0x8e0
[  825.427238]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  825.432269]  ? lock_acquire+0x1dc/0x520
[  825.436247]  ? genl_rcv+0x19/0x40
[  825.439752]  genl_rcv_msg+0xc6/0x170
[  825.443468]  netlink_rcv_skb+0x172/0x440
[  825.447533]  ? genl_family_rcv_msg+0x1120/0x1120
[  825.451571] binder: undelivered TRANSACTION_ERROR: 29189
[  825.452291]  ? netlink_ack+0xbc0/0xbc0
[  825.452308]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  825.452325]  ? netlink_skb_destructor+0x210/0x210
[  825.471650]  genl_rcv+0x28/0x40
[  825.474938]  netlink_unicast+0x58b/0x740
[  825.479009]  ? netlink_attachskb+0x970/0x970
[  825.483430]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  825.488972]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  825.493981]  ? security_netlink_send+0x88/0xb0
[  825.498555]  netlink_sendmsg+0x9f0/0xfa0
[  825.502613]  ? netlink_unicast+0x740/0x740
[  825.506859]  ? security_socket_sendmsg+0x94/0xc0
[  825.511604]  ? netlink_unicast+0x740/0x740
[  825.515830]  sock_sendmsg+0xd5/0x120
[  825.519533]  ___sys_sendmsg+0x805/0x940
[  825.523500]  ? copy_msghdr_from_user+0x560/0x560
[  825.528256]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  825.533781]  ? proc_fail_nth_write+0x96/0x1f0
[  825.538266]  ? __fget_light+0x2ef/0x430
[  825.542230]  ? fget_raw+0x20/0x20
[  825.545669]  ? find_held_lock+0x36/0x1c0
[  825.549724]  ? kasan_check_write+0x14/0x20
[  825.553954]  ? wait_for_completion+0x870/0x870
[  825.558534]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  825.564057]  ? sockfd_lookup_light+0xc5/0x160
[  825.568542]  __sys_sendmsg+0x115/0x270
[  825.572416]  ? __ia32_sys_shutdown+0x80/0x80
[  825.576815]  ? __sb_end_write+0xac/0xe0
[  825.580779]  ? fput+0x130/0x1a0
[  825.584049]  ? ksys_write+0x1a6/0x250
[  825.587851]  __x64_sys_sendmsg+0x78/0xb0
[  825.591903]  do_syscall_64+0x1b1/0x800
[  825.595779]  ? finish_task_switch+0x1ca/0x840
[  825.600263]  ? syscall_return_slowpath+0x5c0/0x5c0
[  825.605181]  ? syscall_return_slowpath+0x30f/0x5c0
[  825.610104]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  825.615456]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  825.620293]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  825.625469] RIP: 0033:0x455a09
[  825.628652] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  825.636347] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
2033/05/18 03:45:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:18 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x280240, 0x0)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040))
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/54)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:19 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:19 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x42000, 0x0)
epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x2)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x7ff, 0x480, &(0x7f0000000040)="2ce4ff23305b13a895ffb5565cb4840931680211b3b4f38a230c72011c85887cc2e422eb5ffc215375ebfe7f416067962e22e96d6d7735a33087b18224f20f655381e0cd6d8fff6acd01cc2ecb126eb059a0cba2797107b37a2d857b0684b457898fd0ffa8ffd326f744097bd9ec2de4185deec3641a230aa3aa2b753985d1f0cd7dc598476a1c6aeb8e40256b", &(0x7f0000000100)="a4ee0bc03cc3b2fec96eb3af332fb8761b628aec8ff951ef801657", 0x8d, 0x1b})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)

[  825.643611] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  825.650874] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  825.658130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  825.665383] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000d
2033/05/18 03:45:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:19 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x221f]}, 0x10)

[  825.719667] binder: 24211:24214 unknown command 0
[  825.764936] binder: 24211:24214 ioctl c0306201 20007000 returned -22
[  825.802486] binder: 24211:24214 ioctl c0306201 20000240 returned -11
[  825.821783] binder: 24211:24214 unknown command 0
[  825.832323] binder: 24211:24214 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:19 executing program 3 (fault-call:3 fault-nth:14):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:19 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={<r2=>0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x2fe, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@flat={0x77682a85, 0x101, r2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x0, 0x3, 0x3b}], &(0x7f0000000100)=[0x38, 0x28]}}, @free_buffer={0x40086303, r2}, @request_death={0x400c630e, 0x4, 0x2}, @decrefs={0x40046307}], 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:19 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xef5b000000000000]}, 0x10)

2033/05/18 03:45:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:19 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]})
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x3f000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:19 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  826.085252] FAULT_INJECTION: forcing a failure.
[  826.085252] name failslab, interval 1, probability 0, space 0, times 0
[  826.085879] binder: 24247:24248 transaction failed 29189/-22, size 0-0 line 2856
[  826.096598] CPU: 1 PID: 24240 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  826.111362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  826.120733] Call Trace:
[  826.123337]  dump_stack+0x1b9/0x294
[  826.126986]  ? dump_stack_print_info.cold.2+0x52/0x52
[  826.132280]  ? finish_task_switch+0x1ca/0x840
[  826.136785]  ? finish_task_switch+0x182/0x840
[  826.141307]  should_fail.cold.4+0xa/0x1a
[  826.142432] binder: 24247:24248 transaction failed 29189/-22, size 0-0 line 2856
[  826.145374]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  826.145402]  ? __schedule+0x809/0x1e30
[  826.145419]  ? save_stack+0xa9/0xd0
[  826.145438]  ? __sched_text_start+0x8/0x8
[  826.158179] Unknown ioctl -1073172856
[  826.161931]  ? find_held_lock+0x36/0x1c0
[  826.161952]  ? __lock_is_held+0xb5/0x140
[  826.161978]  ? check_same_owner+0x320/0x320
[  826.161999]  ? put_dec+0xf0/0xf0
[  826.189316]  ? print_usage_bug+0xc0/0xc0
[  826.193377]  __should_failslab+0x124/0x180
[  826.197606]  should_failslab+0x9/0x14
[  826.201398]  kmem_cache_alloc_trace+0x2cb/0x780
[  826.206060]  ? refcount_add_not_zero+0x320/0x320
[  826.210829]  device_private_init+0x98/0x230
[  826.215485]  ? virtual_device_parent+0x60/0x60
[  826.220050]  ? retint_kernel+0x10/0x10
[  826.223931]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  826.231333]  ? refcount_inc+0x29/0x70
[  826.235129]  device_add+0xe98/0x16d0
[  826.238834]  ? retint_kernel+0x10/0x10
[  826.242708]  ? device_private_init+0x230/0x230
[  826.247282]  ? device_create_groups_vargs+0x1f7/0x270
[  826.252461]  device_create_groups_vargs+0x1ff/0x270
[  826.257470]  device_create+0xd3/0x100
[  826.261262]  ? device_create_vargs+0x60/0x60
[  826.265666]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  826.270755]  ? trace_hardirqs_on+0xd/0x10
[  826.274895]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  826.279811]  ? graph_lock+0x170/0x170
[  826.283671]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  826.289817]  ? lock_release+0xa10/0xa10
[  826.293782]  ? check_same_owner+0x320/0x320
[  826.298095]  ? rcu_note_context_switch+0x710/0x710
[  826.303016]  ? __lock_acquire+0x7f5/0x5140
[  826.307289]  ? __might_sleep+0x95/0x190
[  826.311264]  ? kasan_check_write+0x14/0x20
[  826.315497]  ? __mutex_lock+0x7d9/0x17f0
[  826.319550]  ? genl_rcv_msg+0x13a/0x170
[  826.323512]  ? __lock_acquire+0x7f5/0x5140
[  826.327821]  ? mutex_trylock+0x2a0/0x2a0
[  826.331888]  ? graph_lock+0x170/0x170
[  826.335692]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  826.340874]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  826.345882]  ? validate_nla+0x2d9/0x7b0
[  826.349857]  hwsim_new_radio_nl+0x7b8/0xa60
[  826.354178]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  826.359359]  ? __netlink_ns_capable+0x100/0x130
[  826.364031]  genl_family_rcv_msg+0x889/0x1120
[  826.368522]  ? genl_rcv+0x40/0x40
[  826.371970]  ? lock_downgrade+0x8e0/0x8e0
[  826.376110]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  826.381119]  ? kasan_check_read+0x11/0x20
[  826.385259]  ? lock_acquire+0x1dc/0x520
[  826.389219]  ? genl_rcv+0x19/0x40
[  826.392681]  genl_rcv_msg+0xc6/0x170
[  826.396400]  netlink_rcv_skb+0x172/0x440
[  826.400462]  ? genl_family_rcv_msg+0x1120/0x1120
[  826.405299]  ? netlink_ack+0xbc0/0xbc0
[  826.409180]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  826.414363]  ? netlink_skb_destructor+0x210/0x210
[  826.419198]  genl_rcv+0x28/0x40
[  826.422467]  netlink_unicast+0x58b/0x740
[  826.426522]  ? netlink_attachskb+0x970/0x970
[  826.430926]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  826.436451]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  826.441457]  ? security_netlink_send+0x88/0xb0
[  826.446040]  netlink_sendmsg+0x9f0/0xfa0
[  826.450098]  ? netlink_unicast+0x740/0x740
[  826.454326]  ? security_socket_sendmsg+0x94/0xc0
[  826.459069]  ? netlink_unicast+0x740/0x740
[  826.463295]  sock_sendmsg+0xd5/0x120
[  826.466999]  ___sys_sendmsg+0x805/0x940
[  826.470972]  ? copy_msghdr_from_user+0x560/0x560
[  826.475728]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  826.481255]  ? proc_fail_nth_write+0x96/0x1f0
[  826.485744]  ? __fget_light+0x2ef/0x430
[  826.489709]  ? fget_raw+0x20/0x20
[  826.493148]  ? find_held_lock+0x36/0x1c0
[  826.497208]  ? kasan_check_write+0x14/0x20
[  826.501437]  ? wait_for_completion+0x870/0x870
[  826.506022]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  826.511551]  ? sockfd_lookup_light+0xc5/0x160
[  826.516038]  __sys_sendmsg+0x115/0x270
[  826.519914]  ? __ia32_sys_shutdown+0x80/0x80
[  826.524308]  ? __sb_end_write+0xac/0xe0
[  826.528271]  ? fput+0x130/0x1a0
[  826.531539]  ? ksys_write+0x1a6/0x250
[  826.535340]  __x64_sys_sendmsg+0x78/0xb0
[  826.539392]  do_syscall_64+0x1b1/0x800
[  826.543269]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  826.548116]  ? syscall_return_slowpath+0x5c0/0x5c0
[  826.553037]  ? syscall_return_slowpath+0x30f/0x5c0
[  826.557959]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  826.563314]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  826.568148]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  826.573323] RIP: 0033:0x455a09
[  826.576499] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
2033/05/18 03:45:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000ffffffc000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  826.584203] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  826.591459] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  826.598713] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  826.605967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  826.613221] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000e
[  826.671124] binder: undelivered TRANSACTION_ERROR: 29189
[  826.692864] Unknown ioctl -1073172856
2033/05/18 03:45:20 executing program 0:
getpid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
setpgid(r1, r0)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000040)="0003000000d82c991f09705cc8938a")
r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:20 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe7e00000]}, 0x10)

2033/05/18 03:45:20 executing program 3 (fault-call:3 fault-nth:15):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendto(r1, &(0x7f00000003c0)="9fe97185e64f9e8608ff466665232466c4ca2eefec9e18ab3fd1aa4d7ff8e8cdf8e099da50", 0x25, 0x0, &(0x7f0000000400)=@rc={0x1f, {0x2, 0x5, 0x8000, 0x3, 0x7, 0xfffffffffffffffe}, 0x8}, 0x80)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={<r2=>0x0, 0x3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r3=>r2, 0xb0, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xf63, @loopback={0x0, 0x1}, 0xb80}, @in6={0xa, 0x4e24, 0xffffffff, @loopback={0x0, 0x1}, 0x1}, @in={0x2, 0x4e24, @rand_addr=0x800}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x80, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in6={0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x80000001}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f0000000380)=0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}], 0x17)
pipe2(&(0x7f0000000480)={<r5=>0xffffffffffffffff}, 0x4000)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000004c0)={r3, 0xc, "f086d1d173fdaa835c7b34c7"}, &(0x7f0000000500)=0x14)
r6 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x9, 0x781, 0x6, "5510153b65c891a5a9234b21d0bd13c5e199e47786dae6100b98db777f2c696411d9ee82dcc68ea593b818d43c51b4e20b8dc8fd3218c836fa35d2bc5f25f396e0f04cc953cc3d880f50c8e0a65d1c03"}, 0xd8)
sendto$inet6(r4, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000000ffffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:20 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x9703, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:20 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  827.098562] FAULT_INJECTION: forcing a failure.
[  827.098562] name failslab, interval 1, probability 0, space 0, times 0
[  827.108900] binder: 24284:24291 transaction failed 29189/-22, size 0-0 line 2856
[  827.109939] CPU: 1 PID: 24287 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  827.124844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  827.134382] Call Trace:
[  827.135548] binder: 24284:24291 transaction failed 29189/-22, size 0-0 line 2856
[  827.136983]  dump_stack+0x1b9/0x294
2033/05/18 03:45:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  827.137008]  ? dump_stack_print_info.cold.2+0x52/0x52
[  827.137025]  ? perf_trace_lock+0xd6/0x900
[  827.137052]  should_fail.cold.4+0xa/0x1a
[  827.137074]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  827.166812]  ? graph_lock+0x170/0x170
[  827.170643]  ? find_held_lock+0x36/0x1c0
[  827.174726]  ? __lock_is_held+0xb5/0x140
[  827.178809]  ? splice_from_pipe+0x310/0x320
[  827.183159]  ? check_same_owner+0x320/0x320
[  827.187504]  ? rcu_note_context_switch+0x710/0x710
[  827.192446]  ? perf_trace_lock+0xd6/0x900
2033/05/18 03:45:20 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x2, &(0x7f0000000080)="0001000000000000000970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000040)=0x81, 0x8)
socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x80)

2033/05/18 03:45:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  827.196603]  __should_failslab+0x124/0x180
[  827.200855]  should_failslab+0x9/0x14
[  827.204773]  __kmalloc_track_caller+0x2c4/0x760
[  827.205492] binder: undelivered TRANSACTION_ERROR: 29189
[  827.209467]  ? debug_check_no_locks_freed+0x310/0x310
[  827.209484]  ? kasan_check_write+0x14/0x20
[  827.209502]  ? __mutex_lock+0x7d9/0x17f0
[  827.209520]  ? kstrdup_const+0x66/0x80
[  827.209539]  kstrdup+0x39/0x70
[  827.209557]  kstrdup_const+0x66/0x80
[  827.209576]  __kernfs_new_node+0xa8/0x580
[  827.209593]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  827.209615]  ? lock_downgrade+0x8e0/0x8e0
[  827.252782]  kernfs_new_node+0x80/0xf0
[  827.256684]  kernfs_create_dir_ns+0x3d/0x140
[  827.261113]  sysfs_create_dir_ns+0xbe/0x1d0
[  827.265453]  kobject_add_internal+0x354/0xac0
[  827.266513] binder: 24300:24301 transaction failed 29189/-22, size 0-0 line 2856
[  827.269960]  ? kobj_ns_type_registered+0x60/0x60
[  827.269980]  ? lock_downgrade+0x8e0/0x8e0
[  827.270002]  ? refcount_add_not_zero+0x320/0x320
[  827.270024]  ? kasan_check_read+0x11/0x20
[  827.270042]  kobject_add+0x13a/0x190
[  827.270056]  ? kset_create_and_add+0x190/0x190
[  827.270076]  ? mutex_unlock+0xd/0x10
[  827.307342]  device_add+0x3a5/0x16d0
[  827.311077]  ? device_private_init+0x230/0x230
[  827.315668]  ? kfree+0x1e9/0x260
[  827.319044]  ? kfree_const+0x5e/0x70
[  827.322783]  device_create_groups_vargs+0x1ff/0x270
[  827.327557] binder: 24300:24301 transaction failed 29189/-22, size 0-0 line 2856
[  827.327801]  device_create+0xd3/0x100
[  827.339205]  ? device_create_vargs+0x60/0x60
[  827.343623]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
2033/05/18 03:45:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  827.348728]  ? trace_hardirqs_on+0xd/0x10
[  827.352892]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  827.357828]  ? graph_lock+0x170/0x170
[  827.361654]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  827.367815]  ? lock_release+0xa10/0xa10
[  827.371803]  ? check_same_owner+0x320/0x320
[  827.376139]  ? rcu_note_context_switch+0x710/0x710
[  827.381086]  ? __lock_acquire+0x7f5/0x5140
[  827.385331]  ? __might_sleep+0x95/0x190
[  827.389320]  ? kasan_check_write+0x14/0x20
[  827.393550]  ? __mutex_lock+0x7d9/0x17f0
[  827.397612]  ? genl_rcv_msg+0x13a/0x170
[  827.401581]  ? __lock_acquire+0x7f5/0x5140
[  827.405807]  ? mutex_trylock+0x2a0/0x2a0
[  827.409865]  ? perf_trace_lock+0xd6/0x900
[  827.414002]  ? graph_lock+0x170/0x170
[  827.417806]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  827.422986]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  827.428018]  ? validate_nla+0x2d9/0x7b0
[  827.431992]  hwsim_new_radio_nl+0x7b8/0xa60
[  827.436309]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  827.441493]  ? __netlink_ns_capable+0x100/0x130
[  827.446165]  genl_family_rcv_msg+0x889/0x1120
[  827.450665]  ? genl_rcv+0x40/0x40
[  827.454107]  ? lock_downgrade+0x8e0/0x8e0
[  827.458246]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  827.463258]  ? lock_acquire+0x1dc/0x520
[  827.467226]  ? genl_rcv+0x19/0x40
[  827.470688]  genl_rcv_msg+0xc6/0x170
[  827.474409]  netlink_rcv_skb+0x172/0x440
[  827.478460]  ? genl_family_rcv_msg+0x1120/0x1120
[  827.483207]  ? netlink_ack+0xbc0/0xbc0
[  827.487081]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  827.492261]  ? netlink_skb_destructor+0x210/0x210
[  827.497096]  genl_rcv+0x28/0x40
[  827.500372]  netlink_unicast+0x58b/0x740
[  827.504432]  ? netlink_attachskb+0x970/0x970
[  827.508831]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  827.514358]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  827.519365]  ? security_netlink_send+0x88/0xb0
[  827.523946]  netlink_sendmsg+0x9f0/0xfa0
[  827.528006]  ? netlink_unicast+0x740/0x740
[  827.532239]  ? security_socket_sendmsg+0x94/0xc0
[  827.536992]  ? netlink_unicast+0x740/0x740
[  827.541219]  sock_sendmsg+0xd5/0x120
[  827.544932]  ___sys_sendmsg+0x805/0x940
[  827.548902]  ? copy_msghdr_from_user+0x560/0x560
[  827.553657]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  827.559183]  ? proc_fail_nth_write+0x96/0x1f0
[  827.563671]  ? __fget_light+0x2ef/0x430
[  827.567638]  ? fget_raw+0x20/0x20
[  827.571079]  ? find_held_lock+0x36/0x1c0
[  827.575131]  ? kasan_check_write+0x14/0x20
[  827.579377]  ? wait_for_completion+0x870/0x870
[  827.583966]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  827.589493]  ? sockfd_lookup_light+0xc5/0x160
[  827.593985]  __sys_sendmsg+0x115/0x270
[  827.597865]  ? __ia32_sys_shutdown+0x80/0x80
[  827.602277]  ? __sb_end_write+0xac/0xe0
[  827.606424]  ? fput+0x130/0x1a0
[  827.609698]  ? ksys_write+0x1a6/0x250
[  827.613585]  __x64_sys_sendmsg+0x78/0xb0
[  827.617660]  do_syscall_64+0x1b1/0x800
[  827.621535]  ? finish_task_switch+0x1ca/0x840
[  827.626026]  ? syscall_return_slowpath+0x5c0/0x5c0
[  827.630946]  ? syscall_return_slowpath+0x30f/0x5c0
[  827.635880]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  827.641235]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  827.646070]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  827.651246] RIP: 0033:0x455a09
[  827.654419] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  827.662117] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  827.669375] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  827.676721] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  827.683978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  827.691234] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000000f
[  827.698688] kobject_add_internal failed for hwsim85 (error: -12 parent: mac80211_hwsim)
2033/05/18 03:45:21 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x242000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl(r0, 0x8912, &(0x7f0000000240)="0047010100000000000070")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a6, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES32], 0x33, 0x0, &(0x7f0000000000)="d27a8a689a7c357dd2520a7b8849548fbe28e01372c5297539342a1e588b3e21217b8b54d5c751298e54431aa4e7a1511614cd"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:21 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ftruncate(r0, 0x8000)
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x208000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x1d3, 0x2, 0x9})
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000028c0), &(0x7f0000002900)=0x8)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
setsockopt$inet6_dccp_buf(r3, 0x21, 0x8f, &(0x7f00000001c0)="a38db798577dfd89df1280be8ad9aed7828c0f5894ba75d6f1171288c2c4adbcfc0b846047213dc17675ae5f8576644cf86ff6ff79c10be42c303cdf1e1583dc8ace559e91aa615e567010ca1d527c3c7af3d9777e735cc9e6757b44bb9a54a6942d8d2592cdb04f2d2d0e26fed09c8202f60211b3aaa7a45037d8a94c8516754eeb5e18e631d5a478bdd08662acf08e59ad270aa8c3c845b80e3760b11dfb1eac49f32913e86d54224927b6e0f7ac1cdb6445979f2c186d89f7b3bb3cee5eee0d0161b57fc018dfc104f0b92fabbf549d0dd9a68613e9b30a0830a19efd555628e611245abf2e6064475e507a99628f7dcc788efc5bbc9f7f5ffba9c3cc96fd9bd54a457bf1926a1e61f13110cc9656879682a7b9efff4edf4cc76a2374ce0e0c3545cbe3abc0ed40bd4bf0cf0287f917e9d49c951afa584363fef08ab2f9a9fb1cd0c6a5dcbd15833d235e1d63f5c01b73679d25efebc6f49af1cb2dc7b362159848a7b4baf260b3096401c9c09bc5d9c512018a5b3bf7128fa5e39d320b5bc4f80eb44467b2cc443aa85e8f9b239c7d4e31c47d09553c6842ecbf7301c59bce2a57748aa1ac963e99a711b1832c86f8e82809849f36ec9b8802a7acf64ec1fae748e73cd5eff168e1f450a106f187f0f32c703512229a4a7fd5f7009ab84aabeba2d78d32e8806390d23d9125cf26c926909480d5f3f5ab5499b06ade5cf297c2b6c19bdd1bb62022d4b30d7c07dbff2b61737e6a67cd070a5314e014a1c489d10092f96473119888a8fd69e08c3681ed71bef65c3bd8041b7e4d3890bf3918658234f8fc61010675fbd068f1015f6ef7b30d5a36c12cac73fccbfb705a984dd30cbf1a2278cbd974587ba5db9e35ee25f0dd622a91e377c59126c6777d98d05d255923c71db16dc1ef2b59017e03cbbbf88775504bdefd811ac7741378ae6bd2ecc36fdf68acad780c0912ef3e3f8ea7a1d6e8e66a930bb9dd62ac052ac0b4850dbbd635ee641aaaae0077497850b8fcf9fb92e37a4029408b40d6b87c3f724e0b13a20ab79a581a0638a4f02911f7d2f54b9b5677a08e9bf1845a8d447b70bc50a47cee29163fd20a7aa716fb3757dc5956edb44aa5add4dd10a16b6b15dd60e1e133964a28d1f8c482bf9f693ed1627886a6e3177e19c92947fabf36b51d9211cb7e25bda01f636cf9e69a1f3c0591f37f8fb59ce160021fbf9cfeef9d35b83d2effeca1e08e9ea40c9792c7e22ecf7ac5ae1a705817a1df7cf073eaaa6a33f0d3882217d1a0c2b661284d709481a4fabb741d1f60146cb279de53ab7a1f9c819e643365cf1c21df372a69d39322d27011b25ba65c469e433ad0c65153d8d64f5690da461d9c6fbba72248cb0486c6879716112d01f4c08d4c3282a43c49c6b03e6244afbe7ad29f1bdcf954fa8da413881cf8471fdc44da7939698cf73c4f4780ec47ecb63935ada20886143c6498c5d443b3dac59e4179b770f6d8f51f9fc4952bdda6b287a1257f1792f25b0809d116f4553194a8a6efc41d78ea1429733905b98e637b0fec07ba6ccae600dbad2792a1721a68f4b913d6d7428db6febc528e5cab6bbd0334b52c3ba3daefc8962cbb9966b9a9ebe1b28521395650b32f61732a222b09e0c09e495c7caa6b98dcf2e630c3fb1bec1f0feef1e88689f904d8f2b8d51e26d6103c1a6be0b21972d2a9dbd4255f124218ecdba8840120672f928b342a267fd19f1ae9166ffb4078c9b3b18021bebee32e96811fa0e09b62ac20aa5e33c39ac3e3ebe74eb18570f7414e268eae23ad3f9499132e54a8c0cc7a67836785a4f497e94ded6877a91a9fdd262f6656daf87017985aa73247c8c271549c0a3218f56f4d42f100e84790f1189a5679a51dcff312e2fb3794d265aa131d7321abf089afaede93b5468ae1e71fbfd55c302ff21600706148b14556bc2b52a480cb885a3aff33bbedd27ae49358124042a7501991e1455798a6b9b74faa786051e38f8aa1af6472248a7727b22cb6085741a145d3090799089232c7fea9a8700bed631b7f5818f58810248c1aed8368a754b67f28f6d0d8195b7de7d2af01a9c87606eeb1e725846d6f6730f0e1f440a5a5833e20b01b0a5c011a6673689d3cd497f25e80998fbecf8f3462405c6794c87e94d806755dca3af92ca50c79dfb25af47d3fce1fccc37c01e8cb923d8c19de0de1ea92db241eb3baca81f1ee33b70aad7476682bbfbba27237ce8f49086aae37330cb5fc9a7573a5249057a256fd9b296498a1922dbff58c8e6009be9c3a6b68caccce892718fc413ec6312e9fab1c49e76928c4a278e85cedaaef820096575b90279cb4b6a3b1c6c7998457ed3e1ee95ad7bbb7615dea8a02c1c121c06cb683783731917481eb0f9fa09bec316f97babdb032dac47463ef920d75253c49e3265658d4922ef03816c723496c7be0131312bab3de230b7cf34a467eff6a9b0f8120f1d0646c47bdc3bf1b6051551e63d1ae63febff97786076db242664fcd00d0b3df7e908881a656182e66194e1f6ae7a46be94390c9aaed139e78b655b4d8ba07bf58bbfa74487d224ffa24c8c044048db289adc53a8eaffa434aa59fb4d9c86b57a4feadde5b830e997aaff4679e72d2f6efa1e4e826f9151cd1a6c8e5abbed6a32c3ba55b149d4c5bda704103bf105c62b61c77908fa65cdda4575e0602f6425781c01e4aab3025b01b431f0bc86f50ff75dea5b68cf956b9b11fad66e43bb84dea9eb298f1bcf0acd5de95e217a60d28e6102429c876f086c05ac18ea0c6add4b1a33c0d25a9464f39c7c9bc146b819057084e1cc3b2fa5a7b5cadbe87632ca49bf835bbb235ab9af0f65fbc7f9f0cc2a135d691d235eb7247165aac600517826d0658020ab9ce6b5cead65bbb64eb323797861192cbe3321bea81f6742066cc61b91ca92427d5e54d795f1d2bdea8b8a77e4067e3b0ae1231ef656d65c742ad63a5b7213ca8156dace7e2744bcb27ecf134bd7d6e8fe64ff5e144bde5334bd96c4c6b1fe1539e2295b15822da28fea5c3f9fe225dfc69df98678a1f11a0faef3eda3b2a4a5a274ecbd80f68b3766daa83407bc1bde2feb4fa23aecd43fb7b05fc0f54185cb089ae5b071c499048d45ae0175da7257f1cf96a7118004ae173dbb10e28216a063d22b45f06ded78730d598531c256a135336d23a5d2117a4931d450eab00e28a4b7fb2699acba8e13be75bfd562046b5f76dbbb163153ff7d73d5315b6c2a071d5875f7986f1671db64a5c327abbf29dc743919833b98211bdc0c56587be275aee2c9f97cb950986db1aaa84c5999d6e6e53e5b8156f9e4bd0791c13c5fd2ba3cb0e64870ec93f142b416c5c1d3e28a95b58d4fbb5e344ffaaa57c79b664d387bd4d694401aea4899e341dfd16150cf4f116d9ea6531dde1e85760bd6d479f804c63046027cf249e53849c0315c9d9459d71f36b8ce8301fcd12a9311fd645cc7b7864ef8b4d4016f26ba6e0f77b1272cd5b5424edc70766ec01958673714571daf76aac74d711a7442af8289fb7c7c7e3e17a126508d419deb195b79ec7558fc46e7af145269167a408fceac537f93944fc9e60d07e07602f25850d9547dc3662cc4b50937abc4c1fbd4d783e7f3891f896e1210726b814f167ed9940a06539ed000b5b55482503a214c813814a7022b46a884d5653f9352a7612e04078ce49095e4a4574940eab0d71aef3a4973316161225be336ece57979947c55f28f7f715b842aa5771472f32e23c028a482fb6bad938eb3a76cf0a5500ed39a73a3de2da3f903808901085998fd5a02451f74e927e5269ce8d96674cb62a53245272efb34a59d6dfd8b4580bbf4666ae8e662b1c715aa8ac70808bef5fb811ffd9ceb094630cad47c7f0060baffa94a8d06eae51725ef5cb86780b9782043353ea11ef15afb9897b197e42c462f210785baa5443be9228bf89210c6da018500321e882e79f04bba960c7dbbb103de3b5bbc7f930cd3d6451de5c3028d1cc759aa98575b3adf5e8ffdeaee8ea8abb0abeaab3b86fbf3b697c6decb921e723731364d5bba167d32219fe35351d86746900862dc6b6c510ad5ab38be5e8618764b54409099e768babb09b8c85a1f4ccc28151c5be3aa6507664d98204f0f847c4c0b2a21ee25970038043fdaa240084b3d245a9ac36bff7a5a7a7dbe1feb6a39b9e50f5c25cf70561330da2c2a8b91347924dfbcd4787460fb924d75efd8738fdca8115247985b55c5751f91ebf0c5dce270ccebfc76e4e71df24a8d95e6c6c67dc4851bb1255d386c4f025cb9033851afd2d2faf61091a4571ac384c546d9311e7be2826cda7ae1d75ff9f1478138010cb1593b6dd3cc4f283b1c6b4dc5096b055fb2ca1f19a79b23c6286a05a20fa6b2d627069572dc05bf0d4f88d9a7f4159d114397827e9b1818f0dd490c11dd1e8ab0c9d19b840c7a3a1205f645aa39309b0ddbd8f920216a42817ffaba336d9c6e4eed5019f809792d169b07eec8f8d0c62e68ab2bf4601a6bf8add2419b80bc90e30d457886ba7c6567a79282137e1c42ba18eb20b80046b3ab652e953acaa4733d1670bd481b639cf0265395cf07f7370894411868a329d8000540a413a8ac345fa38cffdb171f0d3265c4f1ead46040965eea8ff58a65602efaa4268330d91b8d396e33a65bfa1145b577282bb87aa6c6f1ce2f9badffa1e2504430b9bd4419f4dea449827505a8ef58b8f7431257fe99ac62819eaea0bb973b7d263d6e43e81c4aa7d1450904538b46e1d235e544e553e51861810b63b746f16bcef8c90bab57c687c37ba12700ab11a4231da6ed509948f84b9bdfc710369fc1a74978749c477d7ed5cd06668828447277d6fac736f696489ae946897717f529a08a8994bb6169ffa72faaf7e13ac43fe0c3c2c1f2de3ec76bf5b8ec0c58caf96ae95a0e24b586744781b2e5f1ec69c3a4ada115f8c3cda0582602c66d55c87062d28b200c435487fb7d70196770205440289fe4a75e8181b296db4f133d0d18050a3611849b2112468f6fe4efdded0a8f90bceabe2ae96f2da40c6f2afb61d002c96031af8683d64693fca991ff58402cb44989ec3b57263c94d84a7ab87144b9bd1ff4d8cb8598d96685cc930624c153ed03ec086d280bcd3e7d654355e80ff51a979517b84eeb28f335627e7acbc6b2a829e7878dda33524e5d88770aac59256b1ea3aea9d4a6dc17daf7f22ca1dd96a0b48dc44f119c988d582a3ca0825a14877dad9d5e0d3bbb66fef586c690dec1a49026b60ef8ec6e3237c3e8be83d051bde25d72ccbfda5b786fe2fe124f00a3a429f51c008e7fa478ebf56771e713f7124a0f54e623e7a851af2fed085da7495bb3514e74fe807c5b97dc02154271ffc0e520d7b4a40a086d0340b6cacf9f2b832688cb9d8651ca56d6138044fc72355a353027d49b96b74917996f514f07af0ab0973a43d79c3ef9bdd4a9a7300c53c5508de99fc856f143a3d57ce08d733f9e1d508b37a6059e53cbe5eb9daa5b5494b62f7941cb6ba219289eaaf8cd003bad854e5c09867e76d6f2e744debf0c806fec43ec662213b5d7440667dfb393ac47b31d4d4b0c56457ab8968f3da9c81b04f49caa1ee6f2e19181abb58392648009cc530182767eccc6daa64c88326fc78ab03b7e7c86cc581f59387efa52a6edf8ab32f6bbc4fb762b3f70299dd3e65a1c18b64c998f544caadf641dbbe46eeaf1d98105fb2ebed0eedb1637e2220e21c2e07eb2a864a5b027437906c6552345b282e80f168c1fffb14", 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10)
sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002680)={<r4=>0x0, 0xc4, "cb3c7e1735a7b2f3066225bb73542eae7ff6b66aace65e837daac60d00810228a1e3ec17faa9e5b872ea88212923f931787d2ac0ea6e098348255b3afad561a0571f1f43256c9dde8abeb95991d82b8a62c37f0d1fc03cb5d27d7a1a589da7ef7fff93eba09c0865ccc8003c1aba023372f9132a048ffa7ceaba6654a57887febb7ddaca80b929cc005f3a484b9b10574fddf34c05607a2924ecb5f56f3a7e67b25559f21c3930f1ad179ca82b85ce24a4772ed9f80d09e4a6e9acb72bfe319b4a55f6b9"}, &(0x7f0000002780)=0xcc)
sendmsg$inet_sctp(r2, &(0x7f0000002880)={&(0x7f00000011c0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000002600)=[{&(0x7f0000001240)="4d6ad1edbc0d9f9d87", 0x9}, {&(0x7f0000001280)="c6eb89e11cecee9247d40bc3c9bd8c2e3e5bccb375bacb40f0db51ee10cf9c21aa4216f06c4f19d83977f27aed41b406d9f7202295911185", 0x38}, {&(0x7f00000012c0)="7f17237c958afe91ab597d0431b538801fcac49dccb629113511331acdb6b6a870ea9ecf55e2617e194d50c14a01608f6689f76df0336da25cfe461dcd8b0e3b2c1e9967dbb94d2e7e7eb3c378aa6a6e1281005b4bef0d7886fa44721d88257ee927abd4bccd1b646bf72a449f6fe0fc379e5d51437dd2d456bda0c8d4ccf1b0d9d8b6921e92f482ea18b154a874beb410a1491bc807519d7f11d5991e219141593fe7b3f720e14437b11c900c04add842151a758d5f968422747e7a4d92477ca7a3319789c7c2ec6c0481a3c06a962a11157d368378a7da26c739eaf4c5c540b6e1cc7c38ed8724988b112e9470f53927b4e5a5ec52dcccd59fdb1bdce9dcf450465faeda1bee46664e97e27d014df54e4355eadfb7c65b06ebbffb006aeffcfc519f994e911a81bcbe7a26f46a3767f8bab43fbdc5107b963408a8fb704a612b2cb90f94571f390f06620fa0f38887e62fd6812f487fce241205a268a3184af8c5b06c179ba66f2b7efddd505beec740748b746db111e61261390603e65e8f19cfaebd042e6ae1c207211feaf4af0edee1c3e11968edf6f722a81eb9faa91adc3f223a8389074db2100b6db462c9199b6ef3ccd415fd191705321a319716ab3f45f559cddc9b62251ac270f667b0ea1f5371da8346f85cdd9f59ce42786de566b29344e79b2785a45338628a7ded9d9bb0018741d7b7d70823474eb8170fb7521ef88bd0fce4d7b45ad77ce869e676b24392adadd7ec157e6f9c02b36bbe5a94ebcb4922a5a24f3d22d8ae8d473ffbc0c50f2cc78dece63531784567e4468955088a51616808266b0384228134e83cdb196e6e156e4f3f5ca49873948f43079e0aac6c0c2dd92a28a1163757a1233815bd637c2241acdb815f99ca9406045fb2de43e156ce2f2a33622383076475c519103c9ff072d1c7e00825eeabf92fdb2c78489f9b66966b75aae521c82369bb9cdd9a6e2a91028e47f78229f5dae0b3414643b099f0796910424ad28a12934d4a9c9738d6a0b1f120c6e2973de8188ac2d6e68f6c77c8e3748ff30143012c7e86b0cd5c4c3839a69779ec57841cbf47dd8264f9a8221bef8824b4545265ef52cc6d9386ea6780064b33d4240e30e68d19e3da1c756fc4591aff135d6d4a96d06f12214fc2ca80c916760dcc735288f5dc8d4147194fb1857246600db65c1e6d3d3bae76a43e34ddc6461e600c5e2838823bc8488a03b5b58ef4861675e184914af4f48b23d289df16e89c17a1479e1f89b456b20d3dc2699afb858d35cb6dfd19661e01a66749c65f3c0b1ef451c5a1f2d320d1f710abe1ce4218c6e13380150b03f978e71a34ba7e7b4d4ec4e06e61814c49b10ad0002e0d45d4d285e4a12027ccbab062aad68bcb4a484eb8e9a1ad1cf8599c67418273f942e5cd8becf6f66b85b7fff7596ec0051dadadfcec1c09bda9eb51e65485ebb7a2e6a0b94d365ab5d04f390ea63c33f4bb3fe5eb69112e98c1c6616386caa6210ea3cb8cbf1a05e18bbd5d636dcba1f974ce56d5da2ffd82035609eae94f251c4fd9984960ef24a6dd15821ed126baa8b9951824c614718b36c67f728815e9379ec307c9f2d4da7b15e97520771933252af63a82333c197d163d1631c622c602ee962a5fe0425ee599e01e3ffa23f79b1341ec727b55c306a3b78069af8eb5c9e35f8d52dc8da1ba60413540464f088567b6ac56253a1f20b76f05a6c0455d5c95b2a4efe719831ee4c86cf3b7ab818da61069d9894353ff6bae117e92d50aeeeecd50b22daebbbe5998490e3908627b1f3090c6bbc8236fb42553658ec5e46aeb3e75d165a8b8e7571715e2e8e2cde339ccdc7b990177a1f881e829870f4d753e8dc9f77fb75bcb2ffa9c011477ea6c04a6e1b3a44adcdbc71a29d52c504030ed7512570258b6ad4f60a3412390e69f08a65db409a8cda70ad7bda53ac0aedf5d0ee77e1418e0de1fbdb1e6f38f611c0bc3d237b080eebe55315ee4e4d13433388763841903ac2b9f65ffe0b28f383d10bb097ce7d61eeb26e1fa6df17f963efb20f84991e892ffb41a5bbe9e8c54fbe8436beb7b1410dc83a8cb39f5fcdefc0c7e2b8edab68513144393d82fa05b45f9ac53ec8d07a3387597d6a9b520457d1334453447875dba1d6d5479c8583446fa0cc2a178cea18ede2b8f59ba1ad7a494e512c347d0d326682c0c6d9a49435fb73903563fc72904300921e5e316f012b80c51c01cba28445ba9e3930013da97bd8c45b3992dd45424cc62de8387712c52d131cea99bb66293c6128344ec565ede9a72ff740b165f98a146f7c70f478985a95fabea635d9ef644e563e26db4691e42fa508f43b0a2a4802037b199b070c0d74f9151b5617a7bb394ccb086caa8028f5d3eb41685b082a84fe930d7ac8816a8046a6c0c7cfc00a900cc93ab284fd31344be5d0274c9c5338de4d487c4f3beef0d5ec0569025c5f8c94353282208f347005fcaf4349b512b7559faf5a249db230b342eecec3c1893d6d1cdadbc59beffa6c1890b8d01729ed704087d2218a5875f9f2f198901cf146bd6a9c2a03e5b403b37fe67f18b966ed2cdb2f7a5d8125c29eb6fc3e60ecd9dfcd89165a3962221e6db0470b994f26d2875690a01c9650d3f726254ec2ded6eda9be7e503905de398ec96cc0b6a87e62ca1482857419c546bd8a72cf26e76ad842fda95f281556225f9ac6104561fdf6d6c732fe2f3f6e83a7907eb0ee09d418235af9b06b516a18af4dc2e912994a589c01df1b7b71e14e65f976ac3d51026ea73791776b42f735c0d1239b387d3be4f3a8c418b855ebb9259d73ee19386771a807336a4d0b69027bddfaf14e65724ddad14875c5b9057cb19637720d301510c27e83332b304e5a0f30a4dd8131d1300c75063ecb779b74938a91c0a421bce5d75905d790a5b1173dab33ff50caa9b4e61d287bfacbc87cf16ee847b05ce2946026d0d3d9e856648b7f213fb5ba6a447b2f9d7e2b6ca68552e62612bd70247e7f0cd9e51fbd527afb74103e3cb597dc894b5be8a97756fa7e0bd6af374979454c7ea8c880f7aa0ababa0d131237898926745caa8aa8ea72342b3d5a660ff02726e804ec6a0803c9bd4a7dc4033acff2005bc20c8588748703490939025f0a728cdad734f955291135b6badc95c77561db183c1a1fc5e8e1f477170d8a9cbb92231a741aba9c8580c229c87e18613a6aecb1924a764a70522797341298f99ecf08d33de305eeaee957f2fe927a27b503b3cff95bb485b094f0d00874ad8bd1ddf937379b3c0cbbe75a73b1de5d075a9b232fd545037fa696f34304465bb0573dfa189f490b3f3bde6990a221fcd30438241f7105718c2919a77a3df4f13ef7c751460b630a1b67129df39f0629d75d94bef6eefb6f78234c6ded0ca04b2dfc553725755fce5d8b1a7a548aef589e26a6106bf8f649a6ba48b1a6e86e0ffc1757124cde961cbcc748227b26c6a98ce2877dc7981172caebfaffd2993092ea2879a07ebc0b1263b1f3507009bfd180b1c4870f504b4ece9be6abb885e1c4009fb85f8477642f65e8388cba876c7f789392695618a34a29203d2140daa687ec796db5e671fd9be0631faffa7046abe3522ad0d7feb964e72d14e2ce9f3be37c866c4b553754aeabcb8176247b30e1e970c586bd5feff117b5d174ce61cb16b478f292668a12506c821274ee3452abcdfe221f329e64f210abfd64a112af5201e3c6b6b742ac35cfe6284a4c47bf36d27f044c6784c6da95900a9d3fc44327e6bd24edc4ce7fa1108f60e7a1ec6d7af4e2e2626fa1702b96da7c79529c3b4c4b3296cce14fc2ee900b45b7e2e6ae286a308286bfbb0a02b3322a3e489de436ce0b518447aca7cec545e76f0010c5e63ab6b1b4fc576582695e200f271f40f95ac60e333fc7d132f8c946a0a8dba8294d99c63cbc3ef21d09d82c63ba04fd7c7f9fca7a6e4282ab4de2ed779f04ede157de79c987e3078600777658a9238295a665df05a80cf80e9df862cb9dab34f368ee6174776f472a879dbff89d31f5dd9d7b93effad81a8c769887fb3d4c7a2c512f65b434a1006cc0ceb9a9a8f0cd4c4a8d07055d259443a0fa03f063338cd717159796a002f731e664d6f842c0e54b08b0683b73f2b0d3968cea8e4f0e115a7271e044b319c1ff47b782a3fbf8382dc232dd0b01b8acaf6765341d2b74990e407366a64de6c15f07a9a2cff5d7d7dd203191c88212b52579c5d01ddd5ec7bb9452ba4873430c1ff211a3c47bb05be3e28fedd73a5c15c31d83d8848a1677df2ff0d66a2c261187fd318afd8916eb9430a4ac030b524baed4520a978a70be7a5ef70d82027fb54d9748d2c000cfa7c809c17ef87592f56b3803c7e66258f513577afcee65e35bb6aa74942b418f6f4593114df5fbdb8ebd12c01a7a8009a16e613fd4f9f8ae2233bcb3c9c8d5e3c456a5bed54c26324cf0dfe06ea429ffacb09e755ddef4069a8b70b5dcc29f9f16f96d7360fcde04a1a30d67eb0b7383a2debbde37159b63f3d89977f1b8e00a24c5d3751446ded56a2e815a2c70d84e94062be4421fa966babd5b54c9e52fdad69af2173a1de8ea2c81353ff3ff17b51eaa5c247df94d58fd5ab584530fd21076ae68c9307f16f2e42c9f630955b0e92b50d6c4e25d78aa87bc9d89fd2b10c552b311b6bdc7b9ef14b18342f96dd4274f45d4b32b6bbe1564fed0fe8053356eb77c85b08b552eba4e8a837ea7e2d0c6b5d27ebb867b4feb256ec96812ef05a3525fd965ae2cb64726448ff1154cf6e9a8bcdf595dfa24ede898953f23c48f7d7610fe2bba433c7b4970269a2b58ddc3c51c252f786d3f2db85d68464917c7bc9543167d7b05ebec152883e3717a7dc4928fe7def7d85c152f3930cd50783d6951404a5fbe21fda5e07a7111633ef55a3675f5393948f7ef422afd3b03d571a59ade9322f99f354dba5bb75f553d18bcb1fdb099adda20e02c02f61c3846bffcf0175ab46ff1fc0e2c83d79002a21df36ae920591df388d8f22bd42207054df906fd83b3dff4062559ef11d19728afb9c39336786cfbbe7b4e2c6b3602ef45bc046f87668bad7e733aeec4b10c5da1fd2a5bcf3008fea82aca409c374323933cba98626c92b0d765ae32e291ec9cf57d827240bfcfda52d7cf13860afeae53d28de9518b6c695c708ccceaafd6be453df7d5080badccb2e1c8d0b9095a3c18758bdeeda417fe003488e051203cab70cccffcce035bd0f947a2bfad180eb2f9ed0a259125c4e3b3ead232095b37d071ded7c2702f49b6d01fe99d2e3aea4912c9b0dc24da855f7b44d0221b5bdf3dc51e563943e101eda5cfc92b018421e4dc3fa61f7111867bded283397ad117abca62cbbbe591da0b55efe6b5fbd958e2ac32c94e6e449fecd8f30773860092ef43d1ff22e1c5c3795ab0e2a543ebb6c7037654b5ba609645e5db0c735c6f251a9454665094056fd9067bcde06327b0ee7e18ab93150fbf1ff19c4769a3a58cf40cce8d916d54ca1b6b5f124bbcefbd0d52582094290e7789c9678942567f78d2d5a328629c7ce72a7eb17f6dbb6af30c2d0caa7d858360cc77017c4c5f60ec3b02ce580a8a641f57d925a34258740f325ec31ca9526c2012181f9c32a0c264f5aca299e97eff1ff9d1ac7377613d2fb75df7ffc5ee2a627632198010375983b80cd7d5d5fbad37c48d239238685463a6ea5a616cb6cef6edd9baf84d0e730e9fa96ebf8dee68f9d290fe1bc3f6db5955152ba3161ba3c3c7b1465a57d76f084e4ce2a8b", 0x1000}, {&(0x7f00000022c0)="78d97dc1b1df4be99d60484eeb08255db64f8b7050c9a049918cf73b574054f583ac73611ddf28f84a5e517947bb11503f75bd732ffa58065c9ced1e901dbec22f347f8e3c82b9bbaaadafd13cc11453d48c030c53e241d54185cb725fb571c860a25f50783f478596ece8eea12afc9182a659db990341ec7c", 0x79}, {&(0x7f0000002340)="9475869bd9e8208f74142187392848f67cd66ba772d24e6bd875895d4351104afe1356d59224672e9e723123daf70b8d83a8bfb64eb587c6a6e695e1737fb74f545ccf7d19be72567fafa49299195ac3", 0x50}, {&(0x7f00000023c0)="6c37a039b37f91613f368a50fd463ba472f6012afe0358c6aa5650d36088cb39450b3b35cbdbd7320252f2eabdb23ecee2335556a93e7aae38882b1b81b07fdbedd890cf708dcbc3d29509dc7ab22eb28047357c90ac870300e2e267de4ff29d4e526d5d409a9b94b58d397307047e3506152ef0f5d4bbdf8fb7ed95876019b2770107c1fdc3b00674e3", 0x8a}, {&(0x7f0000002480)="9febcfc46add708a6a381237a820fc42b1bd30bdba5b7a2dbeff1017ae053ad73f322e54aa6b528e130d16b9a036bdfa636bda4da6d796cae73954eaaf5be0096815df55ec41f41389045cfc315859142735cc0856e6bd0ac1fea73297991b672466bf09d28685c05d73dd9cc14c90a4418819fc3528b32686e26d44749aa05cc987a85a33127996b746dac687c6767d75ea78053a99b9024b7ffc1bf1b67ca02e2bb16ad134fc3ad2e5a20ea91524ee609c323a2cc5d97db9cad77bb1ad21679c4f2edd3ba7ab0c1743c6ee4a58db434a1f58457dec36a45a2c5c0cd4e812cc62753aeb7b34e10a86", 0xe9}, {&(0x7f0000002580)="58d32243cec459beaf96c1516a6b0a39615c05a8727a558ba59af079e13ebf758f515d802332eed6d7e9c794bf15db89dbd7f2b28939ed147112b0de26a0201df040a6509828b979ea65faaac84c863d1012a6925ae881fbf70c6907cb497575d7a36a058db83a51a0693f16801795583f3d0699dedf999481791f", 0x7b}], 0x8, &(0x7f00000027c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xc1f9}}, @init={0x18, 0x84, 0x0, {0xfff, 0xcc1, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x20}}, @init={0x18, 0x84, 0x0, {0xfff, 0xae34, 0xbd, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}, @sndinfo={0x20, 0x84, 0x2, {0x8b4f, 0x5, 0x9, 0x401, r4}}], 0xc0, 0x4000}, 0x4010)
keyctl$join(0x1, 0x0)

2033/05/18 03:45:21 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x57d5]}, 0x10)

2033/05/18 03:45:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:21 executing program 3 (fault-call:3 fault-nth:16):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:21 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf00, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:21 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000c3ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  828.046554] FAULT_INJECTION: forcing a failure.
[  828.046554] name failslab, interval 1, probability 0, space 0, times 0
[  828.057997] CPU: 1 PID: 24331 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  828.065281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  828.074651] Call Trace:
[  828.077272]  dump_stack+0x1b9/0x294
[  828.080915]  ? dump_stack_print_info.cold.2+0x52/0x52
[  828.086227]  should_fail.cold.4+0xa/0x1a
[  828.090297]  ? __kmalloc_track_caller+0x14a/0x760
2033/05/18 03:45:21 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x100, &(0x7f0000000080)="0047fc2f070001000055226628fc302c3adc5e99390970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
socket(0x1, 0x2, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:21 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1fdb0000]}, 0x10)

[  828.095154]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  828.100269]  ? device_add+0x3a5/0x16d0
[  828.104168]  ? device_create_groups_vargs+0x1ff/0x270
[  828.109368]  ? device_create+0xd3/0x100
[  828.113346]  ? mac80211_hwsim_new_radio+0x3c6/0x3410
[  828.118455]  ? hwsim_new_radio_nl+0x7b8/0xa60
[  828.122963]  ? genl_family_rcv_msg+0x889/0x1120
[  828.127644]  ? genl_rcv_msg+0xc6/0x170
[  828.131544]  ? graph_lock+0x170/0x170
[  828.135357]  ? sock_sendmsg+0xd5/0x120
[  828.139250]  ? ___sys_sendmsg+0x805/0x940
[  828.143404]  ? __sys_sendmsg+0x115/0x270
[  828.147471]  ? __x64_sys_sendmsg+0x78/0xb0
[  828.151713]  ? do_syscall_64+0x1b1/0x800
[  828.155781]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.161241]  ? find_held_lock+0x36/0x1c0
[  828.165314]  ? __lock_is_held+0xb5/0x140
[  828.169400]  ? check_same_owner+0x320/0x320
[  828.173415] binder: 24350:24351 transaction failed 29189/-22, size 0-0 line 2856
[  828.173734]  ? rcu_note_context_switch+0x710/0x710
[  828.186178]  ? rcu_read_lock_sched_held+0x108/0x120
[  828.191200]  __should_failslab+0x124/0x180
2033/05/18 03:45:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  828.195444]  should_failslab+0x9/0x14
[  828.199261]  kmem_cache_alloc+0x2af/0x760
[  828.203412]  ? memcpy+0x45/0x50
[  828.205270] binder: 24350:24351 transaction failed 29189/-22, size 0-0 line 2856
[  828.206709]  ? kstrdup+0x59/0x70
[  828.206731]  __kernfs_new_node+0xe7/0x580
[  828.206750]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  828.206773]  ? lock_downgrade+0x8e0/0x8e0
[  828.206792]  kernfs_new_node+0x80/0xf0
[  828.236270]  kernfs_create_dir_ns+0x3d/0x140
[  828.240698]  sysfs_create_dir_ns+0xbe/0x1d0
2033/05/18 03:45:22 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc9c7]}, 0x10)

[  828.245033]  kobject_add_internal+0x354/0xac0
[  828.249542]  ? kobj_ns_type_registered+0x60/0x60
[  828.254314]  ? lock_downgrade+0x8e0/0x8e0
[  828.258485]  ? refcount_add_not_zero+0x320/0x320
[  828.263498]  ? kasan_check_read+0x11/0x20
[  828.267656]  kobject_add+0x13a/0x190
[  828.271377]  ? kset_create_and_add+0x190/0x190
[  828.275965]  ? mutex_unlock+0xd/0x10
[  828.279685]  device_add+0x3a5/0x16d0
[  828.283408]  ? device_private_init+0x230/0x230
[  828.287997]  ? kfree+0x1e9/0x260
[  828.291370]  ? kfree_const+0x5e/0x70
2033/05/18 03:45:22 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000c0ffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  828.295098]  device_create_groups_vargs+0x1ff/0x270
[  828.300126]  device_create+0xd3/0x100
[  828.303934]  ? device_create_vargs+0x60/0x60
[  828.308353]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  828.313461]  ? trace_hardirqs_on+0xd/0x10
[  828.315868] binder: undelivered TRANSACTION_ERROR: 29189
[  828.317612]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  828.317630]  ? graph_lock+0x170/0x170
[  828.317654]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  828.317674]  ? lock_release+0xa10/0xa10
[  828.317689]  ? check_same_owner+0x320/0x320
[  828.317708]  ? rcu_note_context_switch+0x710/0x710
[  828.351297]  ? __lock_acquire+0x7f5/0x5140
[  828.355553]  ? __might_sleep+0x95/0x190
[  828.359538]  ? kasan_check_write+0x14/0x20
[  828.363782]  ? __mutex_lock+0x7d9/0x17f0
[  828.367858]  ? genl_rcv_msg+0x13a/0x170
[  828.371500] binder: 24366:24367 transaction failed 29189/-22, size 0-0 line 2856
[  828.371838]  ? __lock_acquire+0x7f5/0x5140
[  828.371858]  ? mutex_trylock+0x2a0/0x2a0
[  828.371871]  ? graph_lock+0x170/0x170
[  828.371892]  ? __sanitizer_cov_trace_switch+0x53/0x90
2033/05/18 03:45:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  828.393447] binder: 24366:24367 transaction failed 29189/-22, size 0-0 line 2856
[  828.396656]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  828.396669]  ? validate_nla+0x2d9/0x7b0
[  828.396682]  hwsim_new_radio_nl+0x7b8/0xa60
[  828.396694]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  828.396710]  ? __netlink_ns_capable+0x100/0x130
[  828.396726]  genl_family_rcv_msg+0x889/0x1120
[  828.396741]  ? genl_rcv+0x40/0x40
[  828.396753]  ? lock_downgrade+0x8e0/0x8e0
[  828.396764]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  828.396785]  ? kasan_check_read+0x11/0x20
[  828.396797]  ? lock_acquire+0x1dc/0x520
[  828.396807]  ? genl_rcv+0x19/0x40
[  828.396828]  genl_rcv_msg+0xc6/0x170
[  828.396844]  netlink_rcv_skb+0x172/0x440
[  828.396859]  ? genl_family_rcv_msg+0x1120/0x1120
[  828.396875]  ? netlink_ack+0xbc0/0xbc0
[  828.396890]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  828.396907]  ? netlink_skb_destructor+0x210/0x210
[  828.396928]  genl_rcv+0x28/0x40
[  828.396942]  netlink_unicast+0x58b/0x740
[  828.396961]  ? netlink_attachskb+0x970/0x970
[  828.480788] binder: undelivered TRANSACTION_ERROR: 29189
[  828.482774]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  828.482792]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  828.482810]  ? security_netlink_send+0x88/0xb0
[  828.482830]  netlink_sendmsg+0x9f0/0xfa0
[  828.482853]  ? netlink_unicast+0x740/0x740
[  828.482870]  ? security_socket_sendmsg+0x94/0xc0
[  828.482886]  ? netlink_unicast+0x740/0x740
[  828.532379]  sock_sendmsg+0xd5/0x120
[  828.536105]  ___sys_sendmsg+0x805/0x940
[  828.540113]  ? copy_msghdr_from_user+0x560/0x560
[  828.544876]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  828.550407]  ? proc_fail_nth_write+0x96/0x1f0
[  828.554902]  ? __fget_light+0x2ef/0x430
[  828.558879]  ? fget_raw+0x20/0x20
[  828.562329]  ? find_held_lock+0x36/0x1c0
[  828.566385]  ? kasan_check_write+0x14/0x20
[  828.570617]  ? wait_for_completion+0x870/0x870
[  828.575198]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  828.580736]  ? sockfd_lookup_light+0xc5/0x160
[  828.585226]  __sys_sendmsg+0x115/0x270
[  828.589103]  ? __ia32_sys_shutdown+0x80/0x80
[  828.593499]  ? __sb_end_write+0xac/0xe0
[  828.597466]  ? fput+0x130/0x1a0
[  828.600818]  ? ksys_write+0x1a6/0x250
[  828.604617]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  828.609453]  __x64_sys_sendmsg+0x78/0xb0
[  828.613509]  do_syscall_64+0x1b1/0x800
[  828.617387]  ? finish_task_switch+0x1ca/0x840
[  828.621870]  ? syscall_return_slowpath+0x5c0/0x5c0
[  828.626787]  ? syscall_return_slowpath+0x30f/0x5c0
[  828.631711]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  828.637077]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  828.641923]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.647099] RIP: 0033:0x455a09
[  828.650272] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  828.657988] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  828.665246] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  828.672500] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  828.679754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  828.687029] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000010
[  828.694707] kobject_add_internal failed for hwsim86 (error: -12 parent: mac80211_hwsim)
2033/05/18 03:45:22 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:22 executing program 3 (fault-call:3 fault-nth:17):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:22 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:22 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x1f22000000000000]}, 0x10)

2033/05/18 03:45:22 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xe, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:22 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:22 executing program 2:
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={<r0=>0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x12b6, 0x2, 0x1ff, 0x80, 0x7fffffff}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={<r1=>r0, 0x7}, &(0x7f0000000200)=0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x1, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20)
clock_adjtime(0x0, &(0x7f0000000500)={0x8, 0x400, 0xc0, 0x80000001, 0x80, 0x7, 0x2, 0x3, 0x4, 0x7, 0x7fff, 0x1, 0x1f, 0x1, 0x7f, 0x9, 0x100, 0xf98d, 0x5aa, 0x2, 0x7, 0x8, 0x2, 0x1, 0x1, 0x80000001})
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000680)={0x4, 0xaca, &(0x7f0000000000)="c637067d3accc3", &(0x7f0000000600)="a39caec31244ea0cdbdb2adb50e8e4e595ebc51833686098a1be4809430a048fc4b193e1f4bf443883891dea6d9bef6694b3f7630b50df54ec30f9d125fe043ca0f7ce2fa0f3e8c00058baba", 0x7, 0x4c})
bind$nfc_llcp(r2, &(0x7f00000006c0)={0x27, 0x0, 0x1, 0x6, 0x1, 0x40, "d3b44e8510d523e0ae0d1686fea1a13489692f9967e33d55e05618705f7fe46ecfcbed46de0afe1049d2c6e16007f4377e892e101d5d768bec0462997bbb9a", 0x33}, 0x60)
ioctl$TCSETA(r2, 0x5406, &(0x7f00000002c0)={0xfffffffffffffff7, 0xffff, 0x7ff, 0x2, 0x802, 0x7f, 0x5, 0x6, 0x0, 0x8000})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000740)={r1, 0x2, 0x1d, "2f63f8dc2a0f279dce68603bb114e7870edf4f30fc8a986b14eeafc807"}, 0x25)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000004c0)=0xbe, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0xff, 0x0, 0x4, 0x500, 0x5, 0x2, r3})

[  829.168835] binder: 24397:24399 unknown command 25361
[  829.175760] binder: 24400:24403 transaction failed 29189/-22, size 0-0 line 2856
[  829.181362] binder: 24397:24399 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:22 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b8", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:22 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  829.218280] binder: 24400:24403 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:23 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xc7c90000]}, 0x10)

2033/05/18 03:45:23 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
signalfd(r0, &(0x7f0000000140)={0x7}, 0x8)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840734ff88174595d82b47e1347f90f4ba69820f66102be30de53187ac5464e0f7212e03fb9f95926e6237171ff0f000011f041b8a3d730360cba64c99b4f5dd316ab8ce412"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
ioctl(r0, 0x80, &(0x7f0000000080)="e326c6f4a6331283ffe37ec38c1beb5e531aa4af61997544b187d36333744dbb7e4614e458fd91bc83a8dc092e8561392db971fa45ed800bc69073899e3d843aabfb68310aa5e42b769d3a4c73c92e3362e0250f3d047ff8fff1a109bdf403daac2d58f2db9d553ac5d7b65a01a3ed02f896e3ea83a01577f898d115aa42a1956dde8e80eae6f0f1e2492c76e0eeb193ef79720307315dce7d47128dc6361667f2458cf367d8812c0bcd4a877175")

2033/05/18 03:45:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000ffffffc300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  829.344359] binder: undelivered TRANSACTION_ERROR: 29189
[  829.349376] FAULT_INJECTION: forcing a failure.
[  829.349376] name failslab, interval 1, probability 0, space 0, times 0
[  829.361162] CPU: 1 PID: 24431 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  829.368439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  829.377796] Call Trace:
[  829.380400]  dump_stack+0x1b9/0x294
[  829.384044]  ? dump_stack_print_info.cold.2+0x52/0x52
[  829.389244]  ? __lock_acquire+0x7f5/0x5140
[  829.390809] binder: 24432:24433 got transaction to invalid handle
[  829.393495]  should_fail.cold.4+0xa/0x1a
[  829.393516]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  829.399764] binder: 24432:24433 transaction failed 29201/-22, size -1862702466781421550-1224979167354908963 line 2856
[  829.403794]  ? graph_lock+0x170/0x170
[  829.403814]  ? kasan_check_write+0x14/0x20
[  829.403832]  ? find_held_lock+0x36/0x1c0
[  829.431827]  ? __lock_is_held+0xb5/0x140
[  829.435922]  ? check_same_owner+0x320/0x320
[  829.440251]  ? perf_trace_lock+0xd6/0x900
[  829.444424]  ? rcu_note_context_switch+0x710/0x710
[  829.449364]  __should_failslab+0x124/0x180
[  829.453610]  should_failslab+0x9/0x14
[  829.457418]  kmem_cache_alloc+0x2af/0x760
[  829.457681] binder: 24432:24438 got transaction to invalid handle
[  829.461566]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  829.461584]  ? graph_lock+0x170/0x170
[  829.461602]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  829.461622]  __kernfs_new_node+0xe7/0x580
[  829.468731] binder: 24432:24438 transaction failed 29201/-22, size -1862702466781421550-1224979167354908963 line 2856
[  829.474247]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  829.474264]  ? find_held_lock+0x36/0x1c0
[  829.474288]  ? lock_downgrade+0x8e0/0x8e0
[  829.510952]  kernfs_new_node+0x80/0xf0
[  829.514839]  __kernfs_create_file+0x4d/0x330
[  829.519237]  sysfs_add_file_mode_ns+0x21a/0x560
[  829.523899]  sysfs_create_file_ns+0x8b/0xb0
[  829.528209]  device_create_file+0xf4/0x1e0
[  829.532435]  ? acpi_bind_one+0x8f0/0x8f0
[  829.536482]  device_add+0x3ec/0x16d0
[  829.540188]  ? device_private_init+0x230/0x230
[  829.544754]  ? kfree+0x1e9/0x260
[  829.548108]  ? kfree_const+0x5e/0x70
[  829.551813]  device_create_groups_vargs+0x1ff/0x270
[  829.556824]  device_create+0xd3/0x100
[  829.560624]  ? device_create_vargs+0x60/0x60
[  829.565033]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  829.570129]  ? trace_hardirqs_on+0xd/0x10
[  829.574276]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  829.579191]  ? graph_lock+0x170/0x170
[  829.582998]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  829.589138]  ? lock_release+0xa10/0xa10
[  829.593100]  ? check_same_owner+0x320/0x320
[  829.597499]  ? rcu_note_context_switch+0x710/0x710
[  829.602414]  ? __lock_acquire+0x7f5/0x5140
[  829.606644]  ? __might_sleep+0x95/0x190
[  829.610611]  ? kasan_check_write+0x14/0x20
[  829.614832]  ? __mutex_lock+0x7d9/0x17f0
[  829.618885]  ? genl_rcv_msg+0x13a/0x170
[  829.622850]  ? __lock_acquire+0x7f5/0x5140
[  829.627075]  ? mutex_trylock+0x2a0/0x2a0
[  829.631120]  ? perf_trace_lock+0xd6/0x900
[  829.635254]  ? graph_lock+0x170/0x170
[  829.639049]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  829.644229]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  829.649268]  ? validate_nla+0x2d9/0x7b0
[  829.653239]  hwsim_new_radio_nl+0x7b8/0xa60
[  829.657553]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  829.662737]  ? __netlink_ns_capable+0x100/0x130
[  829.667399]  genl_family_rcv_msg+0x889/0x1120
[  829.671889]  ? genl_rcv+0x40/0x40
[  829.675331]  ? lock_downgrade+0x8e0/0x8e0
[  829.679488]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  829.684501]  ? lock_acquire+0x1dc/0x520
[  829.688464]  ? genl_rcv+0x19/0x40
[  829.691921]  genl_rcv_msg+0xc6/0x170
[  829.695718]  netlink_rcv_skb+0x172/0x440
[  829.699776]  ? genl_family_rcv_msg+0x1120/0x1120
[  829.704522]  ? netlink_ack+0xbc0/0xbc0
[  829.708396]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  829.713587]  ? netlink_skb_destructor+0x210/0x210
[  829.718426]  genl_rcv+0x28/0x40
[  829.721875]  netlink_unicast+0x58b/0x740
[  829.726192]  ? netlink_attachskb+0x970/0x970
[  829.730592]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  829.736116]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  829.741120]  ? security_netlink_send+0x88/0xb0
[  829.745693]  netlink_sendmsg+0x9f0/0xfa0
[  829.749748]  ? netlink_unicast+0x740/0x740
[  829.753976]  ? security_socket_sendmsg+0x94/0xc0
[  829.758720]  ? netlink_unicast+0x740/0x740
[  829.762959]  sock_sendmsg+0xd5/0x120
[  829.766671]  ___sys_sendmsg+0x805/0x940
[  829.770648]  ? copy_msghdr_from_user+0x560/0x560
[  829.775400]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  829.780940]  ? proc_fail_nth_write+0x96/0x1f0
[  829.785440]  ? __fget_light+0x2ef/0x430
[  829.789405]  ? fget_raw+0x20/0x20
[  829.792845]  ? find_held_lock+0x36/0x1c0
[  829.796899]  ? kasan_check_write+0x14/0x20
[  829.801136]  ? wait_for_completion+0x870/0x870
[  829.805714]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  829.811238]  ? sockfd_lookup_light+0xc5/0x160
[  829.815721]  __sys_sendmsg+0x115/0x270
[  829.819596]  ? __ia32_sys_shutdown+0x80/0x80
[  829.823998]  ? __sb_end_write+0xac/0xe0
[  829.827971]  ? fput+0x130/0x1a0
[  829.831238]  ? ksys_write+0x1a6/0x250
[  829.835037]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  829.839871]  __x64_sys_sendmsg+0x78/0xb0
[  829.843923]  do_syscall_64+0x1b1/0x800
[  829.847802]  ? finish_task_switch+0x1ca/0x840
[  829.852288]  ? syscall_return_slowpath+0x5c0/0x5c0
[  829.857205]  ? syscall_return_slowpath+0x30f/0x5c0
[  829.862124]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  829.867482]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  829.872318]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  829.877502] RIP: 0033:0x455a09
[  829.880683] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  829.888379] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  829.895633] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  829.902887] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  829.910141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  829.917397] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000011
[  829.992249] binder: undelivered TRANSACTION_ERROR: 29201
2033/05/18 03:45:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:23 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:23 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xe00000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:23 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xe727]}, 0x10)

2033/05/18 03:45:23 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:23 executing program 0:
r0 = socket$kcm(0x29, 0x40000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
getsockname(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b78248f840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[@exit_looper={0x630d}, @release={0x40046306}], 0xc6, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:23 executing program 3 (fault-call:3 fault-nth:18):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:23 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/22, 0x16)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x14a8f3c44623abcf)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

[  830.151907] binder: 24460:24462 unknown command -129465673
[  830.159807] FAULT_INJECTION: forcing a failure.
[  830.159807] name failslab, interval 1, probability 0, space 0, times 0
[  830.169782] binder: 24460:24462 ioctl c0306201 20007000 returned -22
[  830.171292] CPU: 1 PID: 24458 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  830.185016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  830.193275] binder: 24460:24462 ioctl c0306201 20000240 returned -11
[  830.194361] Call Trace:
[  830.194389]  dump_stack+0x1b9/0x294
[  830.194409]  ? dump_stack_print_info.cold.2+0x52/0x52
[  830.194434]  ? mutex_trylock+0x2a0/0x2a0
[  830.210263] binder: 24460:24467 unknown command -129465673
[  830.212288]  should_fail.cold.4+0xa/0x1a
[  830.212308]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  830.212334]  ? graph_lock+0x170/0x170
[  830.219788] binder: 24460:24467 ioctl c0306201 20007000 returned -22
[  830.221995]  ? find_held_lock+0x36/0x1c0
[  830.222015]  ? find_held_lock+0x36/0x1c0
[  830.222035]  ? __lock_is_held+0xb5/0x140
[  830.222060]  ? check_same_owner+0x320/0x320
[  830.259681]  ? graph_lock+0x170/0x170
[  830.263499]  ? rcu_note_context_switch+0x710/0x710
[  830.268428]  ? kasan_check_write+0x14/0x20
[  830.272652]  __should_failslab+0x124/0x180
[  830.276877]  should_failslab+0x9/0x14
[  830.280664]  kmem_cache_alloc+0x2af/0x760
[  830.284804]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  830.289813]  __kernfs_new_node+0xe7/0x580
[  830.293978]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  830.298726]  ? lock_downgrade+0x8e0/0x8e0
[  830.302866]  ? kasan_check_read+0x11/0x20
[  830.307003]  ? do_raw_spin_unlock+0x9e/0x2e0
[  830.311404]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  830.315981]  kernfs_new_node+0x80/0xf0
[  830.319861]  kernfs_create_link+0x33/0x180
[  830.324088]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  830.329358]  sysfs_create_link+0x65/0xc0
[  830.333410]  device_add+0x481/0x16d0
[  830.337118]  ? device_private_init+0x230/0x230
[  830.341686]  ? kfree+0x1e9/0x260
[  830.345045]  ? kfree_const+0x5e/0x70
[  830.348749]  device_create_groups_vargs+0x1ff/0x270
[  830.353756]  device_create+0xd3/0x100
[  830.357553]  ? device_create_vargs+0x60/0x60
[  830.361962]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  830.367054]  ? trace_hardirqs_on+0xd/0x10
[  830.371209]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  830.376134]  ? graph_lock+0x170/0x170
[  830.379967]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  830.386134]  ? lock_release+0xa10/0xa10
[  830.390099]  ? check_same_owner+0x320/0x320
[  830.394434]  ? rcu_note_context_switch+0x710/0x710
[  830.399364]  ? __lock_acquire+0x7f5/0x5140
[  830.403589]  ? __might_sleep+0x95/0x190
[  830.407557]  ? kasan_check_write+0x14/0x20
[  830.411781]  ? __mutex_lock+0x7d9/0x17f0
[  830.415831]  ? genl_rcv_msg+0x13a/0x170
[  830.419796]  ? __lock_acquire+0x7f5/0x5140
[  830.424031]  ? mutex_trylock+0x2a0/0x2a0
[  830.428082]  ? graph_lock+0x170/0x170
[  830.431884]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  830.437088]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  830.442098]  ? validate_nla+0x2d9/0x7b0
[  830.446156]  hwsim_new_radio_nl+0x7b8/0xa60
[  830.450468]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  830.455649]  ? __netlink_ns_capable+0x100/0x130
[  830.460312]  genl_family_rcv_msg+0x889/0x1120
[  830.464809]  ? genl_rcv+0x40/0x40
[  830.468262]  ? lock_downgrade+0x8e0/0x8e0
[  830.472408]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  830.477419]  ? kasan_check_read+0x11/0x20
[  830.481557]  ? lock_acquire+0x1dc/0x520
[  830.485525]  ? genl_rcv+0x19/0x40
[  830.488982]  genl_rcv_msg+0xc6/0x170
[  830.492689]  netlink_rcv_skb+0x172/0x440
[  830.496738]  ? genl_family_rcv_msg+0x1120/0x1120
[  830.501489]  ? netlink_ack+0xbc0/0xbc0
[  830.505372]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  830.510554]  ? netlink_skb_destructor+0x210/0x210
[  830.515389]  genl_rcv+0x28/0x40
[  830.518656]  netlink_unicast+0x58b/0x740
[  830.522709]  ? netlink_attachskb+0x970/0x970
[  830.527110]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  830.532636]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  830.537641]  ? security_netlink_send+0x88/0xb0
[  830.542212]  netlink_sendmsg+0x9f0/0xfa0
[  830.546268]  ? netlink_unicast+0x740/0x740
[  830.550495]  ? security_socket_sendmsg+0x94/0xc0
[  830.555244]  ? netlink_unicast+0x740/0x740
[  830.559470]  sock_sendmsg+0xd5/0x120
[  830.563174]  ___sys_sendmsg+0x805/0x940
[  830.567141]  ? copy_msghdr_from_user+0x560/0x560
[  830.571898]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  830.577422]  ? proc_fail_nth_write+0x96/0x1f0
[  830.581910]  ? __fget_light+0x2ef/0x430
[  830.585961]  ? fget_raw+0x20/0x20
[  830.589402]  ? find_held_lock+0x36/0x1c0
[  830.593454]  ? kasan_check_write+0x14/0x20
[  830.597683]  ? wait_for_completion+0x870/0x870
[  830.602263]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  830.607788]  ? sockfd_lookup_light+0xc5/0x160
[  830.612272]  __sys_sendmsg+0x115/0x270
[  830.616148]  ? __ia32_sys_shutdown+0x80/0x80
[  830.620541]  ? __sb_end_write+0xac/0xe0
[  830.624524]  ? fput+0x130/0x1a0
[  830.627792]  ? ksys_write+0x1a6/0x250
[  830.631595]  __x64_sys_sendmsg+0x78/0xb0
[  830.635654]  do_syscall_64+0x1b1/0x800
[  830.639529]  ? finish_task_switch+0x1ca/0x840
[  830.644016]  ? syscall_return_slowpath+0x5c0/0x5c0
[  830.648936]  ? syscall_return_slowpath+0x30f/0x5c0
[  830.653868]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  830.659234]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  830.664069]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  830.669243] RIP: 0033:0x455a09
[  830.672418] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  830.680114] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  830.687367] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  830.694624] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
2033/05/18 03:45:24 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x571c]}, 0x10)

2033/05/18 03:45:24 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:24 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x80800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x89, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  830.701880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  830.709135] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000012
[  830.730900] binder: 24456:24459 unknown command 25361
2033/05/18 03:45:24 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  830.771449] binder: 24456:24459 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:24 executing program 3 (fault-call:3 fault-nth:19):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:24 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x27e7]}, 0x10)

[  830.826168] binder: 24481:24483 unknown command -1068997871
[  830.846946] binder: 24481:24483 ioctl c0306201 20007000 returned -22
[  830.874714] binder: 24481:24483 ioctl c0306201 20000240 returned -11
[  830.883725] FAULT_INJECTION: forcing a failure.
[  830.883725] name failslab, interval 1, probability 0, space 0, times 0
[  830.895115] CPU: 0 PID: 24490 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  830.902399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  830.911761] Call Trace:
[  830.914376]  dump_stack+0x1b9/0x294
[  830.918025]  ? dump_stack_print_info.cold.2+0x52/0x52
[  830.923238]  should_fail.cold.4+0xa/0x1a
[  830.927311]  ? perf_trace_lock+0xd6/0x900
[  830.931475]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  830.936588]  ? zap_class+0x720/0x720
[  830.940323]  ? graph_lock+0x170/0x170
[  830.944137]  ? __mutex_lock+0x7d9/0x17f0
[  830.948216]  ? find_held_lock+0x36/0x1c0
[  830.952296]  ? __lock_is_held+0xb5/0x140
[  830.956387]  ? check_same_owner+0x320/0x320
[  830.960728]  ? rcu_note_context_switch+0x710/0x710
[  830.965675]  __should_failslab+0x124/0x180
[  830.969925]  should_failslab+0x9/0x14
2033/05/18 03:45:24 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:24 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  830.973756]  __kmalloc_track_caller+0x2c4/0x760
[  830.978436]  ? graph_lock+0x170/0x170
[  830.982246]  ? graph_lock+0x170/0x170
[  830.986061]  ? kstrdup_const+0x66/0x80
[  830.989962]  kstrdup+0x39/0x70
[  830.993173]  kstrdup_const+0x66/0x80
[  830.996900]  __kernfs_new_node+0xa8/0x580
[  831.001054]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  831.005820]  ? lock_downgrade+0x8e0/0x8e0
[  831.009981]  ? kasan_check_read+0x11/0x20
[  831.014140]  ? do_raw_spin_unlock+0x9e/0x2e0
[  831.018557]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  831.023151]  kernfs_new_node+0x80/0xf0
[  831.027051]  kernfs_create_link+0x33/0x180
[  831.031298]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  831.036587]  sysfs_create_link+0x65/0xc0
[  831.040661]  device_add+0x7a0/0x16d0
[  831.044411]  ? device_private_init+0x230/0x230
[  831.048985]  ? kfree+0x1e9/0x260
[  831.052353]  ? kfree_const+0x5e/0x70
[  831.056061]  device_create_groups_vargs+0x1ff/0x270
[  831.061068]  device_create+0xd3/0x100
[  831.064867]  ? device_create_vargs+0x60/0x60
[  831.069268]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  831.074360]  ? trace_hardirqs_on+0xd/0x10
[  831.078501]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  831.083416]  ? graph_lock+0x170/0x170
[  831.087215]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  831.093354]  ? lock_release+0xa10/0xa10
[  831.097317]  ? check_same_owner+0x320/0x320
[  831.101633]  ? rcu_note_context_switch+0x710/0x710
[  831.106549]  ? __lock_acquire+0x7f5/0x5140
[  831.110775]  ? __might_sleep+0x95/0x190
[  831.114739]  ? kasan_check_write+0x14/0x20
[  831.118970]  ? __mutex_lock+0x7d9/0x17f0
[  831.123108]  ? genl_rcv_msg+0x13a/0x170
[  831.127070]  ? __lock_acquire+0x7f5/0x5140
[  831.131296]  ? mutex_trylock+0x2a0/0x2a0
[  831.135355]  ? perf_trace_lock+0xd6/0x900
[  831.139487]  ? graph_lock+0x170/0x170
[  831.143278]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  831.148469]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  831.153475]  ? validate_nla+0x2d9/0x7b0
[  831.157443]  hwsim_new_radio_nl+0x7b8/0xa60
[  831.161757]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  831.166948]  ? __netlink_ns_capable+0x100/0x130
[  831.171612]  genl_family_rcv_msg+0x889/0x1120
[  831.176099]  ? genl_rcv+0x40/0x40
[  831.179538]  ? lock_downgrade+0x8e0/0x8e0
[  831.183675]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  831.188684]  ? lock_acquire+0x1dc/0x520
[  831.192645]  ? genl_rcv+0x19/0x40
[  831.196099]  genl_rcv_msg+0xc6/0x170
[  831.199803]  netlink_rcv_skb+0x172/0x440
[  831.203854]  ? genl_family_rcv_msg+0x1120/0x1120
[  831.208598]  ? netlink_ack+0xbc0/0xbc0
[  831.212477]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  831.217745]  ? netlink_skb_destructor+0x210/0x210
[  831.222585]  genl_rcv+0x28/0x40
[  831.225853]  netlink_unicast+0x58b/0x740
[  831.229913]  ? netlink_attachskb+0x970/0x970
[  831.234311]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  831.239839]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  831.244847]  ? security_netlink_send+0x88/0xb0
[  831.249420]  netlink_sendmsg+0x9f0/0xfa0
[  831.253477]  ? netlink_unicast+0x740/0x740
[  831.257713]  ? security_socket_sendmsg+0x94/0xc0
[  831.262454]  ? netlink_unicast+0x740/0x740
[  831.266678]  sock_sendmsg+0xd5/0x120
[  831.270381]  ___sys_sendmsg+0x805/0x940
[  831.274353]  ? copy_msghdr_from_user+0x560/0x560
[  831.279192]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  831.284715]  ? proc_fail_nth_write+0x96/0x1f0
[  831.289200]  ? __fget_light+0x2ef/0x430
[  831.293163]  ? fget_raw+0x20/0x20
[  831.296600]  ? find_held_lock+0x36/0x1c0
[  831.300656]  ? kasan_check_write+0x14/0x20
[  831.304887]  ? wait_for_completion+0x870/0x870
[  831.309467]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  831.314993]  ? sockfd_lookup_light+0xc5/0x160
[  831.319486]  __sys_sendmsg+0x115/0x270
[  831.323372]  ? __ia32_sys_shutdown+0x80/0x80
[  831.327769]  ? __sb_end_write+0xac/0xe0
[  831.331737]  ? fput+0x130/0x1a0
[  831.335019]  ? ksys_write+0x1a6/0x250
[  831.338825]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  831.343665]  __x64_sys_sendmsg+0x78/0xb0
[  831.347718]  do_syscall_64+0x1b1/0x800
[  831.351612]  ? finish_task_switch+0x1ca/0x840
[  831.356095]  ? syscall_return_slowpath+0x5c0/0x5c0
[  831.361019]  ? syscall_return_slowpath+0x30f/0x5c0
[  831.365946]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  831.371301]  ? trace_hardirqs_off_thunk+0x1a/0x1c
2033/05/18 03:45:25 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xbf95000000000000]}, 0x10)

[  831.376141]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  831.381322] RIP: 0033:0x455a09
[  831.384499] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  831.392195] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  831.399471] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  831.406729] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  831.414070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  831.421323] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000013
2033/05/18 03:45:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  831.442531] binder: 24502:24503 unknown command 25361
[  831.445808] binder: 24481:24483 unknown command -1068997871
[  831.467397] binder: 24481:24483 ioctl c0306201 20007000 returned -22
[  831.485303] binder: 24502:24503 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:25 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xb804000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:25 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:25 executing program 0:
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000340)="0047fc2f07d82c992409703e456939789d21587cc61f5431949b13c4367d1b7dec825d444ddcfaaa0ebd3c9dc4bdc14c1e2af598c35008438c36def78889defc1e01202ad0306a76a6ddc64206280611dc0f83517929e64545bd9eeba4893ecab21193071155284894fd6eb91b7b2bf2250f37a7c48be4a8462c247f26ce6706ca5f03de8277d41b3f4bd27c9bd7e1088fff4128")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:25 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x100000001, @mcast1={0xff, 0x1, [], 0x1}, 0xf7eb}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xfffffffffffff5b2}}, {{0xa, 0x4e20, 0xfffffffffffffffe, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x210)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x4b)

2033/05/18 03:45:25 executing program 3 (fault-call:3 fault-nth:20):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:25 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xaf2d0000]}, 0x10)

[  831.715625] FAULT_INJECTION: forcing a failure.
[  831.715625] name failslab, interval 1, probability 0, space 0, times 0
[  831.726967] CPU: 0 PID: 24530 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  831.734246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  831.743613] Call Trace:
[  831.746220]  dump_stack+0x1b9/0x294
[  831.749872]  ? dump_stack_print_info.cold.2+0x52/0x52
[  831.755109]  should_fail.cold.4+0xa/0x1a
[  831.759186]  ? __kmalloc_track_caller+0x14a/0x760
[  831.764043]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  831.769153]  ? device_create_groups_vargs+0x1ff/0x270
[  831.774331]  ? device_create+0xd3/0x100
[  831.778301]  ? mac80211_hwsim_new_radio+0x3c6/0x3410
[  831.783399]  ? hwsim_new_radio_nl+0x7b8/0xa60
[  831.787886]  ? genl_family_rcv_msg+0x889/0x1120
[  831.792541]  ? genl_rcv_msg+0xc6/0x170
[  831.796420]  ? netlink_rcv_skb+0x172/0x440
[  831.800656]  ? graph_lock+0x170/0x170
[  831.804445]  ? ___sys_sendmsg+0x805/0x940
[  831.808576]  ? __sys_sendmsg+0x115/0x270
[  831.812635]  ? __x64_sys_sendmsg+0x78/0xb0
[  831.816863]  ? do_syscall_64+0x1b1/0x800
[  831.820914]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  831.826275]  ? find_held_lock+0x36/0x1c0
[  831.830329]  ? __lock_is_held+0xb5/0x140
[  831.834397]  ? check_same_owner+0x320/0x320
[  831.838716]  ? rcu_note_context_switch+0x710/0x710
[  831.843634]  ? rcu_read_lock_sched_held+0x108/0x120
[  831.848652]  __should_failslab+0x124/0x180
[  831.852886]  should_failslab+0x9/0x14
[  831.856698]  kmem_cache_alloc+0x2af/0x760
[  831.860839]  ? memcpy+0x45/0x50
[  831.864107]  ? kstrdup+0x59/0x70
[  831.867479]  __kernfs_new_node+0xe7/0x580
[  831.871617]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  831.876365]  ? lock_downgrade+0x8e0/0x8e0
[  831.880508]  ? kasan_check_read+0x11/0x20
[  831.884645]  ? do_raw_spin_unlock+0x9e/0x2e0
[  831.889054]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  831.893627]  kernfs_new_node+0x80/0xf0
[  831.897503]  kernfs_create_link+0x33/0x180
[  831.901730]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  831.906997]  sysfs_create_link+0x65/0xc0
[  831.911055]  device_add+0x7a0/0x16d0
[  831.914764]  ? device_private_init+0x230/0x230
[  831.919360]  ? kfree+0x1e9/0x260
[  831.922717]  ? kfree_const+0x5e/0x70
[  831.926423]  device_create_groups_vargs+0x1ff/0x270
[  831.931426]  device_create+0xd3/0x100
[  831.935213]  ? device_create_vargs+0x60/0x60
[  831.939615]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  831.944702]  ? trace_hardirqs_on+0xd/0x10
[  831.948857]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  831.953772]  ? graph_lock+0x170/0x170
[  831.957569]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  831.963706]  ? lock_release+0xa10/0xa10
[  831.967667]  ? check_same_owner+0x320/0x320
[  831.971978]  ? rcu_note_context_switch+0x710/0x710
[  831.976910]  ? __lock_acquire+0x7f5/0x5140
[  831.981134]  ? __might_sleep+0x95/0x190
[  831.985099]  ? kasan_check_write+0x14/0x20
[  831.989322]  ? __mutex_lock+0x7d9/0x17f0
[  831.993375]  ? genl_rcv_msg+0x13a/0x170
[  831.997338]  ? __lock_acquire+0x7f5/0x5140
[  832.001560]  ? mutex_trylock+0x2a0/0x2a0
[  832.005615]  ? perf_trace_lock+0xd6/0x900
[  832.009747]  ? graph_lock+0x170/0x170
[  832.013538]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  832.018716]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  832.023726]  ? validate_nla+0x2d9/0x7b0
[  832.027690]  hwsim_new_radio_nl+0x7b8/0xa60
[  832.032001]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  832.037191]  ? __netlink_ns_capable+0x100/0x130
[  832.041861]  genl_family_rcv_msg+0x889/0x1120
[  832.046370]  ? genl_rcv+0x40/0x40
[  832.049809]  ? lock_downgrade+0x8e0/0x8e0
[  832.053944]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  832.058955]  ? lock_acquire+0x1dc/0x520
[  832.062927]  ? genl_rcv+0x19/0x40
[  832.066381]  genl_rcv_msg+0xc6/0x170
[  832.070094]  netlink_rcv_skb+0x172/0x440
[  832.074152]  ? genl_family_rcv_msg+0x1120/0x1120
[  832.078902]  ? netlink_ack+0xbc0/0xbc0
[  832.082786]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  832.087965]  ? netlink_skb_destructor+0x210/0x210
[  832.092801]  genl_rcv+0x28/0x40
[  832.096067]  netlink_unicast+0x58b/0x740
[  832.100121]  ? netlink_attachskb+0x970/0x970
[  832.104516]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  832.110043]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  832.115051]  ? security_netlink_send+0x88/0xb0
[  832.119631]  netlink_sendmsg+0x9f0/0xfa0
[  832.123689]  ? netlink_unicast+0x740/0x740
[  832.127914]  ? security_socket_sendmsg+0x94/0xc0
[  832.132658]  ? netlink_unicast+0x740/0x740
[  832.136883]  sock_sendmsg+0xd5/0x120
[  832.140586]  ___sys_sendmsg+0x805/0x940
[  832.144556]  ? copy_msghdr_from_user+0x560/0x560
[  832.149306]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  832.154841]  ? proc_fail_nth_write+0x96/0x1f0
[  832.159328]  ? __fget_light+0x2ef/0x430
[  832.163300]  ? fget_raw+0x20/0x20
[  832.166850]  ? find_held_lock+0x36/0x1c0
[  832.170903]  ? kasan_check_write+0x14/0x20
[  832.175132]  ? wait_for_completion+0x870/0x870
[  832.179721]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  832.185250]  ? sockfd_lookup_light+0xc5/0x160
[  832.189733]  __sys_sendmsg+0x115/0x270
[  832.193694]  ? __ia32_sys_shutdown+0x80/0x80
[  832.198089]  ? __sb_end_write+0xac/0xe0
[  832.202053]  ? fput+0x130/0x1a0
[  832.205322]  ? ksys_write+0x1a6/0x250
[  832.209122]  __x64_sys_sendmsg+0x78/0xb0
[  832.213185]  do_syscall_64+0x1b1/0x800
[  832.217058]  ? finish_task_switch+0x1ca/0x840
[  832.221541]  ? syscall_return_slowpath+0x5c0/0x5c0
[  832.226460]  ? syscall_return_slowpath+0x30f/0x5c0
[  832.231395]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  832.236753]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  832.241591]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  832.246765] RIP: 0033:0x455a09
[  832.249939] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  832.257637] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  832.264891] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  832.272144] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  832.279401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  832.286666] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000014
[  832.299658] binder: 24532:24534 unknown command 859503465
[  832.321119] binder: 24532:24534 ioctl c0306201 20007000 returned -22
[  832.344662] binder: 24532:24534 ioctl c0306201 20000240 returned -11
[  832.364397] binder: 24532:24534 unknown command 859503465
[  832.378237] binder: 24532:24534 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:26 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x100000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8000, @ipv4={[], [0xff, 0xff], @rand_addr=0x7ff}}, @in={0x2, 0x4e22, @loopback=0x7f000001}], 0x2c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:26 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:26 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4fa10000]}, 0x10)

2033/05/18 03:45:26 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10)
r2 = dup(r0)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100))
write(r1, &(0x7f0000000140)="915988b96037d3dde0108518fdde3d186f185fa897d748bb690320ad1d319884231851a8", 0x24)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:26 executing program 3 (fault-call:3 fault-nth:21):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  832.710010] binder: 24567:24569 unknown command 4743953
[  832.710942] FAULT_INJECTION: forcing a failure.
[  832.710942] name failslab, interval 1, probability 0, space 0, times 0
[  832.726794] CPU: 1 PID: 24570 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  832.734070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  832.743425] Call Trace:
[  832.746031]  dump_stack+0x1b9/0x294
[  832.749683]  ? dump_stack_print_info.cold.2+0x52/0x52
[  832.754988]  ? rcu_note_context_switch+0x710/0x710
[  832.760056]  should_fail.cold.4+0xa/0x1a
[  832.760465] binder: 24567:24569 ioctl c0306201 20007000 returned -22
[  832.764123]  ? kasan_check_write+0x14/0x20
[  832.764144]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  832.764167]  ? zap_class+0x720/0x720
[  832.764184]  ? graph_lock+0x170/0x170
[  832.779053] binder: 24556:24557 transaction failed 29189/-22, size 0-0 line 2856
[  832.780004]  ? ___ratelimit.cold.2+0x6a/0x6a
[  832.780022]  ? __mutex_lock+0x7d9/0x17f0
[  832.780044]  ? find_held_lock+0x36/0x1c0
2033/05/18 03:45:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  832.807543]  ? __lock_is_held+0xb5/0x140
[  832.811629]  ? check_same_owner+0x320/0x320
[  832.815965]  ? rcu_note_context_switch+0x710/0x710
[  832.820578] binder: 24556:24583 transaction failed 29189/-22, size 0-0 line 2856
[  832.820895]  ? lock_downgrade+0x8e0/0x8e0
[  832.820913]  __should_failslab+0x124/0x180
[  832.820934]  should_failslab+0x9/0x14
[  832.840649]  kmem_cache_alloc+0x2af/0x760
[  832.845006]  ? wait_for_completion+0x870/0x870
[  832.849604]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  832.854631]  __kernfs_new_node+0xe7/0x580
[  832.858794]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  832.863558]  ? __lock_is_held+0xb5/0x140
[  832.867625]  ? wait_for_completion+0x870/0x870
[  832.872243]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  832.874736] binder: undelivered TRANSACTION_ERROR: 29189
[  832.877890]  ? kernfs_put+0x493/0x750
[  832.877909]  kernfs_new_node+0x80/0xf0
[  832.877927]  kernfs_create_dir_ns+0x3d/0x140
[  832.877947]  internal_create_group+0x110/0x970
[  832.877974]  sysfs_create_group+0x1f/0x30
[  832.904311]  dpm_sysfs_add+0x26/0x210
[  832.908125]  device_add+0xa11/0x16d0
[  832.911856]  ? device_private_init+0x230/0x230
[  832.916444]  ? kfree+0x1e9/0x260
[  832.919819]  ? kfree_const+0x5e/0x70
[  832.923550]  device_create_groups_vargs+0x1ff/0x270
[  832.928575]  device_create+0xd3/0x100
[  832.932385]  ? device_create_vargs+0x60/0x60
[  832.936809]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  832.942046]  ? trace_hardirqs_on+0xd/0x10
[  832.946207]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  832.951150]  ? graph_lock+0x170/0x170
[  832.954977]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  832.961140]  ? lock_release+0xa10/0xa10
[  832.965122]  ? check_same_owner+0x320/0x320
[  832.969463]  ? rcu_note_context_switch+0x710/0x710
[  832.974401]  ? __lock_acquire+0x7f5/0x5140
[  832.978646]  ? __might_sleep+0x95/0x190
[  832.982631]  ? kasan_check_write+0x14/0x20
[  832.986873]  ? __mutex_lock+0x7d9/0x17f0
[  832.990942]  ? genl_rcv_msg+0x13a/0x170
[  832.994928]  ? __lock_acquire+0x7f5/0x5140
[  832.999170]  ? mutex_trylock+0x2a0/0x2a0
[  833.003232]  ? perf_trace_lock+0xd6/0x900
[  833.007389]  ? graph_lock+0x170/0x170
[  833.011286]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  833.016494]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  833.021513]  ? validate_nla+0x2d9/0x7b0
[  833.025496]  hwsim_new_radio_nl+0x7b8/0xa60
[  833.029922]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  833.035129]  ? __netlink_ns_capable+0x100/0x130
[  833.039819]  genl_family_rcv_msg+0x889/0x1120
[  833.044343]  ? genl_rcv+0x40/0x40
[  833.047806]  ? lock_downgrade+0x8e0/0x8e0
[  833.051961]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  833.057004]  ? lock_acquire+0x1dc/0x520
[  833.060986]  ? genl_rcv+0x19/0x40
[  833.064462]  genl_rcv_msg+0xc6/0x170
[  833.068185]  netlink_rcv_skb+0x172/0x440
[  833.072254]  ? genl_family_rcv_msg+0x1120/0x1120
[  833.077121]  ? netlink_ack+0xbc0/0xbc0
[  833.081016]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  833.086215]  ? netlink_skb_destructor+0x210/0x210
[  833.091072]  genl_rcv+0x28/0x40
[  833.094344]  netlink_unicast+0x58b/0x740
[  833.098402]  ? netlink_attachskb+0x970/0x970
[  833.102802]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  833.108329]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  833.113337]  ? security_netlink_send+0x88/0xb0
[  833.117912]  netlink_sendmsg+0x9f0/0xfa0
[  833.121969]  ? netlink_unicast+0x740/0x740
[  833.126197]  ? security_socket_sendmsg+0x94/0xc0
[  833.130939]  ? netlink_unicast+0x740/0x740
[  833.135167]  sock_sendmsg+0xd5/0x120
[  833.138871]  ___sys_sendmsg+0x805/0x940
[  833.142838]  ? copy_msghdr_from_user+0x560/0x560
[  833.147593]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  833.153116]  ? proc_fail_nth_write+0x96/0x1f0
[  833.157613]  ? __fget_light+0x2ef/0x430
[  833.161575]  ? fget_raw+0x20/0x20
[  833.165018]  ? find_held_lock+0x36/0x1c0
[  833.169073]  ? kasan_check_write+0x14/0x20
[  833.173299]  ? wait_for_completion+0x870/0x870
[  833.177879]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  833.183406]  ? sockfd_lookup_light+0xc5/0x160
[  833.187890]  __sys_sendmsg+0x115/0x270
[  833.191765]  ? __ia32_sys_shutdown+0x80/0x80
[  833.196160]  ? __sb_end_write+0xac/0xe0
[  833.200123]  ? fput+0x130/0x1a0
[  833.203389]  ? ksys_write+0x1a6/0x250
[  833.207183]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  833.212025]  __x64_sys_sendmsg+0x78/0xb0
[  833.216075]  do_syscall_64+0x1b1/0x800
[  833.219949]  ? finish_task_switch+0x1ca/0x840
[  833.224432]  ? syscall_return_slowpath+0x5c0/0x5c0
[  833.229437]  ? syscall_return_slowpath+0x30f/0x5c0
[  833.234366]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  833.239722]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  833.244560]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  833.249735] RIP: 0033:0x455a09
[  833.252908] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  833.260604] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  833.267859] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  833.275111] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  833.282376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  833.289632] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000015
2033/05/18 03:45:27 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xfffffffffffffffb, 0x4)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:27 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:27 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x6fb80000]}, 0x10)

2033/05/18 03:45:27 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0)
llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/149, 0x95)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x2)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x47, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x9, 0xfd}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="01fed700b660a87c909c148ddb55e2380cd7d55ba9d55355997fb2823fc2d364b3646d9cb99583ad8cded801260d096c7d867fa884d17bedcffa85cbc775799544380808970a484d71f9588e3ca761443ee4bbcdf34d568a957237d76e70827e7a63632bd2b9eb4a824f9ded84f34d73f7676671f3e63220903ea3d42464500e0d9c437d7ab0911b52ec54e22a08ca20ed4c83be9911a1832df60376df7a92cb11bcbe057685fb4c21225974167b93bd3408000b6cc99e54cae66fbf32029b7375cc4064bb1673d2423998be6b3429e2c57442e8ca6cef127b071f"], 0xdf)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:27 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:27 executing program 3 (fault-call:3 fault-nth:22):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:27 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x200000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:27 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  833.710290] binder: 24606:24616 unknown command 4743953
[  833.711316] FAULT_INJECTION: forcing a failure.
[  833.711316] name failslab, interval 1, probability 0, space 0, times 0
[  833.720683] binder: 24603:24611 transaction failed 29189/-22, size 0-0 line 2856
[  833.727119] CPU: 1 PID: 24615 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  833.727130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  833.727141] Call Trace:
[  833.753871]  dump_stack+0x1b9/0x294
[  833.754215] binder: 24606:24616 ioctl c0306201 20007000 returned -22
[  833.757617]  ? dump_stack_print_info.cold.2+0x52/0x52
[  833.757645]  should_fail.cold.4+0xa/0x1a
[  833.757666]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  833.778477]  ? lock_release+0xa10/0xa10
[  833.782461]  ? graph_lock+0x170/0x170
[  833.786269]  ? rcu_note_context_switch+0x710/0x710
[  833.791209]  ? find_held_lock+0x36/0x1c0
[  833.793651] binder: 24603:24611 transaction failed 29189/-22, size 0-0 line 2856
[  833.795280]  ? find_held_lock+0x36/0x1c0
[  833.795302]  ? __lock_is_held+0xb5/0x140
[  833.795330]  ? check_same_owner+0x320/0x320
[  833.815258]  ? rcu_note_context_switch+0x710/0x710
[  833.820199]  __should_failslab+0x124/0x180
[  833.824448]  should_failslab+0x9/0x14
[  833.828259]  kmem_cache_alloc+0x2af/0x760
[  833.832416]  ? kasan_check_write+0x14/0x20
[  833.836660]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  833.841689]  __kernfs_new_node+0xe7/0x580
[  833.845844]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  833.850615]  ? kasan_check_write+0x14/0x20
[  833.854858]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  833.859793]  ? graph_lock+0x170/0x170
[  833.863610]  ? wait_for_completion+0x870/0x870
[  833.868202]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  833.873747]  kernfs_new_node+0x80/0xf0
[  833.877647]  __kernfs_create_file+0x4d/0x330
[  833.882068]  sysfs_add_file_mode_ns+0x21a/0x560
[  833.883289] binder: undelivered TRANSACTION_ERROR: 29189
[  833.886742]  sysfs_add_file+0x4e/0x60
[  833.886762]  sysfs_merge_group+0xfa/0x230
[  833.886786]  dpm_sysfs_add+0x161/0x210
[  833.886804]  device_add+0xa11/0x16d0
[  833.886825]  ? device_private_init+0x230/0x230
[  833.886842]  ? kfree+0x1e9/0x260
[  833.915706]  ? kfree_const+0x5e/0x70
[  833.919437]  device_create_groups_vargs+0x1ff/0x270
[  833.924466]  device_create+0xd3/0x100
[  833.928274]  ? device_create_vargs+0x60/0x60
[  833.932699]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  833.937810]  ? trace_hardirqs_on+0xd/0x10
[  833.941973]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  833.946911]  ? graph_lock+0x170/0x170
[  833.950720]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  833.956864]  ? lock_release+0xa10/0xa10
[  833.960829]  ? check_same_owner+0x320/0x320
[  833.965142]  ? rcu_note_context_switch+0x710/0x710
[  833.970067]  ? __lock_acquire+0x7f5/0x5140
[  833.974299]  ? __might_sleep+0x95/0x190
[  833.978265]  ? kasan_check_write+0x14/0x20
[  833.982490]  ? __mutex_lock+0x7d9/0x17f0
[  833.986545]  ? genl_rcv_msg+0x13a/0x170
[  833.990515]  ? __lock_acquire+0x7f5/0x5140
[  833.994739]  ? mutex_trylock+0x2a0/0x2a0
[  833.998788]  ? perf_trace_lock+0xd6/0x900
[  834.002921]  ? graph_lock+0x170/0x170
[  834.006714]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  834.011893]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  834.016898]  ? validate_nla+0x2d9/0x7b0
[  834.020866]  hwsim_new_radio_nl+0x7b8/0xa60
[  834.025174]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  834.030356]  ? __netlink_ns_capable+0x100/0x130
[  834.035026]  genl_family_rcv_msg+0x889/0x1120
[  834.039530]  ? genl_rcv+0x40/0x40
[  834.042971]  ? lock_downgrade+0x8e0/0x8e0
[  834.047110]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  834.052123]  ? lock_acquire+0x1dc/0x520
[  834.056099]  ? genl_rcv+0x19/0x40
[  834.059554]  genl_rcv_msg+0xc6/0x170
[  834.063278]  netlink_rcv_skb+0x172/0x440
[  834.067335]  ? genl_family_rcv_msg+0x1120/0x1120
[  834.072079]  ? netlink_ack+0xbc0/0xbc0
[  834.075952]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  834.081132]  ? netlink_skb_destructor+0x210/0x210
[  834.085970]  genl_rcv+0x28/0x40
[  834.089238]  netlink_unicast+0x58b/0x740
[  834.093300]  ? netlink_attachskb+0x970/0x970
[  834.097706]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  834.103231]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  834.108236]  ? security_netlink_send+0x88/0xb0
[  834.112808]  netlink_sendmsg+0x9f0/0xfa0
[  834.116862]  ? netlink_unicast+0x740/0x740
[  834.121100]  ? security_socket_sendmsg+0x94/0xc0
[  834.125840]  ? netlink_unicast+0x740/0x740
[  834.130064]  sock_sendmsg+0xd5/0x120
[  834.133771]  ___sys_sendmsg+0x805/0x940
[  834.137740]  ? copy_msghdr_from_user+0x560/0x560
[  834.142493]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  834.148022]  ? proc_fail_nth_write+0x96/0x1f0
[  834.152516]  ? __fget_light+0x2ef/0x430
[  834.156483]  ? fget_raw+0x20/0x20
[  834.159931]  ? find_held_lock+0x36/0x1c0
[  834.163992]  ? kasan_check_write+0x14/0x20
[  834.168223]  ? wait_for_completion+0x870/0x870
[  834.172804]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  834.178329]  ? sockfd_lookup_light+0xc5/0x160
[  834.182821]  __sys_sendmsg+0x115/0x270
[  834.186696]  ? __ia32_sys_shutdown+0x80/0x80
[  834.191091]  ? __sb_end_write+0xac/0xe0
[  834.195059]  ? fput+0x130/0x1a0
[  834.198325]  ? ksys_write+0x1a6/0x250
[  834.202129]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  834.206966]  __x64_sys_sendmsg+0x78/0xb0
[  834.211021]  do_syscall_64+0x1b1/0x800
[  834.214900]  ? finish_task_switch+0x1ca/0x840
[  834.219383]  ? syscall_return_slowpath+0x5c0/0x5c0
[  834.224308]  ? syscall_return_slowpath+0x30f/0x5c0
[  834.230712]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  834.236073]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  834.240908]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  834.246095] RIP: 0033:0x455a09
[  834.249267] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
2033/05/18 03:45:27 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="58863e7a"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x8, 0x0, &(0x7f0000000180)="b3"})
getpeername(r0, &(0x7f0000000280)=@ipx, &(0x7f0000000100)=0x80)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r3=>0x0})
ioctl$TIOCSBRK(r0, 0x5427)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r3, r4, 0x353})

2033/05/18 03:45:27 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:28 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x11000000]}, 0x10)

[  834.257053] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  834.264306] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  834.271575] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  834.278839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  834.286095] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000016
2033/05/18 03:45:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:28 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x4]}, 0x10)

2033/05/18 03:45:28 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  834.333339] binder: 24630:24633 unknown command 2050917976
[  834.357268] binder: 24630:24633 ioctl c0306201 20007000 returned -22
[  834.385930] binder: 24630:24633 ioctl c0306201 20000140 returned -11
[  834.423276] binder: 24630:24633 unknown command 2050917976
[  834.437566] binder: 24630:24633 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:28 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xa00000000000000]}, 0x10)

2033/05/18 03:45:28 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000040)="3630c4cd9b47f98adadc1b8f3797def0f0db7a3043b7f03d7eefb887ff47f27ed93166e7111982b0cfbfdde6364c87814a3d540bb3c57369eef8a825c2120adbe82e88b8d08b49156f5d52c20e492ae4d78434408d7e8f9e0156f6bb615508b2fce456338035cfbae3c1323f76f42155fe600def84070006f22e54eca274ed0c5d2358f429248f3bd0cc2e5afd7e5c961633203f807ebf3412fb3b96e791491ddf39126216bfe198c1423d9814ef52c91ebc96891ea5", 0xb6, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0x81, @loopback={0x0, 0x1}, 0x5}, 0x1c)
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x40)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
close(r0)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000001c0)={0x47, 0x3, 0x1})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000280)=0x106000)

2033/05/18 03:45:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffff7f, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:28 executing program 0:
r0 = socket$kcm(0x29, 0x200000005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f077a6c4c61345a")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:28 executing program 3 (fault-call:3 fault-nth:23):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:28 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:28 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  834.870522] binder: 24669:24670 transaction failed 29189/-22, size 0-0 line 2856
[  834.878238] FAULT_INJECTION: forcing a failure.
[  834.878238] name failslab, interval 1, probability 0, space 0, times 0
[  834.889524] CPU: 1 PID: 24677 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  834.896800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  834.906157] Call Trace:
[  834.908086] binder: 24669:24670 transaction failed 29189/-22, size 0-0 line 2856
[  834.908754]  dump_stack+0x1b9/0x294
[  834.908776]  ? dump_stack_print_info.cold.2+0x52/0x52
[  834.925090]  ? __mutex_lock+0x7d9/0x17f0
[  834.929164]  should_fail.cold.4+0xa/0x1a
[  834.933234]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  834.938349]  ? kasan_kmalloc+0xc4/0xe0
[  834.942251]  ? graph_lock+0x170/0x170
[  834.946063]  ? find_held_lock+0x36/0x1c0
[  834.950169]  ? __lock_is_held+0xb5/0x140
[  834.954240]  ? check_same_owner+0x320/0x320
[  834.958555]  ? kasan_check_write+0x14/0x20
[  834.962787]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  834.967715]  ? rcu_note_context_switch+0x710/0x710
[  834.972641]  __should_failslab+0x124/0x180
[  834.977130]  should_failslab+0x9/0x14
[  834.980932]  kmem_cache_alloc+0x2af/0x760
[  834.985070]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  834.989996]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  834.995010]  __kernfs_new_node+0xe7/0x580
[  834.999164]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  835.003908]  ? mutex_unlock+0xd/0x10
[  835.007618]  ? kernfs_activate+0x20e/0x2a0
[  835.011842]  ? kernfs_walk_and_get_ns+0x320/0x320
[  835.016673]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  835.022196]  ? kernfs_link_sibling+0x1d2/0x3b0
[  835.026772]  kernfs_new_node+0x80/0xf0
[  835.030652]  __kernfs_create_file+0x4d/0x330
[  835.035052]  sysfs_add_file_mode_ns+0x21a/0x560
[  835.039720]  sysfs_add_file+0x4e/0x60
[  835.043511]  sysfs_merge_group+0xfa/0x230
[  835.047660]  dpm_sysfs_add+0x161/0x210
[  835.051537]  device_add+0xa11/0x16d0
[  835.055241]  ? device_private_init+0x230/0x230
[  835.059818]  ? kfree+0x1e9/0x260
[  835.063179]  ? kfree_const+0x5e/0x70
[  835.066884]  device_create_groups_vargs+0x1ff/0x270
[  835.071893]  device_create+0xd3/0x100
[  835.075769]  ? device_create_vargs+0x60/0x60
[  835.080169]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  835.085259]  ? trace_hardirqs_on+0xd/0x10
[  835.089398]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  835.094322]  ? graph_lock+0x170/0x170
[  835.098121]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  835.104265]  ? lock_release+0xa10/0xa10
[  835.108237]  ? check_same_owner+0x320/0x320
[  835.112550]  ? rcu_note_context_switch+0x710/0x710
[  835.117465]  ? __lock_acquire+0x7f5/0x5140
[  835.121694]  ? __might_sleep+0x95/0x190
[  835.125659]  ? kasan_check_write+0x14/0x20
[  835.129882]  ? __mutex_lock+0x7d9/0x17f0
[  835.133941]  ? genl_rcv_msg+0x13a/0x170
[  835.137904]  ? __lock_acquire+0x7f5/0x5140
[  835.142129]  ? mutex_trylock+0x2a0/0x2a0
[  835.146176]  ? graph_lock+0x170/0x170
[  835.149968]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  835.155150]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  835.160157]  ? validate_nla+0x2d9/0x7b0
[  835.164121]  hwsim_new_radio_nl+0x7b8/0xa60
[  835.168434]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  835.173634]  ? __netlink_ns_capable+0x100/0x130
[  835.178305]  genl_family_rcv_msg+0x889/0x1120
[  835.182793]  ? genl_rcv+0x40/0x40
[  835.186236]  ? lock_downgrade+0x8e0/0x8e0
[  835.190458]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  835.195474]  ? kasan_check_read+0x11/0x20
[  835.199613]  ? lock_acquire+0x1dc/0x520
[  835.203572]  ? genl_rcv+0x19/0x40
[  835.207038]  genl_rcv_msg+0xc6/0x170
[  835.210748]  netlink_rcv_skb+0x172/0x440
[  835.214805]  ? genl_family_rcv_msg+0x1120/0x1120
[  835.219550]  ? netlink_ack+0xbc0/0xbc0
[  835.223425]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  835.228603]  ? netlink_skb_destructor+0x210/0x210
[  835.233439]  genl_rcv+0x28/0x40
[  835.236705]  netlink_unicast+0x58b/0x740
[  835.240770]  ? netlink_attachskb+0x970/0x970
[  835.245168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  835.250702]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  835.255716]  ? security_netlink_send+0x88/0xb0
[  835.260298]  netlink_sendmsg+0x9f0/0xfa0
[  835.264368]  ? netlink_unicast+0x740/0x740
[  835.268602]  ? security_socket_sendmsg+0x94/0xc0
[  835.273354]  ? netlink_unicast+0x740/0x740
[  835.277581]  sock_sendmsg+0xd5/0x120
[  835.281372]  ___sys_sendmsg+0x805/0x940
[  835.285341]  ? copy_msghdr_from_user+0x560/0x560
[  835.290093]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  835.295616]  ? proc_fail_nth_write+0x96/0x1f0
[  835.300104]  ? __fget_light+0x2ef/0x430
[  835.304068]  ? fget_raw+0x20/0x20
[  835.307514]  ? find_held_lock+0x36/0x1c0
[  835.311567]  ? kasan_check_write+0x14/0x20
[  835.315794]  ? wait_for_completion+0x870/0x870
[  835.320372]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  835.325894]  ? sockfd_lookup_light+0xc5/0x160
[  835.330380]  __sys_sendmsg+0x115/0x270
[  835.334261]  ? __ia32_sys_shutdown+0x80/0x80
[  835.338669]  ? __sb_end_write+0xac/0xe0
[  835.342719]  ? fput+0x130/0x1a0
[  835.345988]  ? ksys_write+0x1a6/0x250
[  835.349792]  __x64_sys_sendmsg+0x78/0xb0
[  835.353845]  do_syscall_64+0x1b1/0x800
[  835.357718]  ? finish_task_switch+0x1ca/0x840
[  835.362201]  ? syscall_return_slowpath+0x5c0/0x5c0
[  835.367116]  ? syscall_return_slowpath+0x30f/0x5c0
[  835.372043]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  835.377398]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  835.382235]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  835.387436] RIP: 0033:0x455a09
[  835.390619] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.398663] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  835.405918] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  835.413173] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
2033/05/18 03:45:28 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  835.420428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  835.427692] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000017
[  835.441694] binder: 24675:24676 unknown command 4743953
[  835.450391] binder: 24675:24676 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:29 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840af4622d53248fb17b474b4087af72b298578e8dcd66c3079f228adcc81f1cf5b7f18e106892946814e4cd05524f999243fbb8dbaf921bdc031ed02721600fa675f2431d62077afe35a16267c4d0780f44667ee1d7c3f373a04f9f136cce38260ccfb83a4dfc75f754d1f47cc44a0016897e6b5a5036cdd93c7a1abdb94f86b879aeccdcc72b40249dd5d9469a23ad085e4f4efa79cf1fe85a4044c2d14ba3bcd3eb23ed3c9eacbb74e38b5"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x10b400)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000140))
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x4)
r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x516, 0x202001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000280)={0x3f, 0x200000000000002, 'client1\x00', 0x0, "3ed3eda25f753a9b", "c3e2b15b226fb000184297ccdf70d2c6585430e072cb0300000000000000d343", 0x20, 0x7f})

2033/05/18 03:45:29 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8f16000000000000]}, 0x10)

[  835.471832] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:29 executing program 3 (fault-call:3 fault-nth:24):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:29 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  835.543735] binder: 24692:24694 got transaction to invalid handle
[  835.550130] binder: 24692:24694 transaction failed 29201/-22, size -9131565525944428417-2637412991255989326 line 2856
[  835.563373] FAULT_INJECTION: forcing a failure.
[  835.563373] name failslab, interval 1, probability 0, space 0, times 0
[  835.574725] CPU: 1 PID: 24698 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  835.582001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  835.591358] Call Trace:
[  835.593964]  dump_stack+0x1b9/0x294
[  835.597698]  ? dump_stack_print_info.cold.2+0x52/0x52
[  835.602902]  ? __mutex_lock+0x7d9/0x17f0
[  835.606976]  ? perf_trace_lock+0xd6/0x900
[  835.611142]  should_fail.cold.4+0xa/0x1a
[  835.611383] binder: 24692:24694 got transaction to invalid handle
[  835.615209]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  835.615236]  ? graph_lock+0x170/0x170
[  835.615261]  ? find_held_lock+0x36/0x1c0
[  835.615282]  ? __lock_is_held+0xb5/0x140
[  835.615306]  ? check_same_owner+0x320/0x320
[  835.621551] binder: 24692:24694 transaction failed 29201/-22, size -9131565525944428417-2637412991255989326 line 2856
[  835.626617]  ? kasan_check_write+0x14/0x20
[  835.626637]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  835.626657]  ? rcu_note_context_switch+0x710/0x710
[  835.667907]  __should_failslab+0x124/0x180
[  835.672150]  should_failslab+0x9/0x14
[  835.675953]  kmem_cache_alloc+0x2af/0x760
[  835.680105]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  835.685046]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  835.690067]  __kernfs_new_node+0xe7/0x580
[  835.694225]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  835.698986]  ? mutex_unlock+0xd/0x10
[  835.702706]  ? kernfs_activate+0x20e/0x2a0
[  835.703250] binder: undelivered TRANSACTION_ERROR: 29201
[  835.706944]  ? kernfs_walk_and_get_ns+0x320/0x320
[  835.706966]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  835.706982]  ? kernfs_link_sibling+0x1d2/0x3b0
[  835.707005]  kernfs_new_node+0x80/0xf0
[  835.707026]  __kernfs_create_file+0x4d/0x330
[  835.707046]  sysfs_add_file_mode_ns+0x21a/0x560
[  835.707066]  sysfs_add_file+0x4e/0x60
[  835.744076]  sysfs_merge_group+0xfa/0x230
[  835.748304]  dpm_sysfs_add+0x161/0x210
[  835.752194]  device_add+0xa11/0x16d0
[  835.755906]  ? device_private_init+0x230/0x230
[  835.760476]  ? kfree+0x1e9/0x260
[  835.763832]  ? kfree_const+0x5e/0x70
[  835.767543]  device_create_groups_vargs+0x1ff/0x270
[  835.772546]  device_create+0xd3/0x100
[  835.776334]  ? device_create_vargs+0x60/0x60
[  835.780733]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  835.785823]  ? trace_hardirqs_on+0xd/0x10
[  835.789960]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  835.794873]  ? graph_lock+0x170/0x170
[  835.798667]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  835.804807]  ? lock_release+0xa10/0xa10
[  835.808768]  ? check_same_owner+0x320/0x320
[  835.813079]  ? rcu_note_context_switch+0x710/0x710
[  835.817992]  ? __lock_acquire+0x7f5/0x5140
[  835.822219]  ? __might_sleep+0x95/0x190
[  835.826195]  ? kasan_check_write+0x14/0x20
[  835.830420]  ? __mutex_lock+0x7d9/0x17f0
[  835.834470]  ? genl_rcv_msg+0x13a/0x170
[  835.838459]  ? __lock_acquire+0x7f5/0x5140
[  835.842681]  ? mutex_trylock+0x2a0/0x2a0
[  835.846726]  ? perf_trace_lock+0xd6/0x900
[  835.850955]  ? graph_lock+0x170/0x170
[  835.854747]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  835.859927]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  835.864932]  ? validate_nla+0x2d9/0x7b0
[  835.868902]  hwsim_new_radio_nl+0x7b8/0xa60
[  835.873213]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  835.878393]  ? __netlink_ns_capable+0x100/0x130
[  835.883056]  genl_family_rcv_msg+0x889/0x1120
[  835.887548]  ? genl_rcv+0x40/0x40
[  835.890988]  ? lock_downgrade+0x8e0/0x8e0
[  835.895131]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  835.900138]  ? lock_acquire+0x1dc/0x520
[  835.904116]  ? genl_rcv+0x19/0x40
[  835.907566]  genl_rcv_msg+0xc6/0x170
[  835.911268]  netlink_rcv_skb+0x172/0x440
[  835.915313]  ? genl_family_rcv_msg+0x1120/0x1120
[  835.920053]  ? netlink_ack+0xbc0/0xbc0
[  835.923927]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  835.929105]  ? netlink_skb_destructor+0x210/0x210
[  835.933938]  genl_rcv+0x28/0x40
[  835.937202]  netlink_unicast+0x58b/0x740
[  835.941259]  ? netlink_attachskb+0x970/0x970
[  835.945654]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  835.951176]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  835.956186]  ? security_netlink_send+0x88/0xb0
[  835.960758]  netlink_sendmsg+0x9f0/0xfa0
[  835.964817]  ? netlink_unicast+0x740/0x740
[  835.969042]  ? security_socket_sendmsg+0x94/0xc0
[  835.973785]  ? netlink_unicast+0x740/0x740
[  835.978011]  sock_sendmsg+0xd5/0x120
[  835.981724]  ___sys_sendmsg+0x805/0x940
[  835.985687]  ? copy_msghdr_from_user+0x560/0x560
[  835.990435]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  835.995973]  ? proc_fail_nth_write+0x96/0x1f0
[  836.000458]  ? __fget_light+0x2ef/0x430
[  836.004425]  ? fget_raw+0x20/0x20
[  836.007869]  ? find_held_lock+0x36/0x1c0
[  836.011922]  ? kasan_check_write+0x14/0x20
[  836.016148]  ? wait_for_completion+0x870/0x870
[  836.020725]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  836.026249]  ? sockfd_lookup_light+0xc5/0x160
[  836.030731]  __sys_sendmsg+0x115/0x270
[  836.034611]  ? __ia32_sys_shutdown+0x80/0x80
[  836.039017]  ? __sb_end_write+0xac/0xe0
[  836.042983]  ? fput+0x130/0x1a0
[  836.046252]  ? ksys_write+0x1a6/0x250
[  836.050049]  __x64_sys_sendmsg+0x78/0xb0
[  836.054109]  do_syscall_64+0x1b1/0x800
[  836.057991]  ? finish_task_switch+0x1ca/0x840
[  836.062474]  ? syscall_return_slowpath+0x5c0/0x5c0
[  836.067406]  ? syscall_return_slowpath+0x30f/0x5c0
[  836.072326]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  836.077675]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  836.082515]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  836.087687] RIP: 0033:0x455a09
2033/05/18 03:45:29 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000008000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:29 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  836.090862] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  836.098559] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  836.105819] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  836.114034] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  836.121295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  836.128634] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000018
2033/05/18 03:45:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000000ff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:30 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:30 executing program 0:
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt(r0, 0x9, 0x0, &(0x7f0000000040)="6c70b91caab47c76ac1cfbdfe427e6395038574e9038c288bbca1f736685bf5d632398cfe35b88d58cd7e5d5f0e0b4a97ed5df17c7ac636c48c43963515e63ece307bc6dfc38ed17eb9c3131dc4a7be1bdadbb75126ba2d781792f73011aa0e14193c70f126fdf2a2eaeb94158a520ce3c7d2d702e2adbfa2205d726a368d2a9aacacf85a75556f9bbf8b9b326db9758afdc80c9202e99b20b02b340c63e136f44", 0xa1)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:30 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x77330000]}, 0x10)

2033/05/18 03:45:30 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x400180)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x6)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:30 executing program 3 (fault-call:3 fault-nth:25):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:30 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x97030000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

[  836.323287] FAULT_INJECTION: forcing a failure.
[  836.323287] name failslab, interval 1, probability 0, space 0, times 0
[  836.330329] binder: 24726:24727 transaction failed 29189/-22, size 0-0 line 2856
[  836.334934] CPU: 0 PID: 24734 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  836.349667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  836.359023] Call Trace:
[  836.361624]  dump_stack+0x1b9/0x294
[  836.365265]  ? dump_stack_print_info.cold.2+0x52/0x52
2033/05/18 03:45:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x37be0000]}, 0x10)

2033/05/18 03:45:30 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  836.370465]  ? __mutex_lock+0x7d9/0x17f0
[  836.374542]  should_fail.cold.4+0xa/0x1a
[  836.378612]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  836.379936] binder: undelivered TRANSACTION_ERROR: 29189
[  836.383718]  ? kasan_kmalloc+0xc4/0xe0
[  836.383741]  ? graph_lock+0x170/0x170
[  836.383763]  ? find_held_lock+0x36/0x1c0
[  836.383783]  ? __lock_is_held+0xb5/0x140
[  836.383807]  ? check_same_owner+0x320/0x320
[  836.383824]  ? kasan_check_write+0x14/0x20
[  836.414973]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  836.419916]  ? rcu_note_context_switch+0x710/0x710
[  836.424973]  __should_failslab+0x124/0x180
[  836.429213]  should_failslab+0x9/0x14
[  836.433022]  kmem_cache_alloc+0x2af/0x760
[  836.437202]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  836.442145]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  836.447175]  __kernfs_new_node+0xe7/0x580
[  836.449793] binder: 24747:24749 transaction failed 29189/-22, size 0-0 line 2856
[  836.451327]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  836.451348]  ? mutex_unlock+0xd/0x10
[  836.451362]  ? kernfs_activate+0x20e/0x2a0
2033/05/18 03:45:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xf730000]}, 0x10)

2033/05/18 03:45:30 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  836.451380]  ? kernfs_walk_and_get_ns+0x320/0x320
[  836.451397]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  836.451414]  ? kernfs_link_sibling+0x1d2/0x3b0
[  836.486517]  kernfs_new_node+0x80/0xf0
[  836.490419]  __kernfs_create_file+0x4d/0x330
[  836.494833]  sysfs_add_file_mode_ns+0x21a/0x560
[  836.499514]  sysfs_add_file+0x4e/0x60
[  836.503322]  sysfs_merge_group+0xfa/0x230
[  836.504851] binder: undelivered TRANSACTION_ERROR: 29189
[  836.507477]  dpm_sysfs_add+0x161/0x210
[  836.507495]  device_add+0xa11/0x16d0
[  836.507516]  ? device_private_init+0x230/0x230
[  836.507531]  ? kfree+0x1e9/0x260
[  836.507550]  ? kfree_const+0x5e/0x70
[  836.507573]  device_create_groups_vargs+0x1ff/0x270
[  836.537202]  device_create+0xd3/0x100
[  836.541031]  ? device_create_vargs+0x60/0x60
[  836.545459]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  836.550575]  ? trace_hardirqs_on+0xd/0x10
[  836.554739]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  836.559678]  ? graph_lock+0x170/0x170
[  836.563489]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  836.564494] binder: 24755:24756 transaction failed 29189/-22, size 0-0 line 2856
[  836.569640]  ? lock_release+0xa10/0xa10
[  836.569657]  ? check_same_owner+0x320/0x320
[  836.569677]  ? rcu_note_context_switch+0x710/0x710
[  836.569692]  ? __lock_acquire+0x7f5/0x5140
[  836.569710]  ? __might_sleep+0x95/0x190
[  836.569728]  ? kasan_check_write+0x14/0x20
[  836.569748]  ? __mutex_lock+0x7d9/0x17f0
[  836.606926]  ? genl_rcv_msg+0x13a/0x170
[  836.610896]  ? __lock_acquire+0x7f5/0x5140
[  836.615128]  ? mutex_trylock+0x2a0/0x2a0
[  836.619178]  ? graph_lock+0x170/0x170
[  836.622972]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  836.628153]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  836.633163]  ? validate_nla+0x2d9/0x7b0
[  836.637138]  hwsim_new_radio_nl+0x7b8/0xa60
[  836.641450]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  836.646631]  ? __netlink_ns_capable+0x100/0x130
[  836.651300]  genl_family_rcv_msg+0x889/0x1120
[  836.655796]  ? genl_rcv+0x40/0x40
[  836.659235]  ? lock_downgrade+0x8e0/0x8e0
[  836.663370]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  836.668386]  ? kasan_check_read+0x11/0x20
[  836.672525]  ? lock_acquire+0x1dc/0x520
[  836.676489]  ? genl_rcv+0x19/0x40
[  836.679955]  genl_rcv_msg+0xc6/0x170
[  836.683665]  netlink_rcv_skb+0x172/0x440
[  836.687717]  ? genl_family_rcv_msg+0x1120/0x1120
[  836.692465]  ? netlink_ack+0xbc0/0xbc0
[  836.696340]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  836.701519]  ? netlink_skb_destructor+0x210/0x210
[  836.706356]  genl_rcv+0x28/0x40
[  836.709632]  netlink_unicast+0x58b/0x740
[  836.713685]  ? netlink_attachskb+0x970/0x970
[  836.718082]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  836.723605]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  836.728613]  ? security_netlink_send+0x88/0xb0
[  836.733186]  netlink_sendmsg+0x9f0/0xfa0
[  836.737243]  ? netlink_unicast+0x740/0x740
[  836.741480]  ? security_socket_sendmsg+0x94/0xc0
[  836.746225]  ? netlink_unicast+0x740/0x740
[  836.750461]  sock_sendmsg+0xd5/0x120
[  836.754177]  ___sys_sendmsg+0x805/0x940
[  836.758151]  ? copy_msghdr_from_user+0x560/0x560
[  836.762942]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  836.768469]  ? proc_fail_nth_write+0x96/0x1f0
[  836.772957]  ? __fget_light+0x2ef/0x430
[  836.776922]  ? fget_raw+0x20/0x20
[  836.780369]  ? find_held_lock+0x36/0x1c0
[  836.784432]  ? kasan_check_write+0x14/0x20
[  836.788660]  ? wait_for_completion+0x870/0x870
[  836.793238]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  836.798762]  ? sockfd_lookup_light+0xc5/0x160
[  836.803247]  __sys_sendmsg+0x115/0x270
[  836.807124]  ? __ia32_sys_shutdown+0x80/0x80
[  836.811528]  ? __sb_end_write+0xac/0xe0
[  836.815493]  ? fput+0x130/0x1a0
[  836.818770]  ? ksys_write+0x1a6/0x250
[  836.822573]  __x64_sys_sendmsg+0x78/0xb0
[  836.826625]  do_syscall_64+0x1b1/0x800
[  836.830499]  ? finish_task_switch+0x1ca/0x840
[  836.834983]  ? syscall_return_slowpath+0x5c0/0x5c0
[  836.839901]  ? syscall_return_slowpath+0x30f/0x5c0
[  836.844827]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  836.850181]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  836.855039]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  836.860214] RIP: 0033:0x455a09
[  836.863397] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  836.871094] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  836.878349] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  836.885605] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  836.892860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  836.900112] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000019
[  836.910992] binder: 24735:24736 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x8f160000]}, 0x10)

2033/05/18 03:45:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:30 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, &(0x7f0000000180)})

2033/05/18 03:45:30 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  836.947883] binder: 24735:24760 transaction failed 29189/-22, size 0-0 line 2856
[  836.983596] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:30 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/178)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:30 executing program 3 (fault-call:3 fault-nth:26):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  837.030398] binder: undelivered TRANSACTION_ERROR: 29189
[  837.051653] binder: 24770:24771 transaction failed 29189/-22, size 0-0 line 2856
[  837.126992] FAULT_INJECTION: forcing a failure.
[  837.126992] name failslab, interval 1, probability 0, space 0, times 0
[  837.127356] binder: 24779:24782 transaction failed 29189/-22, size 0-0 line 2856
[  837.138565] CPU: 1 PID: 24780 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  837.153246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  837.162609] Call Trace:
[  837.165217]  dump_stack+0x1b9/0x294
[  837.168868]  ? dump_stack_print_info.cold.2+0x52/0x52
2033/05/18 03:45:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:30 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, &(0x7f0000000180)})

[  837.174075]  ? __mutex_lock+0x7d9/0x17f0
[  837.178148]  ? perf_trace_lock+0xd6/0x900
[  837.182350]  should_fail.cold.4+0xa/0x1a
[  837.186427]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  837.191324] binder: undelivered TRANSACTION_ERROR: 29189
[  837.191543]  ? graph_lock+0x170/0x170
[  837.191567]  ? find_held_lock+0x36/0x1c0
[  837.204864]  ? __lock_is_held+0xb5/0x140
[  837.208944]  ? check_same_owner+0x320/0x320
[  837.213278]  ? kasan_check_write+0x14/0x20
[  837.217552]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  837.222501]  ? rcu_note_context_switch+0x710/0x710
[  837.227472]  __should_failslab+0x124/0x180
[  837.228163] binder: 24779:24782 transaction failed 29189/-22, size 0-0 line 2856
[  837.231713]  should_failslab+0x9/0x14
[  837.231730]  kmem_cache_alloc+0x2af/0x760
[  837.231750]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  837.252152]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  837.253820] binder: 24789:24790 transaction failed 29189/-22, size 0-0 line 2856
[  837.257172]  __kernfs_new_node+0xe7/0x580
[  837.257191]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  837.257210]  ? mutex_unlock+0xd/0x10
[  837.277308]  ? kernfs_activate+0x20e/0x2a0
[  837.281547]  ? kernfs_walk_and_get_ns+0x320/0x320
[  837.286404]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  837.291945]  ? kernfs_link_sibling+0x1d2/0x3b0
[  837.296541]  kernfs_new_node+0x80/0xf0
[  837.300435]  __kernfs_create_file+0x4d/0x330
[  837.304856]  sysfs_add_file_mode_ns+0x21a/0x560
[  837.309538]  sysfs_add_file+0x4e/0x60
[  837.313354]  sysfs_merge_group+0xfa/0x230
[  837.317522]  dpm_sysfs_add+0x161/0x210
[  837.321418]  device_add+0xa11/0x16d0
[  837.325143]  ? device_private_init+0x230/0x230
[  837.329725]  ? kfree+0x1e9/0x260
[  837.332992] binder: undelivered TRANSACTION_ERROR: 29189
[  837.333094]  ? kfree_const+0x5e/0x70
[  837.333119]  device_create_groups_vargs+0x1ff/0x270
[  837.347304]  device_create+0xd3/0x100
[  837.351131]  ? device_create_vargs+0x60/0x60
[  837.355556]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  837.359502] binder: undelivered TRANSACTION_ERROR: 29189
[  837.360657]  ? trace_hardirqs_on+0xd/0x10
[  837.360678]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  837.360693]  ? graph_lock+0x170/0x170
[  837.378990]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  837.385147]  ? lock_release+0xa10/0xa10
[  837.389130]  ? check_same_owner+0x320/0x320
[  837.393456]  ? rcu_note_context_switch+0x710/0x710
[  837.398375]  ? __lock_acquire+0x7f5/0x5140
[  837.402613]  ? mark_held_locks+0xc9/0x160
[  837.406750]  ? retint_kernel+0x10/0x10
[  837.410627]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  837.415633]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  837.420391]  ? retint_kernel+0x10/0x10
[  837.424278]  ? hwsim_new_radio_nl+0x2f1/0xa60
[  837.428765]  hwsim_new_radio_nl+0x7b8/0xa60
[  837.433077]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  837.438287]  ? __netlink_ns_capable+0x100/0x130
[  837.442959]  genl_family_rcv_msg+0x889/0x1120
[  837.447449]  ? genl_rcv+0x40/0x40
[  837.450889]  ? lock_downgrade+0x8e0/0x8e0
[  837.455032]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  837.460129]  ? lock_acquire+0x1dc/0x520
[  837.464087]  ? genl_rcv+0x19/0x40
[  837.467543]  genl_rcv_msg+0xc6/0x170
[  837.471255]  netlink_rcv_skb+0x172/0x440
[  837.475308]  ? genl_family_rcv_msg+0x1120/0x1120
[  837.480050]  ? netlink_ack+0xbc0/0xbc0
[  837.483931]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  837.489107]  ? netlink_skb_destructor+0x210/0x210
[  837.493945]  genl_rcv+0x28/0x40
[  837.497211]  netlink_unicast+0x58b/0x740
[  837.501265]  ? netlink_attachskb+0x970/0x970
[  837.505666]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  837.511199]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  837.516207]  ? security_netlink_send+0x88/0xb0
[  837.520780]  netlink_sendmsg+0x9f0/0xfa0
[  837.524849]  ? netlink_unicast+0x740/0x740
[  837.529075]  ? security_socket_sendmsg+0x94/0xc0
[  837.533815]  ? netlink_unicast+0x740/0x740
[  837.538569]  sock_sendmsg+0xd5/0x120
[  837.542289]  ___sys_sendmsg+0x805/0x940
[  837.546261]  ? copy_msghdr_from_user+0x560/0x560
[  837.551031]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  837.556556]  ? proc_fail_nth_write+0x96/0x1f0
[  837.561042]  ? __fget_light+0x2ef/0x430
[  837.565009]  ? fget_raw+0x20/0x20
[  837.568454]  ? find_held_lock+0x36/0x1c0
[  837.572513]  ? kasan_check_write+0x14/0x20
[  837.576743]  ? wait_for_completion+0x870/0x870
[  837.581322]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  837.586849]  ? sockfd_lookup_light+0xc5/0x160
[  837.591332]  __sys_sendmsg+0x115/0x270
[  837.595206]  ? __ia32_sys_shutdown+0x80/0x80
[  837.599605]  ? __sb_end_write+0xac/0xe0
[  837.603573]  ? fput+0x130/0x1a0
[  837.606842]  ? ksys_write+0x1a6/0x250
[  837.610638]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  837.615472]  __x64_sys_sendmsg+0x78/0xb0
[  837.619522]  do_syscall_64+0x1b1/0x800
[  837.623400]  ? finish_task_switch+0x1ca/0x840
[  837.627884]  ? syscall_return_slowpath+0x5c0/0x5c0
[  837.632802]  ? syscall_return_slowpath+0x30f/0x5c0
[  837.637724]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  837.643080]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  837.647922]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  837.653095] RIP: 0033:0x455a09
[  837.656268] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  837.663968] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  837.671231] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
2033/05/18 03:45:31 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x400)
r2 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000001c0)=""/159)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/105)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
timer_create(0x3, &(0x7f00000000c0)={0x0, 0x4, 0x5, @thr={&(0x7f0000000280)="6004c58ac9e81056afcb0e6f027f62ce6aa4b3769eba310fdb87fe4f1ec1ef5c690a2bbcd1fb276164c5b846b4778f811edbdb7b9bffa3a106845936839da4918d531a62467bc455be3b32429b979e4d3b0a98efac78c348ee36899febdf86ffe558c3e9885c34e04ff28feb62d5e54a069fb8bdfc9dcb1fa9dfad9d43e5132e9473ea19dc51e2d71ff6dbbdd775e7a6d26be9a69738b84144bea110d149b1a400a42ef24f377c5337e5e84f83e72c5bd36ae7156c6f26918b926c9c4ccea450d95a", &(0x7f0000000380)="dd5628c7416ecdc36810b98652a71d3b4978362ce11300f91ab46775b39aa340d1f4c8d443cdc781aecbeb87907e56c8b13da87f5b192d3c2e563668c1de246e76fe35a7e14231678d557c71aa8e8c7d5a543125c60d1ed17e4ba946a6efd8f3041d4acf11317dbab073c9a1584e605f3d07cae14526f8f7bca999e4807ee8caffa3ffaa9334d846d8f88ab0efb0ab0f8c6a0aff258b698c401af335636e2bd7702b38f85ae97220867d28a3de1e6a25ff483dcda2913028005128af69c23542dba2"}}, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:31 executing program 0:
r0 = socket$kcm(0x29, 0xfffffffffffffff9, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  837.678503] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  837.685766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  837.693025] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001a
2033/05/18 03:45:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xb8040000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:31 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000feffffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:31 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, &(0x7f0000000180)})

2033/05/18 03:45:31 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0xdfac]}, 0x10)

[  837.765307] binder: 24799:24801 transaction failed 29189/-22, size 0-0 line 2856
[  837.799395] binder: 24808:24811 transaction failed 29189/-22, size 0-0 line 2856
[  837.822725] binder: 24799:24801 transaction failed 29189/-22, size 0-0 line 2856
[  837.861867] binder: undelivered TRANSACTION_ERROR: 29189
[  837.914125] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:32 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:32 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:32 executing program 3 (fault-call:3 fault-nth:27):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:32 executing program 0:
r0 = socket$kcm(0x29, 0x4000007, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:32 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xa7b20000]}, 0x10)

2033/05/18 03:45:32 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x9703000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:32 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20301, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r2=>0x0, 0x2d72ee98}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x6, 0x820b, 0xfffffffffffff5c4, 0xf6c, 0x0, 0xfff, 0x8000, r2}, 0x20)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  838.818924] binder: 24837:24838 transaction failed 29189/-22, size 0-0 line 2856
[  838.832733] FAULT_INJECTION: forcing a failure.
[  838.832733] name failslab, interval 1, probability 0, space 0, times 0
[  838.844072] CPU: 0 PID: 24842 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  838.851354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  838.860713] Call Trace:
[  838.863316]  dump_stack+0x1b9/0x294
[  838.866964]  ? dump_stack_print_info.cold.2+0x52/0x52
[  838.872177]  should_fail.cold.4+0xa/0x1a
[  838.876259]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  838.881386]  ? graph_lock+0x170/0x170
[  838.885199]  ? lock_downgrade+0x8e0/0x8e0
[  838.889361]  ? kasan_check_write+0x14/0x20
[  838.893609]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  838.898553]  ? find_held_lock+0x36/0x1c0
[  838.902649]  ? __lock_is_held+0xb5/0x140
[  838.906733]  ? __vfs_setxattr_noperm+0x220/0x410
[  838.911516]  ? check_same_owner+0x320/0x320
[  838.915855]  ? rcu_note_context_switch+0x710/0x710
[  838.920795]  __should_failslab+0x124/0x180
[  838.925051]  should_failslab+0x9/0x14
[  838.928866]  kmem_cache_alloc_trace+0x2cb/0x780
[  838.933554]  ? device_create_file+0x1e0/0x1e0
[  838.938046]  kobject_uevent_env+0x20f/0xea0
[  838.942367]  ? device_pm_add+0x221/0x340
[  838.946428]  kobject_uevent+0x1f/0x30
[  838.950215]  device_add+0xb01/0x16d0
[  838.953932]  ? device_private_init+0x230/0x230
[  838.958501]  ? kfree+0x1e9/0x260
[  838.961857]  ? kfree_const+0x5e/0x70
[  838.965565]  device_create_groups_vargs+0x1ff/0x270
[  838.970573]  device_create+0xd3/0x100
[  838.974363]  ? device_create_vargs+0x60/0x60
[  838.978796]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  838.983897]  ? trace_hardirqs_on+0xd/0x10
[  838.988045]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  838.992962]  ? graph_lock+0x170/0x170
[  838.996761]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  839.002906]  ? lock_release+0xa10/0xa10
[  839.006868]  ? check_same_owner+0x320/0x320
[  839.011182]  ? rcu_note_context_switch+0x710/0x710
[  839.016108]  ? __lock_acquire+0x7f5/0x5140
[  839.020332]  ? __might_sleep+0x95/0x190
[  839.024294]  ? kasan_check_write+0x14/0x20
[  839.028519]  ? __mutex_lock+0x7d9/0x17f0
[  839.032571]  ? genl_rcv_msg+0x13a/0x170
[  839.036534]  ? __lock_acquire+0x7f5/0x5140
[  839.040759]  ? mutex_trylock+0x2a0/0x2a0
[  839.044806]  ? perf_trace_lock+0xd6/0x900
[  839.048939]  ? graph_lock+0x170/0x170
[  839.052740]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  839.057921]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  839.062923]  ? validate_nla+0x2d9/0x7b0
[  839.066888]  hwsim_new_radio_nl+0x7b8/0xa60
[  839.071199]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  839.076388]  ? __netlink_ns_capable+0x100/0x130
[  839.081050]  genl_family_rcv_msg+0x889/0x1120
[  839.085539]  ? genl_rcv+0x40/0x40
[  839.088983]  ? lock_downgrade+0x8e0/0x8e0
[  839.093119]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  839.098130]  ? lock_acquire+0x1dc/0x520
[  839.102091]  ? genl_rcv+0x19/0x40
[  839.105545]  genl_rcv_msg+0xc6/0x170
[  839.109251]  netlink_rcv_skb+0x172/0x440
[  839.113300]  ? genl_family_rcv_msg+0x1120/0x1120
[  839.118046]  ? netlink_ack+0xbc0/0xbc0
[  839.121921]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  839.127123]  ? netlink_skb_destructor+0x210/0x210
[  839.131961]  genl_rcv+0x28/0x40
[  839.135235]  netlink_unicast+0x58b/0x740
[  839.139289]  ? netlink_attachskb+0x970/0x970
[  839.143692]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  839.150692]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  839.155697]  ? security_netlink_send+0x88/0xb0
[  839.160277]  netlink_sendmsg+0x9f0/0xfa0
[  839.164334]  ? netlink_unicast+0x740/0x740
[  839.168561]  ? security_socket_sendmsg+0x94/0xc0
[  839.173305]  ? netlink_unicast+0x740/0x740
[  839.177528]  sock_sendmsg+0xd5/0x120
[  839.181234]  ___sys_sendmsg+0x805/0x940
[  839.185211]  ? copy_msghdr_from_user+0x560/0x560
[  839.189974]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  839.195498]  ? proc_fail_nth_write+0x96/0x1f0
[  839.199988]  ? __fget_light+0x2ef/0x430
[  839.203952]  ? fget_raw+0x20/0x20
[  839.207397]  ? find_held_lock+0x36/0x1c0
[  839.211884]  ? kasan_check_write+0x14/0x20
[  839.216111]  ? wait_for_completion+0x870/0x870
[  839.220690]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  839.226216]  ? sockfd_lookup_light+0xc5/0x160
[  839.230699]  __sys_sendmsg+0x115/0x270
[  839.234593]  ? __ia32_sys_shutdown+0x80/0x80
[  839.239000]  ? __sb_end_write+0xac/0xe0
[  839.242971]  ? fput+0x130/0x1a0
[  839.246236]  ? ksys_write+0x1a6/0x250
[  839.250040]  __x64_sys_sendmsg+0x78/0xb0
[  839.254090]  do_syscall_64+0x1b1/0x800
[  839.257965]  ? finish_task_switch+0x1ca/0x840
[  839.262448]  ? syscall_return_slowpath+0x5c0/0x5c0
[  839.267365]  ? syscall_return_slowpath+0x30f/0x5c0
[  839.272297]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  839.277655]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  839.282491]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  839.287665] RIP: 0033:0x455a09
[  839.292149] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  839.299845] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  839.307099] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  839.314356] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  839.321616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  839.328869] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001b
[  839.343429] binder: 24837:24838 transaction failed 29189/-22, size 0-0 line 2856
[  839.390812] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x7000000]}, 0x10)

2033/05/18 03:45:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:33 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1ff, 0x1, 0x10001, 0x0, 0x1}, 0xc)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8100)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @dev, @remote}, &(0x7f00000000c0)=0xc)
bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:33 executing program 3 (fault-call:3 fault-nth:28):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:33 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
socketpair(0x0, 0x0, 0x7fff, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, <r3=>0x0, 0x7})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0x6})
r4 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:33 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffff7f00000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:33 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x5627]}, 0x10)

[  839.825475] binder: 24863:24865 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:33 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  839.882777] binder: 24863:24865 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:33 executing program 0:
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='qn\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0xe3b9, 0x4)

[  839.953696] FAULT_INJECTION: forcing a failure.
[  839.953696] name failslab, interval 1, probability 0, space 0, times 0
[  839.960831] binder: undelivered TRANSACTION_ERROR: 29189
[  839.965008] CPU: 1 PID: 24870 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  839.977705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  839.987062] Call Trace:
[  839.989671]  dump_stack+0x1b9/0x294
[  839.993312]  ? dump_stack_print_info.cold.2+0x52/0x52
[  839.998511]  ? kernel_text_address+0x79/0xf0
[  840.002932]  ? __unwind_start+0x166/0x330
[  840.007094]  should_fail.cold.4+0xa/0x1a
[  840.011164]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  840.016284]  ? save_stack+0xa9/0xd0
[  840.019930]  ? graph_lock+0x170/0x170
[  840.023747]  ? kasan_kmalloc+0xc4/0xe0
[  840.027734]  ? kmem_cache_alloc_trace+0x152/0x780
[  840.032471] binder: 24904:24905 unknown command 28273
[  840.032599]  ? kobject_uevent_env+0x20f/0xea0
[  840.042285]  ? kobject_uevent+0x1f/0x30
[  840.046268]  ? device_add+0xb01/0x16d0
2033/05/18 03:45:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\t\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.047869] binder: 24904:24905 ioctl c0306201 20007000 returned -22
[  840.050157]  ? device_create_groups_vargs+0x1ff/0x270
[  840.050179]  ? find_held_lock+0x36/0x1c0
[  840.050204]  ? __lock_is_held+0xb5/0x140
[  840.069964]  ? check_same_owner+0x320/0x320
[  840.074295]  ? rcu_note_context_switch+0x710/0x710
[  840.079313]  __should_failslab+0x124/0x180
[  840.083556]  should_failslab+0x9/0x14
[  840.087360]  __kmalloc+0x2c8/0x760
[  840.090908]  ? kobject_uevent_env+0x20f/0xea0
[  840.093672] binder: 24904:24905 unknown command 28273
2033/05/18 03:45:33 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.095407]  ? rcu_read_lock_sched_held+0x108/0x120
[  840.095424]  ? kobject_get_path+0xc2/0x1a0
[  840.095444]  kobject_get_path+0xc2/0x1a0
[  840.095463]  kobject_uevent_env+0x234/0xea0
[  840.118316]  ? device_pm_add+0x221/0x340
[  840.122395]  kobject_uevent+0x1f/0x30
[  840.126207]  device_add+0xb01/0x16d0
[  840.127741] binder: 24904:24905 ioctl c0306201 20007000 returned -22
[  840.129973]  ? device_private_init+0x230/0x230
[  840.129990]  ? kfree+0x1e9/0x260
[  840.130011]  ? kfree_const+0x5e/0x70
[  840.130031]  device_create_groups_vargs+0x1ff/0x270
2033/05/18 03:45:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:33 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  840.130065]  device_create+0xd3/0x100
[  840.157147]  ? device_create_vargs+0x60/0x60
[  840.161571]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  840.166681]  ? trace_hardirqs_on+0xd/0x10
[  840.170841]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  840.175784]  ? graph_lock+0x170/0x170
[  840.179602]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  840.185757]  ? lock_release+0xa10/0xa10
[  840.189742]  ? check_same_owner+0x320/0x320
[  840.194083]  ? rcu_note_context_switch+0x710/0x710
[  840.199019]  ? __lock_acquire+0x7f5/0x5140
[  840.203263]  ? __might_sleep+0x95/0x190
[  840.207243]  ? kasan_check_write+0x14/0x20
[  840.211484]  ? __mutex_lock+0x7d9/0x17f0
[  840.215553]  ? genl_rcv_msg+0x13a/0x170
[  840.219534]  ? __lock_acquire+0x7f5/0x5140
[  840.223773]  ? mutex_trylock+0x2a0/0x2a0
[  840.229438]  ? perf_trace_lock+0xd6/0x900
[  840.233592]  ? graph_lock+0x170/0x170
[  840.237405]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  840.242058] binder: 24920:24921 unknown command 0
[  840.242618]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
2033/05/18 03:45:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.242635]  ? validate_nla+0x2d9/0x7b0
[  840.242655]  hwsim_new_radio_nl+0x7b8/0xa60
[  840.242673]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  840.256881] binder: 24920:24921 ioctl c0306201 20007000 returned -22
[  840.257523]  ? __netlink_ns_capable+0x100/0x130
[  840.257547]  genl_family_rcv_msg+0x889/0x1120
[  840.271966] binder: 24920:24921 ioctl c0306201 20000240 returned -11
[  840.273636]  ? genl_rcv+0x40/0x40
[  840.273656]  ? lock_downgrade+0x8e0/0x8e0
[  840.273674]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
2033/05/18 03:45:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.273696]  ? lock_acquire+0x1dc/0x520
[  840.287408] binder: 24920:24921 unknown command 0
[  840.289335]  ? genl_rcv+0x19/0x40
[  840.289372]  genl_rcv_msg+0xc6/0x170
[  840.289390]  netlink_rcv_skb+0x172/0x440
[  840.289408]  ? genl_family_rcv_msg+0x1120/0x1120
[  840.299641] binder: 24920:24921 ioctl c0306201 20007000 returned -22
[  840.301982]  ? netlink_ack+0xbc0/0xbc0
[  840.302002]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  840.302026]  ? netlink_skb_destructor+0x210/0x210
[  840.302050]  genl_rcv+0x28/0x40
[  840.302069]  netlink_unicast+0x58b/0x740
[  840.354468]  ? netlink_attachskb+0x970/0x970
[  840.358894]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  840.364451]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  840.369481]  ? security_netlink_send+0x88/0xb0
[  840.374075]  netlink_sendmsg+0x9f0/0xfa0
[  840.378161]  ? netlink_unicast+0x740/0x740
[  840.382408]  ? security_socket_sendmsg+0x94/0xc0
[  840.387177]  ? netlink_unicast+0x740/0x740
[  840.391421]  sock_sendmsg+0xd5/0x120
[  840.395150]  ___sys_sendmsg+0x805/0x940
[  840.399131]  ? copy_msghdr_from_user+0x560/0x560
[  840.403897]  ? __schedule+0x809/0x1e30
[  840.407799]  ? __sched_text_start+0x8/0x8
[  840.411952]  ? retint_kernel+0x10/0x10
[  840.415849]  ? __fget_light+0x2ef/0x430
[  840.419842]  ? fget_raw+0x20/0x20
[  840.423312]  ? lock_release+0x512/0xa10
[  840.427298]  ? kasan_check_write+0x14/0x20
[  840.431552]  ? wait_for_completion+0x870/0x870
[  840.436157]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  840.441701]  ? sockfd_lookup_light+0xc5/0x160
[  840.446208]  __sys_sendmsg+0x115/0x270
[  840.450100]  ? __ia32_sys_shutdown+0x80/0x80
[  840.454514]  ? __sb_end_write+0xac/0xe0
[  840.458509]  ? exit_to_usermode_loop+0x87/0x310
[  840.463196]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  840.468051]  __x64_sys_sendmsg+0x78/0xb0
[  840.472122]  do_syscall_64+0x1b1/0x800
[  840.476024]  ? finish_task_switch+0x1ca/0x840
[  840.480530]  ? syscall_return_slowpath+0x5c0/0x5c0
[  840.485468]  ? syscall_return_slowpath+0x30f/0x5c0
[  840.490408]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  840.495783]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  840.500641]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  840.505824] RIP: 0033:0x455a09
[  840.508996] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  840.516712] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  840.523973] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  840.531249] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  840.538503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  840.545767] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001c
2033/05/18 03:45:34 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:34 executing program 3 (fault-call:3 fault-nth:29):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x1000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:34 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4)

2033/05/18 03:45:34 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x4)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @local}, &(0x7f0000000040)=0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x100, @loopback={0x0, 0x1}, 0x3ff}}, 0x20, 0x1ff, 0x8000, "5c7ef55c2eea49e389ce3153620951245910f74a62e414ca8ffdb78bf87e50cae0333710123fc8204ad7006f4b1d8344ef56fa0d1ff9ae6fae046819edc31bad311d44e074bf1a0eeecfed29aa1e0e0b"}, 0xd8)

2033/05/18 03:45:34 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x44cf]}, 0x10)

2033/05/18 03:45:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000000300", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.786911] binder: 24951:24952 transaction failed 29189/-22, size 0-0 line 2856
[  840.795906] FAULT_INJECTION: forcing a failure.
[  840.795906] name failslab, interval 1, probability 0, space 0, times 0
[  840.807640] CPU: 1 PID: 24955 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  840.814922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  840.820727] binder: 24951:24952 transaction failed 29189/-22, size 0-0 line 2856
[  840.824277] Call Trace:
2033/05/18 03:45:34 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x4000000]}, 0x10)

[  840.834476]  dump_stack+0x1b9/0x294
[  840.838124]  ? dump_stack_print_info.cold.2+0x52/0x52
[  840.843325]  ? kobject_uevent_env+0x62e/0xea0
[  840.847930]  should_fail.cold.4+0xa/0x1a
[  840.852006]  ? debug_check_no_locks_freed+0x310/0x310
[  840.857214]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  840.862337]  ? __might_sleep+0x95/0x190
[  840.866328]  ? graph_lock+0x170/0x170
[  840.870137]  ? __mutex_lock+0x7d9/0x17f0
[  840.874292]  ? unwind_get_return_address+0x61/0xa0
[  840.879233]  ? find_held_lock+0x36/0x1c0
[  840.883307]  ? __lock_is_held+0xb5/0x140
2033/05/18 03:45:34 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040))
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000c0ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.887396]  ? check_same_owner+0x320/0x320
[  840.891734]  ? rcu_note_context_switch+0x710/0x710
[  840.896495] binder: undelivered TRANSACTION_ERROR: 29189
[  840.896681]  ? put_dec+0xf0/0xf0
[  840.905464]  ? format_decode+0x1a9/0xae0
[  840.909529]  __should_failslab+0x124/0x180
[  840.913773]  should_failslab+0x9/0x14
[  840.917578]  kmem_cache_alloc_node+0x272/0x780
[  840.922176]  __alloc_skb+0x111/0x780
[  840.925901]  ? skb_scrub_packet+0x580/0x580
[  840.930229]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  840.935441]  ? netlink_has_listeners+0x2ff/0x4c0
[  840.940209]  ? netlink_tap_init_net+0x3c0/0x3c0
[  840.942531] binder: 24965:24967 transaction failed 29189/-22, size 0-0 line 2856
[  840.944888]  kobject_uevent_env+0x801/0xea0
[  840.944905]  ? device_pm_add+0x221/0x340
[  840.944929]  kobject_uevent+0x1f/0x30
[  840.944943]  device_add+0xb01/0x16d0
[  840.944961]  ? device_private_init+0x230/0x230
[  840.944986]  ? kfree+0x1e9/0x260
[  840.976458]  ? kfree_const+0x5e/0x70
[  840.980187]  device_create_groups_vargs+0x1ff/0x270
2033/05/18 03:45:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  840.985211]  device_create+0xd3/0x100
[  840.989030]  ? device_create_vargs+0x60/0x60
[  840.989569] binder: 24965:24972 transaction failed 29189/-22, size 0-0 line 2856
[  840.993446]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  840.993462]  ? trace_hardirqs_on+0xd/0x10
[  840.993483]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  840.993499]  ? graph_lock+0x170/0x170
[  840.993524]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  840.993541]  ? lock_release+0xa10/0xa10
[  840.993562]  ? check_same_owner+0x320/0x320
[  841.033521]  ? rcu_note_context_switch+0x710/0x710
[  841.038459]  ? __lock_acquire+0x7f5/0x5140
[  841.042703]  ? __might_sleep+0x95/0x190
[  841.046723]  ? kasan_check_write+0x14/0x20
[  841.050974]  ? __mutex_lock+0x7d9/0x17f0
[  841.055040]  ? genl_rcv_msg+0x13a/0x170
[  841.059006]  ? __lock_acquire+0x7f5/0x5140
[  841.063236]  ? mutex_trylock+0x2a0/0x2a0
[  841.067289]  ? perf_trace_lock+0xd6/0x900
[  841.071435]  ? graph_lock+0x170/0x170
[  841.075230]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  841.080412]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  841.085424]  ? validate_nla+0x2d9/0x7b0
[  841.089390]  hwsim_new_radio_nl+0x7b8/0xa60
[  841.093702]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  841.098883]  ? __netlink_ns_capable+0x100/0x130
[  841.103548]  genl_family_rcv_msg+0x889/0x1120
[  841.108044]  ? genl_rcv+0x40/0x40
[  841.111487]  ? lock_downgrade+0x8e0/0x8e0
[  841.115620]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  841.120630]  ? lock_acquire+0x1dc/0x520
[  841.124588]  ? genl_rcv+0x19/0x40
[  841.128051]  genl_rcv_msg+0xc6/0x170
[  841.131756]  netlink_rcv_skb+0x172/0x440
[  841.135807]  ? genl_family_rcv_msg+0x1120/0x1120
[  841.140556]  ? netlink_ack+0xbc0/0xbc0
[  841.144429]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  841.149606]  ? netlink_skb_destructor+0x210/0x210
[  841.154441]  genl_rcv+0x28/0x40
[  841.157709]  netlink_unicast+0x58b/0x740
[  841.161765]  ? netlink_attachskb+0x970/0x970
[  841.166168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  841.171694]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  841.176697]  ? security_netlink_send+0x88/0xb0
[  841.181268]  netlink_sendmsg+0x9f0/0xfa0
[  841.185324]  ? netlink_unicast+0x740/0x740
[  841.189550]  ? security_socket_sendmsg+0x94/0xc0
[  841.194307]  ? netlink_unicast+0x740/0x740
[  841.198546]  sock_sendmsg+0xd5/0x120
[  841.202251]  ___sys_sendmsg+0x805/0x940
[  841.206219]  ? copy_msghdr_from_user+0x560/0x560
[  841.210982]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  841.216517]  ? proc_fail_nth_write+0x96/0x1f0
[  841.221005]  ? __fget_light+0x2ef/0x430
[  841.224988]  ? fget_raw+0x20/0x20
[  841.228429]  ? find_held_lock+0x36/0x1c0
[  841.232485]  ? kasan_check_write+0x14/0x20
[  841.236713]  ? wait_for_completion+0x870/0x870
[  841.241291]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  841.246815]  ? sockfd_lookup_light+0xc5/0x160
[  841.251302]  __sys_sendmsg+0x115/0x270
[  841.255181]  ? __ia32_sys_shutdown+0x80/0x80
[  841.259586]  ? __sb_end_write+0xac/0xe0
[  841.263551]  ? fput+0x130/0x1a0
[  841.266819]  ? ksys_write+0x1a6/0x250
[  841.270620]  __x64_sys_sendmsg+0x78/0xb0
[  841.274672]  do_syscall_64+0x1b1/0x800
[  841.278549]  ? finish_task_switch+0x1ca/0x840
[  841.283040]  ? syscall_return_slowpath+0x5c0/0x5c0
[  841.287959]  ? syscall_return_slowpath+0x30f/0x5c0
[  841.292889]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  841.298246]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  841.303089]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  841.308262] RIP: 0033:0x455a09
[  841.311438] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  841.319137] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  841.326398] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
2033/05/18 03:45:35 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x8fcf0000]}, 0x10)

[  841.333676] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  841.340938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  841.348195] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001d
2033/05/18 03:45:35 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:35 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:35 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  841.430807] binder: undelivered TRANSACTION_ERROR: 29189
[  841.493880] binder: 24989:24990 transaction failed 29189/-22, size 0-0 line 2856
[  841.522902] binder: 24989:24990 transaction failed 29189/-22, size 0-0 line 2856
[  841.589943] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:35 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:35 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xf73]}, 0x10)

2033/05/18 03:45:35 executing program 3 (fault-call:3 fault-nth:30):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:35 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r2, 0x3}, @exit_looper={0x630d}, @register_looper={0x630b}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x30, 0x48, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r1}, @flat={0x77622a85, 0xa, r2, 0x2}], &(0x7f0000000040)=[0x78, 0x0, 0x0, 0x78, 0x70, 0x18, 0x68, 0x18, 0x48]}, 0x80000000}}], 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:35 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:35 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xe000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80)
inotify_rm_watch(r0, r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x101000, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
sendto$inet6(r2, &(0x7f00000001c0)="8f55356dd8f7d579880a70602016b543e41aead7e2e8a7329db790cc1cee22c3e76aef3c373dd647cca42eb913ca61b6e14b7f46419b8a96046b6b9aa1fdb9612c5edc295a73a6fcd99127143d057c14bc5cd3ee1517fb63f4a9a4bb2ba3c88b198bad54f4105fc87ff957f288802a34133646d85c0778507d2f", 0x64, 0x0, &(0x7f0000000100)={0xa, 0x4c20, 0x9, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}, 0x3}, 0x1c)

2033/05/18 03:45:35 executing program 7 (fault-call:4 fault-nth:0):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  841.982089] binder: 25016:25018 transaction failed 29189/-22, size 0-0 line 2856
[  841.982656] binder: 25015:25020 transaction failed 29189/-22, size 0-0 line 2856
[  842.002077] FAULT_INJECTION: forcing a failure.
[  842.002077] name failslab, interval 1, probability 0, space 0, times 0
[  842.013427] CPU: 0 PID: 25014 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  842.020709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  842.030068] Call Trace:
[  842.032672]  dump_stack+0x1b9/0x294
[  842.036326]  ? dump_stack_print_info.cold.2+0x52/0x52
[  842.041525]  ? kobject_uevent_env+0x62e/0xea0
[  842.046040]  should_fail.cold.4+0xa/0x1a
[  842.050114]  ? debug_check_no_locks_freed+0x310/0x310
[  842.055320]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  842.060448]  ? __might_sleep+0x95/0x190
[  842.064456]  ? graph_lock+0x170/0x170
[  842.068264]  ? __mutex_lock+0x7d9/0x17f0
[  842.072341]  ? unwind_get_return_address+0x61/0xa0
[  842.077299]  ? find_held_lock+0x36/0x1c0
[  842.081387]  ? __lock_is_held+0xb5/0x140
[  842.085472]  ? check_same_owner+0x320/0x320
[  842.089917]  ? rcu_note_context_switch+0x710/0x710
[  842.094837]  ? put_dec+0xf0/0xf0
[  842.098237]  ? format_decode+0x1a9/0xae0
[  842.102322]  __should_failslab+0x124/0x180
[  842.106549]  should_failslab+0x9/0x14
[  842.110338]  kmem_cache_alloc_node+0x272/0x780
[  842.114921]  __alloc_skb+0x111/0x780
[  842.118627]  ? skb_scrub_packet+0x580/0x580
[  842.122939]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  842.128126]  ? netlink_has_listeners+0x2ff/0x4c0
[  842.132870]  ? netlink_tap_init_net+0x3c0/0x3c0
[  842.137536]  kobject_uevent_env+0x801/0xea0
[  842.141844]  ? device_pm_add+0x221/0x340
[  842.145916]  kobject_uevent+0x1f/0x30
[  842.149705]  device_add+0xb01/0x16d0
[  842.153497]  ? device_private_init+0x230/0x230
[  842.158067]  ? kfree+0x1e9/0x260
[  842.161425]  ? kfree_const+0x5e/0x70
[  842.165131]  device_create_groups_vargs+0x1ff/0x270
[  842.170141]  device_create+0xd3/0x100
[  842.173931]  ? device_create_vargs+0x60/0x60
[  842.178341]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  842.183450]  ? trace_hardirqs_on+0xd/0x10
[  842.187589]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  842.192507]  ? graph_lock+0x170/0x170
[  842.196326]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  842.202460]  ? lock_release+0xa10/0xa10
[  842.206422]  ? check_same_owner+0x320/0x320
[  842.210744]  ? rcu_note_context_switch+0x710/0x710
[  842.215658]  ? __lock_acquire+0x7f5/0x5140
[  842.219884]  ? __might_sleep+0x95/0x190
[  842.223858]  ? kasan_check_write+0x14/0x20
[  842.228104]  ? __mutex_lock+0x7d9/0x17f0
[  842.232165]  ? genl_rcv_msg+0x13a/0x170
[  842.236134]  ? __lock_acquire+0x7f5/0x5140
[  842.240362]  ? mutex_trylock+0x2a0/0x2a0
[  842.244410]  ? perf_trace_lock+0xd6/0x900
[  842.248545]  ? graph_lock+0x170/0x170
[  842.252345]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  842.257535]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  842.262539]  ? validate_nla+0x2d9/0x7b0
[  842.266515]  hwsim_new_radio_nl+0x7b8/0xa60
[  842.270834]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  842.276022]  ? __netlink_ns_capable+0x100/0x130
[  842.280687]  genl_family_rcv_msg+0x889/0x1120
[  842.285178]  ? genl_rcv+0x40/0x40
[  842.288620]  ? lock_downgrade+0x8e0/0x8e0
[  842.292755]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  842.297764]  ? lock_acquire+0x1dc/0x520
[  842.301724]  ? genl_rcv+0x19/0x40
[  842.305179]  genl_rcv_msg+0xc6/0x170
[  842.308881]  netlink_rcv_skb+0x172/0x440
[  842.312930]  ? genl_family_rcv_msg+0x1120/0x1120
[  842.317672]  ? netlink_ack+0xbc0/0xbc0
[  842.321546]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  842.326722]  ? netlink_skb_destructor+0x210/0x210
[  842.331565]  genl_rcv+0x28/0x40
[  842.334838]  netlink_unicast+0x58b/0x740
[  842.338898]  ? netlink_attachskb+0x970/0x970
[  842.343298]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  842.348823]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  842.353833]  ? security_netlink_send+0x88/0xb0
[  842.358404]  netlink_sendmsg+0x9f0/0xfa0
[  842.362460]  ? netlink_unicast+0x740/0x740
[  842.366685]  ? security_socket_sendmsg+0x94/0xc0
[  842.371427]  ? netlink_unicast+0x740/0x740
[  842.375655]  sock_sendmsg+0xd5/0x120
[  842.379364]  ___sys_sendmsg+0x805/0x940
[  842.383331]  ? copy_msghdr_from_user+0x560/0x560
[  842.388089]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  842.393613]  ? proc_fail_nth_write+0x96/0x1f0
[  842.399083]  ? __fget_light+0x2ef/0x430
[  842.403046]  ? fget_raw+0x20/0x20
[  842.406488]  ? find_held_lock+0x36/0x1c0
[  842.410559]  ? kasan_check_write+0x14/0x20
[  842.414791]  ? wait_for_completion+0x870/0x870
[  842.419373]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  842.424900]  ? sockfd_lookup_light+0xc5/0x160
[  842.429384]  __sys_sendmsg+0x115/0x270
[  842.433261]  ? __ia32_sys_shutdown+0x80/0x80
[  842.437662]  ? __sb_end_write+0xac/0xe0
[  842.441641]  ? fput+0x130/0x1a0
[  842.444908]  ? ksys_write+0x1a6/0x250
[  842.448708]  __x64_sys_sendmsg+0x78/0xb0
[  842.452778]  do_syscall_64+0x1b1/0x800
[  842.456750]  ? finish_task_switch+0x1ca/0x840
[  842.461254]  ? syscall_return_slowpath+0x5c0/0x5c0
[  842.466174]  ? syscall_return_slowpath+0x30f/0x5c0
[  842.471099]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  842.476456]  ? trace_hardirqs_off_thunk+0x1a/0x1c
2033/05/18 03:45:35 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xf78f]}, 0x10)

2033/05/18 03:45:35 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  842.481293]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  842.486465] RIP: 0033:0x455a09
[  842.489640] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  842.497344] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  842.504599] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  842.511854] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  842.519126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  842.526381] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001e
2033/05/18 03:45:36 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:36 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  842.541544] binder: 25015:25031 transaction failed 29189/-22, size 0-0 line 2856
[  842.546639] binder: 25016:25018 ioctl c0306201 20000240 returned -14
2033/05/18 03:45:36 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:36 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x6fb8]}, 0x10)

2033/05/18 03:45:36 executing program 3 (fault-call:3 fault-nth:31):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  842.627011] binder: undelivered TRANSACTION_ERROR: 29189
[  842.657415] binder: 25047:25048 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:36 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:36 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00?', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  842.710433] binder: 25052:25053 transaction failed 29189/-22, size 0-0 line 2856
[  842.730195] binder: 25047:25048 ioctl c0306201 20000240 returned -14
[  842.758478] FAULT_INJECTION: forcing a failure.
[  842.758478] name failslab, interval 1, probability 0, space 0, times 0
[  842.769805] CPU: 0 PID: 25059 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  842.777090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  842.786451] Call Trace:
[  842.789051]  dump_stack+0x1b9/0x294
[  842.792693]  ? dump_stack_print_info.cold.2+0x52/0x52
[  842.797892]  ? kobject_uevent_env+0x62e/0xea0
[  842.802398]  should_fail.cold.4+0xa/0x1a
2033/05/18 03:45:36 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x95bf]}, 0x10)

[  842.806466]  ? debug_check_no_locks_freed+0x310/0x310
[  842.811849]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  842.816968]  ? __might_sleep+0x95/0x190
[  842.820953]  ? graph_lock+0x170/0x170
[  842.824764]  ? __mutex_lock+0x7d9/0x17f0
[  842.828834]  ? unwind_get_return_address+0x61/0xa0
[  842.833774]  ? find_held_lock+0x36/0x1c0
[  842.837845]  ? __lock_is_held+0xb5/0x140
[  842.841927]  ? check_same_owner+0x320/0x320
[  842.846269]  ? rcu_note_context_switch+0x710/0x710
[  842.851223]  ? put_dec+0xf0/0xf0
[  842.854598]  ? format_decode+0x1a9/0xae0
[  842.858670]  __should_failslab+0x124/0x180
[  842.862916]  should_failslab+0x9/0x14
[  842.866725]  kmem_cache_alloc_node+0x272/0x780
[  842.871330]  __alloc_skb+0x111/0x780
[  842.875056]  ? skb_scrub_packet+0x580/0x580
[  842.879392]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  842.884689]  ? netlink_has_listeners+0x2ff/0x4c0
[  842.889445]  ? netlink_tap_init_net+0x3c0/0x3c0
[  842.894103]  kobject_uevent_env+0x801/0xea0
[  842.898411]  ? device_pm_add+0x221/0x340
[  842.902477]  kobject_uevent+0x1f/0x30
[  842.906273]  device_add+0xb01/0x16d0
[  842.909978]  ? device_private_init+0x230/0x230
[  842.914554]  ? kfree+0x1e9/0x260
[  842.917907]  ? kfree_const+0x5e/0x70
[  842.921609]  device_create_groups_vargs+0x1ff/0x270
[  842.926623]  device_create+0xd3/0x100
[  842.930419]  ? device_create_vargs+0x60/0x60
[  842.934813]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  842.939899]  ? trace_hardirqs_on+0xd/0x10
[  842.944041]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  842.948968]  ? graph_lock+0x170/0x170
[  842.952758]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  842.958897]  ? lock_release+0xa10/0xa10
[  842.962859]  ? check_same_owner+0x320/0x320
[  842.967177]  ? rcu_note_context_switch+0x710/0x710
[  842.972094]  ? __lock_acquire+0x7f5/0x5140
[  842.976331]  ? __might_sleep+0x95/0x190
[  842.980311]  ? kasan_check_write+0x14/0x20
[  842.984551]  ? __mutex_lock+0x7d9/0x17f0
[  842.988605]  ? genl_rcv_msg+0x13a/0x170
[  842.992571]  ? __lock_acquire+0x7f5/0x5140
[  842.996790]  ? mutex_trylock+0x2a0/0x2a0
[  843.000843]  ? graph_lock+0x170/0x170
[  843.004625]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  843.009813]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.014815]  ? validate_nla+0x2d9/0x7b0
[  843.018780]  hwsim_new_radio_nl+0x7b8/0xa60
[  843.023094]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  843.028293]  ? __netlink_ns_capable+0x100/0x130
[  843.032952]  genl_family_rcv_msg+0x889/0x1120
[  843.037431]  ? genl_rcv+0x40/0x40
[  843.040877]  ? lock_downgrade+0x8e0/0x8e0
[  843.045012]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.050036]  ? kasan_check_read+0x11/0x20
[  843.054176]  ? lock_acquire+0x1dc/0x520
[  843.058150]  ? genl_rcv+0x19/0x40
[  843.061601]  genl_rcv_msg+0xc6/0x170
[  843.065315]  netlink_rcv_skb+0x172/0x440
[  843.069371]  ? genl_family_rcv_msg+0x1120/0x1120
[  843.074111]  ? netlink_ack+0xbc0/0xbc0
[  843.077995]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  843.083201]  ? netlink_skb_destructor+0x210/0x210
[  843.088040]  genl_rcv+0x28/0x40
[  843.091319]  netlink_unicast+0x58b/0x740
[  843.095373]  ? netlink_attachskb+0x970/0x970
[  843.099775]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  843.105310]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.110316]  ? security_netlink_send+0x88/0xb0
[  843.114881]  netlink_sendmsg+0x9f0/0xfa0
[  843.118929]  ? netlink_unicast+0x740/0x740
[  843.123149]  ? security_socket_sendmsg+0x94/0xc0
[  843.127888]  ? netlink_unicast+0x740/0x740
[  843.132114]  sock_sendmsg+0xd5/0x120
[  843.135814]  ___sys_sendmsg+0x805/0x940
[  843.139779]  ? copy_msghdr_from_user+0x560/0x560
[  843.144527]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  843.150049]  ? proc_fail_nth_write+0x96/0x1f0
[  843.154534]  ? __fget_light+0x2ef/0x430
[  843.158505]  ? fget_raw+0x20/0x20
[  843.161943]  ? find_held_lock+0x36/0x1c0
[  843.165991]  ? kasan_check_write+0x14/0x20
[  843.170226]  ? wait_for_completion+0x870/0x870
[  843.174800]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  843.181458]  ? sockfd_lookup_light+0xc5/0x160
[  843.185947]  __sys_sendmsg+0x115/0x270
[  843.189837]  ? __ia32_sys_shutdown+0x80/0x80
[  843.194251]  ? __sb_end_write+0xac/0xe0
[  843.198220]  ? fput+0x130/0x1a0
[  843.201480]  ? ksys_write+0x1a6/0x250
[  843.205281]  __x64_sys_sendmsg+0x78/0xb0
[  843.209335]  do_syscall_64+0x1b1/0x800
[  843.213221]  ? finish_task_switch+0x1ca/0x840
[  843.217700]  ? syscall_return_slowpath+0x5c0/0x5c0
[  843.222701]  ? syscall_return_slowpath+0x30f/0x5c0
[  843.227628]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  843.232978]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  843.237820]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  843.243011] RIP: 0033:0x455a09
[  843.246188] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  843.253880] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  843.261133] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  843.268387] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  843.275643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  843.282906] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000001f
[  843.299094] binder: 25052:25053 transaction failed 29189/-22, size 0-0 line 2856
[  843.360693] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:37 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:37 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000080", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:37 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x77330000]}, 0x10)

2033/05/18 03:45:37 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={<r1=>0x0, 0x7ee}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x1d97}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0xa77f, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="06f9e17588cb2c39e8b4e2e18c580e", 0xf, 0x9}, {&(0x7f00000000c0)="0b8c865108dc901559bbc4551892ef8e5fec3f0a01e6095b6bf8b73cd07f4688f7ce2b1bb265802e5d50dc54fe9e35b198f0187e8d387a8192b30d60a8603696615cef0a38695efda097a48ff4ed06e0353d4a3a", 0x54, 0x7}], 0x2002000, &(0x7f0000000200)='ppp0vboxnet0/bdev.}^ppp1\x00')

2033/05/18 03:45:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:37 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
socket$bt_hidp(0x1f, 0x3, 0x6)
socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="028c28e2f63bf8cee6b106aed4de10"], 0x3)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="06000000"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
fsync(r0)

2033/05/18 03:45:37 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xffffff9e, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:37 executing program 3 (fault-call:3 fault-nth:32):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  843.540681] FAULT_INJECTION: forcing a failure.
[  843.540681] name failslab, interval 1, probability 0, space 0, times 0
[  843.552097] CPU: 0 PID: 25098 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  843.559382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  843.568741] Call Trace:
[  843.571347]  dump_stack+0x1b9/0x294
[  843.574413] binder: 25087:25089 transaction failed 29189/-22, size 0-0 line 2856
[  843.574986]  ? dump_stack_print_info.cold.2+0x52/0x52
[  843.575006]  ? lock_downgrade+0x8e0/0x8e0
[  843.591871]  should_fail.cold.4+0xa/0x1a
[  843.595944]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  843.596416] binder: 25087:25089 transaction failed 29189/-22, size 0-0 line 2856
[  843.601061]  ? graph_lock+0x170/0x170
[  843.601080]  ? kernel_text_address+0x79/0xf0
[  843.601099]  ? __unwind_start+0x166/0x330
[  843.601119]  ? find_held_lock+0x36/0x1c0
[  843.601138]  ? __lock_is_held+0xb5/0x140
[  843.601157]  ? cik_sdma_enable+0x2e0/0x3f0
[  843.633314]  ? check_same_owner+0x320/0x320
2033/05/18 03:45:37 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10)

2033/05/18 03:45:37 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  843.637640]  ? device_create_groups_vargs+0x1ff/0x270
[  843.642837]  ? device_create+0xd3/0x100
[  843.646817]  ? rcu_note_context_switch+0x710/0x710
[  843.651470] binder: undelivered TRANSACTION_ERROR: 29189
[  843.651747]  ? netlink_rcv_skb+0x172/0x440
[  843.651762]  ? genl_rcv+0x28/0x40
[  843.651775]  ? netlink_unicast+0x58b/0x740
[  843.651794]  __should_failslab+0x124/0x180
[  843.657904] binder: undelivered TRANSACTION_ERROR: 29189
[  843.661476]  should_failslab+0x9/0x14
[  843.661493]  kmem_cache_alloc+0x2af/0x760
[  843.661522]  skb_clone+0x1ed/0x4f0
[  843.661541]  ? refcount_add_not_zero+0x250/0x320
[  843.661558]  ? skb_split+0x11d0/0x11d0
[  843.661576]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.661589]  ? netlink_trim+0x1b2/0x370
[  843.661606]  ? netlink_skb_destructor+0x210/0x210
[  843.697406] binder: 25108:25110 transaction failed 29189/-22, size 0-0 line 2856
[  843.698994]  ? cleanup_uevent_env+0x40/0x40
[  843.699021]  netlink_broadcast_filtered+0x1024/0x1580
[  843.699046]  ? __netlink_sendskb+0xd0/0xd0
[  843.699076]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
2033/05/18 03:45:37 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x1fdb0000]}, 0x10)

[  843.699097]  ? refcount_inc_not_zero+0x1dd/0x2d0
[  843.718241] binder: 25108:25110 transaction failed 29189/-22, size 0-0 line 2856
[  843.720416]  ? refcount_add_not_zero+0x320/0x320
[  843.720448]  ? cleanup_uevent_env+0x40/0x40
[  843.720468]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.720486]  kobject_uevent_env+0x6e4/0xea0
[  843.720505]  ? device_pm_add+0x221/0x340
[  843.774534]  kobject_uevent+0x1f/0x30
[  843.778345]  device_add+0xb01/0x16d0
[  843.782072]  ? device_private_init+0x230/0x230
[  843.786663]  ? kfree+0x1e9/0x260
[  843.790041]  ? kfree_const+0x5e/0x70
[  843.791818] binder: undelivered TRANSACTION_ERROR: 29189
[  843.793763]  device_create_groups_vargs+0x1ff/0x270
[  843.793783]  device_create+0xd3/0x100
[  843.793801]  ? device_create_vargs+0x60/0x60
[  843.793824]  ? mac80211_hwsim_new_radio+0x1a9/0x3410
[  843.793840]  ? trace_hardirqs_on+0xd/0x10
[  843.793863]  mac80211_hwsim_new_radio+0x3c6/0x3410
[  843.809218] binder: undelivered TRANSACTION_ERROR: 29189
[  843.812493]  ? graph_lock+0x170/0x170
[  843.812522]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  843.812544]  ? lock_release+0xa10/0xa10
[  843.812563]  ? check_same_owner+0x320/0x320
[  843.812587]  ? rcu_note_context_switch+0x710/0x710
[  843.855266]  ? __lock_acquire+0x7f5/0x5140
[  843.859540]  ? __might_sleep+0x95/0x190
[  843.863523]  ? kasan_check_write+0x14/0x20
[  843.867769]  ? __mutex_lock+0x7d9/0x17f0
[  843.871840]  ? genl_rcv_msg+0x13a/0x170
[  843.875815]  ? __lock_acquire+0x7f5/0x5140
[  843.880042]  ? mutex_trylock+0x2a0/0x2a0
[  843.884094]  ? perf_trace_lock+0xd6/0x900
[  843.888245]  ? graph_lock+0x170/0x170
[  843.892042]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  843.897254]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.902258]  ? validate_nla+0x2d9/0x7b0
[  843.906240]  hwsim_new_radio_nl+0x7b8/0xa60
[  843.910563]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  843.915776]  ? __netlink_ns_capable+0x100/0x130
[  843.920452]  genl_family_rcv_msg+0x889/0x1120
[  843.924946]  ? genl_rcv+0x40/0x40
[  843.928385]  ? lock_downgrade+0x8e0/0x8e0
[  843.932520]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.937719]  ? lock_acquire+0x1dc/0x520
[  843.941687]  ? genl_rcv+0x19/0x40
[  843.945135]  genl_rcv_msg+0xc6/0x170
[  843.948834]  netlink_rcv_skb+0x172/0x440
[  843.952892]  ? genl_family_rcv_msg+0x1120/0x1120
[  843.957636]  ? netlink_ack+0xbc0/0xbc0
[  843.961507]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  843.966695]  ? netlink_skb_destructor+0x210/0x210
[  843.971531]  genl_rcv+0x28/0x40
[  843.974803]  netlink_unicast+0x58b/0x740
[  843.978852]  ? netlink_attachskb+0x970/0x970
[  843.983249]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  843.988780]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  843.993782]  ? security_netlink_send+0x88/0xb0
[  843.998351]  netlink_sendmsg+0x9f0/0xfa0
[  844.002406]  ? netlink_unicast+0x740/0x740
[  844.006629]  ? security_socket_sendmsg+0x94/0xc0
[  844.011369]  ? netlink_unicast+0x740/0x740
[  844.015590]  sock_sendmsg+0xd5/0x120
[  844.019292]  ___sys_sendmsg+0x805/0x940
[  844.023257]  ? copy_msghdr_from_user+0x560/0x560
[  844.028008]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  844.033539]  ? proc_fail_nth_write+0x96/0x1f0
[  844.038031]  ? __fget_light+0x2ef/0x430
[  844.042003]  ? fget_raw+0x20/0x20
[  844.045448]  ? find_held_lock+0x36/0x1c0
[  844.049496]  ? kasan_check_write+0x14/0x20
[  844.053722]  ? wait_for_completion+0x870/0x870
[  844.058293]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  844.063824]  ? sockfd_lookup_light+0xc5/0x160
[  844.068312]  __sys_sendmsg+0x115/0x270
[  844.072232]  ? __ia32_sys_shutdown+0x80/0x80
[  844.076647]  ? __sb_end_write+0xac/0xe0
[  844.080614]  ? fput+0x130/0x1a0
[  844.083876]  ? ksys_write+0x1a6/0x250
[  844.087680]  __x64_sys_sendmsg+0x78/0xb0
[  844.091741]  do_syscall_64+0x1b1/0x800
[  844.095632]  ? finish_task_switch+0x1ca/0x840
[  844.100121]  ? syscall_return_slowpath+0x5c0/0x5c0
[  844.105044]  ? syscall_return_slowpath+0x30f/0x5c0
[  844.109973]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  844.115329]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  844.120168]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  844.125351] RIP: 0033:0x455a09
[  844.128532] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  844.136223] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  844.143562] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  844.150846] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  844.158101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  844.165362] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000020
[  844.175924] binder: 25085:25097 unknown command 6
[  844.187326] binder: 25085:25097 ioctl c0306201 20007000 returned -22
[  844.203498] binder: 25085:25097 ioctl c0306201 20000240 returned -11
[  844.224691] binder: 25085:25122 unknown command 6
[  844.229680] binder: 25085:25122 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:38 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:38 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x879b]}, 0x10)

2033/05/18 03:45:38 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+30000}, 0x10)
r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:38 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x4b8, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:38 executing program 3 (fault-call:3 fault-nth:33):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x4e23}], 0x10)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0)
getdents64(r2, &(0x7f0000000040)=""/144, 0x90)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc)

[  844.518773] binder: 25127:25129 transaction failed 29189/-22, size 0-0 line 2856
[  844.543906] FAULT_INJECTION: forcing a failure.
[  844.543906] name failslab, interval 1, probability 0, space 0, times 0
[  844.555222] CPU: 0 PID: 25135 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
2033/05/18 03:45:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xffc3]}, 0x10)

2033/05/18 03:45:38 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000fffffdfd00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  844.562504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  844.571866] Call Trace:
[  844.574469]  dump_stack+0x1b9/0x294
[  844.578110]  ? dump_stack_print_info.cold.2+0x52/0x52
[  844.583330]  should_fail.cold.4+0xa/0x1a
[  844.587402]  ? __kmalloc_track_caller+0x14a/0x760
[  844.592254]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  844.597371]  ? device_bind_driver+0x19/0xd0
[  844.601702]  ? mac80211_hwsim_new_radio+0x451/0x3410
[  844.606816]  ? hwsim_new_radio_nl+0x7b8/0xa60
[  844.611321]  ? genl_family_rcv_msg+0x889/0x1120
[  844.616000]  ? genl_rcv_msg+0xc6/0x170
[  844.619893]  ? netlink_rcv_skb+0x172/0x440
[  844.624135]  ? genl_rcv+0x28/0x40
[  844.627609]  ? graph_lock+0x170/0x170
[  844.631418]  ? __sys_sendmsg+0x115/0x270
[  844.635485]  ? __x64_sys_sendmsg+0x78/0xb0
[  844.639729]  ? do_syscall_64+0x1b1/0x800
[  844.643796]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  844.649184]  ? find_held_lock+0x36/0x1c0
[  844.653259]  ? __lock_is_held+0xb5/0x140
[  844.657345]  ? check_same_owner+0x320/0x320
[  844.661680]  ? rcu_note_context_switch+0x710/0x710
[  844.666623]  ? rcu_read_lock_sched_held+0x108/0x120
[  844.671655]  __should_failslab+0x124/0x180
[  844.675909]  should_failslab+0x9/0x14
[  844.679728]  kmem_cache_alloc+0x2af/0x760
[  844.683886]  ? memcpy+0x45/0x50
[  844.687178]  ? kstrdup+0x59/0x70
[  844.690560]  __kernfs_new_node+0xe7/0x580
[  844.694721]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  844.699494]  ? lock_downgrade+0x8e0/0x8e0
[  844.703766]  ? kasan_check_read+0x11/0x20
[  844.707931]  ? do_raw_spin_unlock+0x9e/0x2e0
[  844.712355]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  844.716950]  kernfs_new_node+0x80/0xf0
[  844.720847]  kernfs_create_link+0x33/0x180
[  844.725095]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  844.730384]  sysfs_create_link+0x65/0xc0
[  844.734452]  driver_sysfs_add+0x107/0x2a0
[  844.738610]  device_bind_driver+0x19/0xd0
[  844.742766]  mac80211_hwsim_new_radio+0x451/0x3410
[  844.747700]  ? graph_lock+0x170/0x170
[  844.751517]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  844.757667]  ? lock_release+0xa10/0xa10
[  844.761646]  ? check_same_owner+0x320/0x320
2033/05/18 03:45:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x73f000000000000]}, 0x10)

2033/05/18 03:45:38 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  844.765977]  ? rcu_note_context_switch+0x710/0x710
[  844.770914]  ? __lock_acquire+0x7f5/0x5140
[  844.775167]  ? __might_sleep+0x95/0x190
[  844.779161]  ? kasan_check_write+0x14/0x20
[  844.783411]  ? __mutex_lock+0x7d9/0x17f0
[  844.787480]  ? genl_rcv_msg+0x13a/0x170
[  844.791473]  ? __lock_acquire+0x7f5/0x5140
[  844.795843]  ? mutex_trylock+0x2a0/0x2a0
[  844.800032]  ? perf_trace_lock+0xd6/0x900
[  844.801173] binder: undelivered TRANSACTION_ERROR: 29189
[  844.804181]  ? graph_lock+0x170/0x170
[  844.804203]  ? __sanitizer_cov_trace_switch+0x53/0x90
2033/05/18 03:45:38 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  844.804222]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  844.804239]  ? validate_nla+0x2d9/0x7b0
[  844.804262]  hwsim_new_radio_nl+0x7b8/0xa60
[  844.831943]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  844.837157]  ? __netlink_ns_capable+0x100/0x130
[  844.841843]  genl_family_rcv_msg+0x889/0x1120
[  844.846356]  ? genl_rcv+0x40/0x40
[  844.849820]  ? lock_downgrade+0x8e0/0x8e0
[  844.853980]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  844.859011]  ? lock_acquire+0x1dc/0x520
[  844.862993]  ? genl_rcv+0x19/0x40
[  844.866469]  genl_rcv_msg+0xc6/0x170
[  844.870198]  netlink_rcv_skb+0x172/0x440
[  844.874264]  ? genl_family_rcv_msg+0x1120/0x1120
[  844.879026]  ? netlink_ack+0xbc0/0xbc0
[  844.882921]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  844.888128]  ? netlink_skb_destructor+0x210/0x210
[  844.892984]  genl_rcv+0x28/0x40
[  844.896266]  netlink_unicast+0x58b/0x740
[  844.900336]  ? netlink_attachskb+0x970/0x970
[  844.904756]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  844.910300]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  844.915322]  ? security_netlink_send+0x88/0xb0
[  844.919912]  netlink_sendmsg+0x9f0/0xfa0
[  844.923986]  ? netlink_unicast+0x740/0x740
[  844.928234]  ? security_socket_sendmsg+0x94/0xc0
[  844.932998]  ? netlink_unicast+0x740/0x740
[  844.938193]  sock_sendmsg+0xd5/0x120
[  844.941916]  ___sys_sendmsg+0x805/0x940
[  844.945885]  ? copy_msghdr_from_user+0x560/0x560
[  844.950645]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  844.956177]  ? proc_fail_nth_write+0x96/0x1f0
[  844.960753]  ? __fget_light+0x2ef/0x430
[  844.964719]  ? fget_raw+0x20/0x20
[  844.968157]  ? find_held_lock+0x36/0x1c0
[  844.972211]  ? kasan_check_write+0x14/0x20
[  844.976442]  ? wait_for_completion+0x870/0x870
[  844.981029]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  844.986559]  ? sockfd_lookup_light+0xc5/0x160
[  844.991475]  __sys_sendmsg+0x115/0x270
[  844.995350]  ? __ia32_sys_shutdown+0x80/0x80
[  844.999747]  ? __sb_end_write+0xac/0xe0
[  845.003714]  ? fput+0x130/0x1a0
[  845.006989]  ? ksys_write+0x1a6/0x250
[  845.010801]  __x64_sys_sendmsg+0x78/0xb0
[  845.014854]  do_syscall_64+0x1b1/0x800
[  845.019088]  ? finish_task_switch+0x1ca/0x840
[  845.023580]  ? syscall_return_slowpath+0x5c0/0x5c0
[  845.028497]  ? syscall_return_slowpath+0x30f/0x5c0
[  845.033418]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  845.038782]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  845.043620]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  845.048794] RIP: 0033:0x455a09
[  845.051980] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  845.059678] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  845.066932] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  845.074188] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  845.081440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  845.088702] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000021
[  845.101175] binder: 25138:25141 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:38 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00)', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xef5b000000000000]}, 0x10)

[  845.126485] binder: 25157:25167 transaction failed 29189/-22, size 0-0 line 2856
[  845.136206] binder: 25138:25141 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:38 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000fdfdffff00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:38 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x6, &(0x7f0000000080)="bd2a33b4ebc886a254954a928a720c0047fc2f07d82c99640970")
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0xffffffffffff7ee4, 0x5}, 0xc)
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="046748c0"], 0x0, 0x0, &(0x7f0000002000)})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
fcntl$setsig(r3, 0xa, 0x4)
fcntl$setsig(r2, 0xa, 0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:38 executing program 3 (fault-call:3 fault-nth:34):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  845.176371] binder: 25157:25167 transaction failed 29189/-22, size 0-0 line 2856
[  845.205074] binder: undelivered TRANSACTION_ERROR: 29189
[  845.265926] FAULT_INJECTION: forcing a failure.
[  845.265926] name failslab, interval 1, probability 0, space 0, times 0
[  845.275457] binder: 25183:25184 unknown command -1068996860
[  845.277272] CPU: 1 PID: 25182 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  845.288105] binder: undelivered TRANSACTION_ERROR: 29189
[  845.290199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  845.290205] Call Trace:
[  845.290230]  dump_stack+0x1b9/0x294
[  845.290251]  ? dump_stack_print_info.cold.2+0x52/0x52
[  845.304391] binder: undelivered TRANSACTION_ERROR: 29189
[  845.305036]  ? __mutex_lock+0x7d9/0x17f0
[  845.305061]  should_fail.cold.4+0xa/0x1a
[  845.321048] binder: 25183:25184 ioctl c0306201 20007000 returned -22
[  845.321858]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  845.341513]  ? kasan_kmalloc+0xc4/0xe0
[  845.345415]  ? graph_lock+0x170/0x170
[  845.349228]  ? debug_check_no_locks_freed+0x310/0x310
[  845.354426]  ? find_held_lock+0x36/0x1c0
[  845.358496]  ? __lock_is_held+0xb5/0x140
[  845.362569]  ? check_same_owner+0x320/0x320
[  845.366896]  ? kasan_check_write+0x14/0x20
[  845.371133]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  845.376175]  ? rcu_note_context_switch+0x710/0x710
[  845.381372]  __should_failslab+0x124/0x180
[  845.385614]  should_failslab+0x9/0x14
[  845.389436]  kmem_cache_alloc+0x2af/0x760
[  845.393588]  ? __mutex_unlock_slowpath+0x180/0x8a0
[  845.398520]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  845.403562]  __kernfs_new_node+0xe7/0x580
[  845.407742]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  845.412508]  ? lock_downgrade+0x8e0/0x8e0
[  845.416663]  ? kasan_check_read+0x11/0x20
[  845.420823]  ? do_raw_spin_unlock+0x9e/0x2e0
[  845.425240]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  845.429825]  kernfs_new_node+0x80/0xf0
[  845.433726]  kernfs_create_link+0x33/0x180
[  845.437964]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  845.443248]  sysfs_create_link+0x65/0xc0
[  845.447330]  driver_sysfs_add+0x188/0x2a0
[  845.451479]  device_bind_driver+0x19/0xd0
[  845.455630]  mac80211_hwsim_new_radio+0x451/0x3410
[  845.460558]  ? graph_lock+0x170/0x170
[  845.464372]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  845.470520]  ? lock_release+0xa10/0xa10
[  845.474504]  ? check_same_owner+0x320/0x320
[  845.478827]  ? rcu_note_context_switch+0x710/0x710
[  845.483757]  ? __lock_acquire+0x7f5/0x5140
[  845.487994]  ? __might_sleep+0x95/0x190
[  845.491976]  ? kasan_check_write+0x14/0x20
[  845.496213]  ? __mutex_lock+0x7d9/0x17f0
[  845.500276]  ? genl_rcv_msg+0x13a/0x170
[  845.504257]  ? __lock_acquire+0x7f5/0x5140
[  845.508497]  ? mutex_trylock+0x2a0/0x2a0
[  845.512565]  ? graph_lock+0x170/0x170
[  845.516368]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  845.521569]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  845.526590]  ? validate_nla+0x2d9/0x7b0
[  845.530571]  hwsim_new_radio_nl+0x7b8/0xa60
[  845.534896]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  845.540092]  ? __netlink_ns_capable+0x100/0x130
[  845.544768]  genl_family_rcv_msg+0x889/0x1120
[  845.549272]  ? genl_rcv+0x40/0x40
[  845.552726]  ? lock_downgrade+0x8e0/0x8e0
[  845.556875]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  845.561896]  ? kasan_check_read+0x11/0x20
[  845.566044]  ? lock_acquire+0x1dc/0x520
[  845.570018]  ? genl_rcv+0x19/0x40
[  845.573487]  genl_rcv_msg+0xc6/0x170
[  845.577203]  netlink_rcv_skb+0x172/0x440
[  845.581264]  ? genl_family_rcv_msg+0x1120/0x1120
[  845.586023]  ? netlink_ack+0xbc0/0xbc0
[  845.589908]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  845.595099]  ? netlink_skb_destructor+0x210/0x210
[  845.599948]  genl_rcv+0x28/0x40
[  845.603229]  netlink_unicast+0x58b/0x740
[  845.607300]  ? netlink_attachskb+0x970/0x970
[  845.611721]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  845.617269]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  845.622301]  ? security_netlink_send+0x88/0xb0
[  845.626892]  netlink_sendmsg+0x9f0/0xfa0
[  845.630965]  ? netlink_unicast+0x740/0x740
[  845.635210]  ? security_socket_sendmsg+0x94/0xc0
[  845.639966]  ? netlink_unicast+0x740/0x740
[  845.644206]  sock_sendmsg+0xd5/0x120
[  845.647925]  ___sys_sendmsg+0x805/0x940
[  845.651908]  ? copy_msghdr_from_user+0x560/0x560
[  845.656677]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  845.662211]  ? proc_fail_nth_write+0x96/0x1f0
[  845.666717]  ? __fget_light+0x2ef/0x430
[  845.670693]  ? fget_raw+0x20/0x20
[  845.674146]  ? find_held_lock+0x36/0x1c0
[  845.678210]  ? kasan_check_write+0x14/0x20
[  845.682451]  ? wait_for_completion+0x870/0x870
[  845.687043]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  845.692583]  ? sockfd_lookup_light+0xc5/0x160
[  845.697087]  __sys_sendmsg+0x115/0x270
[  845.700971]  ? __ia32_sys_shutdown+0x80/0x80
[  845.705378]  ? __sb_end_write+0xac/0xe0
[  845.709353]  ? fput+0x130/0x1a0
[  845.712632]  ? ksys_write+0x1a6/0x250
[  845.716439]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  845.721283]  __x64_sys_sendmsg+0x78/0xb0
[  845.725352]  do_syscall_64+0x1b1/0x800
[  845.729239]  ? finish_task_switch+0x1ca/0x840
[  845.733735]  ? syscall_return_slowpath+0x5c0/0x5c0
[  845.738664]  ? syscall_return_slowpath+0x30f/0x5c0
[  845.743598]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  845.748965]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  845.753814]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  845.758998] RIP: 0033:0x455a09
[  845.762180] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  845.769890] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  845.777157] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  845.784423] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  845.791690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  845.798965] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000022
2033/05/18 03:45:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xafe6]}, 0x10)

2033/05/18 03:45:39 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306248, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:39 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:39 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000))

2033/05/18 03:45:39 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x397, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:39 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa9d717553838e573, 0x0)
bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x3333, 0x5f44, 0x4, 0x80, 0x2, 0x4}, 0x43f}, 0xa)

2033/05/18 03:45:39 executing program 3 (fault-call:3 fault-nth:35):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  845.823199] binder: 25183:25184 ioctl c0306201 20000240 returned -11
[  845.844473] binder: 25183:25184 unknown command -1068996860
[  845.850741] binder: 25183:25184 ioctl c0306201 20007000 returned -22
[  845.906232] binder: 25200:25203 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:39 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xc9c7]}, 0x10)

[  845.948505] binder: 25200:25203 ioctl c0306248 20000240 returned -22
[  845.952887] binder: 25212:25214 transaction failed 29189/-22, size 0-0 line 2856
[  845.984614] binder: 25200:25216 ioctl c0306248 20000240 returned -22
[  845.984626] binder: 25200:25203 transaction failed 29189/-22, size 0-0 line 2856
[  846.019149] binder: 25212:25214 transaction failed 29189/-22, size 0-0 line 2856
[  846.083237] FAULT_INJECTION: forcing a failure.
[  846.083237] name failslab, interval 1, probability 0, space 0, times 0
[  846.094590] CPU: 1 PID: 25197 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  846.101872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  846.104750] binder: undelivered TRANSACTION_ERROR: 29189
[  846.111240] Call Trace:
[  846.111268]  dump_stack+0x1b9/0x294
[  846.111291]  ? dump_stack_print_info.cold.2+0x52/0x52
[  846.111314]  should_fail.cold.4+0xa/0x1a
2033/05/18 03:45:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e23, 0x81, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e20, 0x7fff, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xffffffffffff5bdf}, @in6={0xa, 0x4e21, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xae4}], 0xe8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002480)={<r2=>0x0, 0x9, 0xffffffffffff0001, 0x3ab814c9, 0x80000000, 0x5dc}, &(0x7f00000024c0)=0x14)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000025c0)=ANY=[@ANYRES32=<r3=>r2, @ANYBLOB="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"], &(0x7f0000002500)=0xd2f)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001240)={r3, 0x7b, "7fbc1a2cc22600bc0c772edd7e99beffffd5b7dc31288ffdcbefb949fa4584c9111f1631f3f3c7b74913081ffcd445c1c9be44e8dbf058dc82b1e6f569336dc16e029fec4926a301622dd4e762d910bdd9f62582dbaa3ffea34245b9e12cc984f5d342a281dffadcdc8f8eb74286c4542bca73d1a93725e6da50d7"}, &(0x7f0000001300)=0x83)
r4 = dup2(r0, r0)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000300))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x6}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffffffa}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, @in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x701}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x3ff, @empty, 0xbaa}], 0xc0)
sendto$inet6(r1, &(0x7f0000000040)="b8", 0xfffffffffffffffd, 0x4040010, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x20}, 0x1c)
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x22)
ioctl$sock_netrom_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, [], 0x15}, 0xfffffffffffffff8}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @rand_addr=0xe39}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x4c)
setsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f00000002c0)=0x9, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  846.132291]  ? __kmalloc_track_caller+0x14a/0x760
[  846.137155]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  846.142641]  ? device_bind_driver+0x19/0xd0
[  846.146985]  ? mac80211_hwsim_new_radio+0x451/0x3410
[  846.152098]  ? hwsim_new_radio_nl+0x7b8/0xa60
[  846.156604]  ? genl_family_rcv_msg+0x889/0x1120
[  846.161308]  ? genl_rcv_msg+0xc6/0x170
[  846.165205]  ? netlink_rcv_skb+0x172/0x440
[  846.169444]  ? genl_rcv+0x28/0x40
[  846.172908]  ? graph_lock+0x170/0x170
[  846.176727]  ? __sys_sendmsg+0x115/0x270
[  846.180928]  ? __x64_sys_sendmsg+0x78/0xb0
[  846.185174]  ? do_syscall_64+0x1b1/0x800
[  846.189242]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  846.194615]  ? find_held_lock+0x36/0x1c0
[  846.198680]  ? __lock_is_held+0xb5/0x140
[  846.202774]  ? check_same_owner+0x320/0x320
[  846.207106]  ? rcu_note_context_switch+0x710/0x710
[  846.212040]  ? rcu_read_lock_sched_held+0x108/0x120
[  846.217061]  __should_failslab+0x124/0x180
[  846.221302]  should_failslab+0x9/0x14
[  846.225103]  kmem_cache_alloc+0x2af/0x760
[  846.231178]  ? memcpy+0x45/0x50
[  846.234460]  ? kstrdup+0x59/0x70
[  846.237832]  __kernfs_new_node+0xe7/0x580
[  846.241983]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  846.246742]  ? lock_downgrade+0x8e0/0x8e0
[  846.250895]  ? kasan_check_read+0x11/0x20
[  846.255042]  ? do_raw_spin_unlock+0x9e/0x2e0
[  846.259453]  ? do_raw_spin_trylock+0x1b0/0x1b0
[  846.264039]  kernfs_new_node+0x80/0xf0
[  846.267931]  kernfs_create_link+0x33/0x180
[  846.272172]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  846.277453]  sysfs_create_link+0x65/0xc0
[  846.281524]  driver_sysfs_add+0x107/0x2a0
[  846.285676]  device_bind_driver+0x19/0xd0
[  846.289825]  mac80211_hwsim_new_radio+0x451/0x3410
[  846.294756]  ? graph_lock+0x170/0x170
[  846.298571]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  846.304717]  ? lock_release+0xa10/0xa10
[  846.308689]  ? check_same_owner+0x320/0x320
[  846.313010]  ? rcu_note_context_switch+0x710/0x710
[  846.317938]  ? __lock_acquire+0x7f5/0x5140
[  846.322173]  ? __might_sleep+0x95/0x190
[  846.326152]  ? kasan_check_write+0x14/0x20
[  846.330390]  ? __mutex_lock+0x7d9/0x17f0
[  846.334451]  ? genl_rcv_msg+0x13a/0x170
[  846.338426]  ? __lock_acquire+0x7f5/0x5140
[  846.342668]  ? mutex_trylock+0x2a0/0x2a0
[  846.346727]  ? graph_lock+0x170/0x170
[  846.350530]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  846.355725]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  846.360740]  ? validate_nla+0x2d9/0x7b0
[  846.364731]  hwsim_new_radio_nl+0x7b8/0xa60
[  846.369059]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  846.374431]  ? __netlink_ns_capable+0x100/0x130
[  846.379112]  genl_family_rcv_msg+0x889/0x1120
[  846.383617]  ? genl_rcv+0x40/0x40
[  846.387070]  ? lock_downgrade+0x8e0/0x8e0
[  846.391241]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  846.396285]  ? kasan_check_read+0x11/0x20
[  846.400438]  ? lock_acquire+0x1dc/0x520
[  846.404415]  ? genl_rcv+0x19/0x40
[  846.407884]  genl_rcv_msg+0xc6/0x170
[  846.411604]  netlink_rcv_skb+0x172/0x440
[  846.415663]  ? genl_family_rcv_msg+0x1120/0x1120
[  846.420419]  ? netlink_ack+0xbc0/0xbc0
[  846.424304]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  846.429497]  ? netlink_skb_destructor+0x210/0x210
[  846.434344]  genl_rcv+0x28/0x40
[  846.437621]  netlink_unicast+0x58b/0x740
[  846.441696]  ? netlink_attachskb+0x970/0x970
[  846.446109]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  846.451647]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  846.456688]  ? security_netlink_send+0x88/0xb0
[  846.461275]  netlink_sendmsg+0x9f0/0xfa0
[  846.465342]  ? netlink_unicast+0x740/0x740
[  846.469585]  ? security_socket_sendmsg+0x94/0xc0
[  846.474340]  ? netlink_unicast+0x740/0x740
[  846.478580]  sock_sendmsg+0xd5/0x120
[  846.482296]  ___sys_sendmsg+0x805/0x940
[  846.486276]  ? copy_msghdr_from_user+0x560/0x560
[  846.491216]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  846.496755]  ? proc_fail_nth_write+0x96/0x1f0
[  846.501258]  ? __fget_light+0x2ef/0x430
[  846.505243]  ? fget_raw+0x20/0x20
[  846.508692]  ? find_held_lock+0x36/0x1c0
[  846.512758]  ? kasan_check_write+0x14/0x20
[  846.517003]  ? wait_for_completion+0x870/0x870
[  846.521600]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  846.527141]  ? sockfd_lookup_light+0xc5/0x160
[  846.531649]  __sys_sendmsg+0x115/0x270
[  846.535542]  ? __ia32_sys_shutdown+0x80/0x80
[  846.539952]  ? __sb_end_write+0xac/0xe0
[  846.543940]  ? fput+0x130/0x1a0
[  846.547215]  ? ksys_write+0x1a6/0x250
[  846.551021]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  846.555870]  __x64_sys_sendmsg+0x78/0xb0
[  846.559944]  do_syscall_64+0x1b1/0x800
[  846.563838]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  846.568681]  ? syscall_return_slowpath+0x5c0/0x5c0
[  846.573611]  ? syscall_return_slowpath+0x30f/0x5c0
[  846.578546]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  846.583913]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  846.588765]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  846.593958] RIP: 0033:0x455a09
[  846.597142] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  846.604847] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  846.612112] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  846.619378] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  846.626647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
2033/05/18 03:45:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000c3ffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:40 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x7f670000]}, 0x10)

2033/05/18 03:45:40 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)

[  846.634007] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000023
[  846.663169] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:40 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:40 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x800]})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  846.684864] binder: 25232:25236 transaction failed 29189/-22, size 0-0 line 2856
[  846.685586] binder: undelivered TRANSACTION_ERROR: 29189
[  846.754219] binder: 25232:25236 transaction failed 29189/-22, size 0-0 line 2856
[  846.767595] binder: 25243:25244 transaction failed 29189/-22, size 0-0 line 2856
[  846.793757] binder: 25243:25244 transaction failed 29189/-22, size 0-0 line 2856
[  846.814188] binder: undelivered TRANSACTION_ERROR: 29189
[  846.833783] Unknown ioctl -1073172816
[  846.852777] Unknown ioctl -1073172816
[  846.852925] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x54b]}, 0x10)

[  846.874793] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:40 executing program 3 (fault-call:3 fault-nth:36):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:40 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c3000000000000000000f", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:40 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:40 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010001dd00000000fe5743"], 0x0, 0x0, &(0x7f0000002000)})
socket$kcm(0x29, 0x2, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x1})
r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x42b, 0x4400)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffe3c, 0x0, &(0x7f00000003c0)="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"})

2033/05/18 03:45:40 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x4040)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14)
sendto$packet(r0, &(0x7f0000000040)="e1e8d2fd44c8f48beb92b377419d893fa25d9bf2ff09c986c680b3b2b01512194a", 0x21, 0x50, &(0x7f0000000100)={0x11, 0x1f, r2, 0x1, 0x1f, 0x6}, 0x14)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
close(r1)
sendto$inet6(r3, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getpeername$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
fcntl$setpipe(r0, 0x407, 0x10000)
recvfrom$ipx(r0, &(0x7f0000000280)=""/98, 0x62, 0x40012000, &(0x7f0000000300)={0x4, 0x6, 0x1a2000, "d053e6053fec", 0x3}, 0x10)
setsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000240)=0x8, 0x4)

[  846.955550] binder: 25254:25256 transaction failed 29189/-22, size 0-0 line 2856
[  846.962873] binder: 25260:25263 unknown command -587137023
[  846.966176] FAULT_INJECTION: forcing a failure.
[  846.966176] name failslab, interval 1, probability 0, space 0, times 0
[  846.980286] CPU: 1 PID: 25257 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  846.983661] binder: 25260:25263 ioctl c0306201 20007000 returned -22
[  846.987558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
2033/05/18 03:45:40 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  846.987565] Call Trace:
[  846.987593]  dump_stack+0x1b9/0x294
[  846.987614]  ? dump_stack_print_info.cold.2+0x52/0x52
[  846.987634]  ? kasan_check_write+0x14/0x20
[  847.019057]  ? finish_task_switch+0x28b/0x840
[  847.020446] binder: 25260:25269 unknown command -587137023
[  847.023564]  should_fail.cold.4+0xa/0x1a
[  847.023585]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  847.023609]  ? __schedule+0x809/0x1e30
[  847.023630]  ? kasan_check_write+0x14/0x20
[  847.038264] binder: 25260:25269 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:40 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20400)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={<r2=>0x0, 0x10000, 0x80000001, 0x5, 0xff, 0x39}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0xa4}, 0x8)
r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  847.038413]  ? __sched_text_start+0x8/0x8
[  847.057362]  ? find_held_lock+0x36/0x1c0
[  847.061444]  ? __lock_is_held+0xb5/0x140
[  847.065516]  ? check_same_owner+0x320/0x320
[  847.069846]  ? mark_held_locks+0xc9/0x160
[  847.074002]  __should_failslab+0x124/0x180
[  847.078250]  should_failslab+0x9/0x14
[  847.082146]  kmem_cache_alloc_trace+0x2cb/0x780
[  847.086820]  ? trace_hardirqs_on+0xd/0x10
[  847.090978]  ? queue_work_on+0x12c/0x1e0
[  847.095049]  ? device_create_file+0x1e0/0x1e0
[  847.099558]  kobject_uevent_env+0x20f/0xea0
[  847.103879]  ? _raw_spin_unlock_irq+0x27/0x70
[  847.108385]  kobject_uevent+0x1f/0x30
[  847.112187]  driver_bound+0x1a3/0x220
[  847.116105]  device_bind_driver+0xb3/0xd0
[  847.120262]  mac80211_hwsim_new_radio+0x451/0x3410
[  847.125204]  ? graph_lock+0x170/0x170
[  847.129018]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  847.135164]  ? lock_release+0xa10/0xa10
[  847.139138]  ? check_same_owner+0x320/0x320
[  847.143464]  ? rcu_note_context_switch+0x710/0x710
[  847.148393]  ? __lock_acquire+0x7f5/0x5140
[  847.152637]  ? __might_sleep+0x95/0x190
[  847.156618]  ? kasan_check_write+0x14/0x20
[  847.160856]  ? __mutex_lock+0x7d9/0x17f0
[  847.164925]  ? genl_rcv_msg+0x13a/0x170
[  847.168909]  ? __lock_acquire+0x7f5/0x5140
[  847.173161]  ? mutex_trylock+0x2a0/0x2a0
[  847.177222]  ? graph_lock+0x170/0x170
[  847.181024]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  847.186223]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  847.191240]  ? validate_nla+0x2d9/0x7b0
[  847.195217]  hwsim_new_radio_nl+0x7b8/0xa60
[  847.199538]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  847.204732]  ? __netlink_ns_capable+0x100/0x130
[  847.209421]  genl_family_rcv_msg+0x889/0x1120
[  847.213924]  ? genl_rcv+0x40/0x40
[  847.217389]  ? lock_downgrade+0x8e0/0x8e0
[  847.221545]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  847.226570]  ? kasan_check_read+0x11/0x20
[  847.230723]  ? lock_acquire+0x1dc/0x520
[  847.234697]  ? genl_rcv+0x19/0x40
[  847.238164]  genl_rcv_msg+0xc6/0x170
[  847.241885]  netlink_rcv_skb+0x172/0x440
[  847.245950]  ? genl_family_rcv_msg+0x1120/0x1120
[  847.250707]  ? netlink_ack+0xbc0/0xbc0
[  847.254594]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  847.259783]  ? netlink_skb_destructor+0x210/0x210
[  847.264632]  genl_rcv+0x28/0x40
[  847.267913]  netlink_unicast+0x58b/0x740
[  847.271986]  ? netlink_attachskb+0x970/0x970
[  847.276396]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  847.281946]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  847.286965]  ? security_netlink_send+0x88/0xb0
[  847.291552]  netlink_sendmsg+0x9f0/0xfa0
[  847.295618]  ? netlink_unicast+0x740/0x740
[  847.299861]  ? security_socket_sendmsg+0x94/0xc0
[  847.304619]  ? netlink_unicast+0x740/0x740
[  847.308869]  sock_sendmsg+0xd5/0x120
[  847.312677]  ___sys_sendmsg+0x805/0x940
[  847.316666]  ? copy_msghdr_from_user+0x560/0x560
[  847.321461]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  847.326998]  ? proc_fail_nth_write+0x96/0x1f0
[  847.331499]  ? __fget_light+0x2ef/0x430
[  847.335483]  ? fget_raw+0x20/0x20
[  847.338945]  ? find_held_lock+0x36/0x1c0
[  847.343011]  ? kasan_check_write+0x14/0x20
[  847.347252]  ? wait_for_completion+0x870/0x870
[  847.351858]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  847.357401]  ? sockfd_lookup_light+0xc5/0x160
[  847.361909]  __sys_sendmsg+0x115/0x270
[  847.365797]  ? __ia32_sys_shutdown+0x80/0x80
[  847.370205]  ? __sb_end_write+0xac/0xe0
[  847.374184]  ? fput+0x130/0x1a0
[  847.377470]  ? ksys_write+0x1a6/0x250
[  847.381284]  __x64_sys_sendmsg+0x78/0xb0
[  847.385346]  do_syscall_64+0x1b1/0x800
[  847.389234]  ? finish_task_switch+0x1ca/0x840
[  847.393732]  ? syscall_return_slowpath+0x5c0/0x5c0
[  847.398665]  ? syscall_return_slowpath+0x30f/0x5c0
[  847.403597]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  847.408978]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  847.413826]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  847.419010] RIP: 0033:0x455a09
[  847.422195] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  847.429907] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  847.437180] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  847.444447] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  847.451715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  847.458996] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000024
[  847.492332] binder: BINDER_SET_CONTEXT_MGR already set
[  847.497752] binder_alloc: 25254: binder_alloc_buf, no vma
[  847.503514] binder: 25254:25270 transaction failed 29189/-3, size 0-0 line 2971
[  847.523371] binder_alloc: 25254: binder_alloc_buf, no vma
[  847.529103] binder: 25272:25276 transaction failed 29189/-3, size 0-0 line 2971
2033/05/18 03:45:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:41 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x5f50000000000000]}, 0x10)

[  847.560635] binder: 25254:25271 ioctl 40046207 20000240 returned -16
[  847.582483] binder_alloc: 25254: binder_alloc_buf, no vma
[  847.588160] binder: 25272:25282 transaction failed 29189/-3, size 0-0 line 2971
2033/05/18 03:45:41 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:41 executing program 3 (fault-call:3 fault-nth:37):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:41 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc3", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  847.693817] binder: undelivered TRANSACTION_ERROR: 29189
[  847.701131] binder: undelivered TRANSACTION_ERROR: 29189
[  847.715367] FAULT_INJECTION: forcing a failure.
[  847.715367] name failslab, interval 1, probability 0, space 0, times 0
[  847.726857] CPU: 0 PID: 25296 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  847.734153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  847.743511] Call Trace:
[  847.746108]  dump_stack+0x1b9/0x294
[  847.749731]  ? dump_stack_print_info.cold.2+0x52/0x52
[  847.754913]  ? kobject_uevent_env+0x62e/0xea0
[  847.759419]  should_fail.cold.4+0xa/0x1a
[  847.763478]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  847.768488]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  847.773588]  ? __might_sleep+0x95/0x190
[  847.777555]  ? graph_lock+0x170/0x170
[  847.781870]  ? __mutex_lock+0x7d9/0x17f0
[  847.785919]  ? string+0x21d/0x2c0
[  847.789359]  ? kobject_uevent_env+0x62e/0xea0
[  847.793853]  ? find_held_lock+0x36/0x1c0
[  847.797918]  ? __lock_is_held+0xb5/0x140
[  847.801992]  ? check_same_owner+0x320/0x320
[  847.806310]  ? rcu_note_context_switch+0x710/0x710
[  847.811238]  ? put_dec+0xf0/0xf0
[  847.814612]  ? format_decode+0x1a9/0xae0
[  847.818665]  __should_failslab+0x124/0x180
[  847.822893]  should_failslab+0x9/0x14
[  847.826681]  kmem_cache_alloc_node+0x272/0x780
[  847.831262]  __alloc_skb+0x111/0x780
[  847.834987]  ? skb_scrub_packet+0x580/0x580
[  847.839304]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  847.844497]  ? netlink_has_listeners+0x2ff/0x4c0
[  847.849243]  ? netlink_tap_init_net+0x3c0/0x3c0
[  847.853915]  kobject_uevent_env+0x801/0xea0
[  847.858236]  ? _raw_spin_unlock_irq+0x27/0x70
[  847.862742]  kobject_uevent+0x1f/0x30
[  847.866533]  driver_bound+0x1a3/0x220
[  847.870325]  device_bind_driver+0xb3/0xd0
[  847.874474]  mac80211_hwsim_new_radio+0x451/0x3410
[  847.879396]  ? graph_lock+0x170/0x170
[  847.883194]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  847.889335]  ? lock_release+0xa10/0xa10
[  847.893299]  ? check_same_owner+0x320/0x320
[  847.897613]  ? rcu_note_context_switch+0x710/0x710
[  847.902531]  ? __lock_acquire+0x7f5/0x5140
[  847.906764]  ? __might_sleep+0x95/0x190
[  847.910729]  ? kasan_check_write+0x14/0x20
[  847.914962]  ? __mutex_lock+0x7d9/0x17f0
[  847.919026]  ? genl_rcv_msg+0x13a/0x170
[  847.922993]  ? __lock_acquire+0x7f5/0x5140
[  847.927225]  ? mutex_trylock+0x2a0/0x2a0
[  847.931271]  ? perf_trace_lock+0xd6/0x900
[  847.935407]  ? graph_lock+0x170/0x170
[  847.939201]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  847.944382]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  847.949481]  ? validate_nla+0x2d9/0x7b0
[  847.953447]  hwsim_new_radio_nl+0x7b8/0xa60
[  847.957759]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  847.962950]  ? __netlink_ns_capable+0x100/0x130
[  847.967612]  genl_family_rcv_msg+0x889/0x1120
[  847.972106]  ? genl_rcv+0x40/0x40
[  847.975565]  ? lock_downgrade+0x8e0/0x8e0
[  847.979711]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  847.984723]  ? lock_acquire+0x1dc/0x520
[  847.988691]  ? genl_rcv+0x19/0x40
[  847.992148]  genl_rcv_msg+0xc6/0x170
[  847.995860]  netlink_rcv_skb+0x172/0x440
[  847.999909]  ? genl_family_rcv_msg+0x1120/0x1120
[  848.004656]  ? netlink_ack+0xbc0/0xbc0
[  848.008531]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  848.013720]  ? netlink_skb_destructor+0x210/0x210
[  848.018646]  genl_rcv+0x28/0x40
[  848.021913]  netlink_unicast+0x58b/0x740
[  848.025968]  ? netlink_attachskb+0x970/0x970
[  848.030368]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.035903]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  848.040909]  ? security_netlink_send+0x88/0xb0
[  848.045482]  netlink_sendmsg+0x9f0/0xfa0
[  848.049541]  ? netlink_unicast+0x740/0x740
[  848.053785]  ? security_socket_sendmsg+0x94/0xc0
[  848.058541]  ? netlink_unicast+0x740/0x740
[  848.062767]  sock_sendmsg+0xd5/0x120
[  848.066471]  ___sys_sendmsg+0x805/0x940
[  848.070450]  ? copy_msghdr_from_user+0x560/0x560
[  848.075300]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  848.080828]  ? proc_fail_nth_write+0x96/0x1f0
[  848.085332]  ? __fget_light+0x2ef/0x430
[  848.089298]  ? fget_raw+0x20/0x20
[  848.092738]  ? find_held_lock+0x36/0x1c0
[  848.096791]  ? kasan_check_write+0x14/0x20
[  848.101024]  ? wait_for_completion+0x870/0x870
[  848.105608]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  848.111134]  ? sockfd_lookup_light+0xc5/0x160
[  848.115620]  __sys_sendmsg+0x115/0x270
[  848.119498]  ? __ia32_sys_shutdown+0x80/0x80
[  848.123909]  ? __sb_end_write+0xac/0xe0
[  848.127875]  ? fput+0x130/0x1a0
[  848.131152]  ? ksys_write+0x1a6/0x250
[  848.135054]  __x64_sys_sendmsg+0x78/0xb0
[  848.139111]  do_syscall_64+0x1b1/0x800
[  848.142998]  ? finish_task_switch+0x1ca/0x840
[  848.147487]  ? syscall_return_slowpath+0x5c0/0x5c0
[  848.152405]  ? syscall_return_slowpath+0x30f/0x5c0
[  848.157336]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  848.162779]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  848.167614]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  848.172786] RIP: 0033:0x455a09
[  848.175960] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  848.183657] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
2033/05/18 03:45:41 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xb4801, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={<r2=>0x0, 0x2, 0x5, [0x24, 0x2, 0x8, 0x1ff, 0x1]}, &(0x7f0000000340)=0x12)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r2, 0x800, 0x20, 0x4, 0x5, 0x80}, &(0x7f00000003c0)=0x14)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x78)
r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "8ac0cb2c717c64a8ad5c133c6df7cd5ffa674cc837134a3b9ab5115b2a4993e4ba195480d774acd5c4212fb93b2256922c6a4876e36128e30c8d06e07ca4a1cc182e0a001492aa97791c5f32621a44"}, 0x53)

[  848.190910] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  848.198173] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  848.205437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  848.212691] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000025
[  848.234388] binder: undelivered TRANSACTION_ERROR: 29189
[  848.245636] binder: 25298:25300 transaction failed 29189/-22, size 0-0 line 2856
[  848.278785] binder: 25305:25306 transaction failed 29189/-22, size 0-0 line 2856
[  848.308955] binder: 25305:25310 transaction failed 29189/-22, size 0-0 line 2856
[  848.337894] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x7733000000000000]}, 0x10)

2033/05/18 03:45:42 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:42 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:42 executing program 3 (fault-call:3 fault-nth:38):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:42 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x3f00000000000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:42 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:42 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x73d694a, 0x30001)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xb1ba, 0x4, 0x620, 0x10001, 0x8, 0x3, 0x7, 0x80000000, 0x244, 0x38, 0x2af, 0x8000, 0x9, 0x20, 0x1, 0x7, 0x6, 0x2}, [{0x2, 0xf8, 0x3, 0xbeb, 0x9, 0x3f, 0xff, 0x65f912b0}, {0x4, 0x9c, 0xc5, 0x5, 0x100, 0x2, 0x7, 0x800}], "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", [[], []]}, 0x1278)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000100)={&(0x7f0000001500)=ANY=[@ANYBLOB="d6000000", @ANYRES16=r3, @ANYBLOB="00002cbd7000fedbdf250200000050000200080005000700000008000900000800001400010000000000000000000000000000000000080006000180000008000700000000000800070007000000080009000100000008000b000a00000064000300080007004e23000014000200726f73653000000000000000000000000800050000000000080007004e220000080007004e2300001400020076657468315f746f5f626f6e6400000008000800fe0000000800050000000000080007004e20000008000400030000000800040001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40850)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  848.356552] binder: undelivered TRANSACTION_ERROR: 29189
[  848.413291] binder: 25314:25317 transaction failed 29189/-22, size 0-0 line 2856
[  848.438072] binder: 25314:25317 transaction failed 29189/-22, size 0-0 line 2856
[  848.439341] FAULT_INJECTION: forcing a failure.
[  848.439341] name failslab, interval 1, probability 0, space 0, times 0
[  848.457164] CPU: 0 PID: 25325 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  848.464440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  848.473817] Call Trace:
[  848.476431]  dump_stack+0x1b9/0x294
[  848.480072]  ? dump_stack_print_info.cold.2+0x52/0x52
[  848.485270]  ? lock_downgrade+0x8e0/0x8e0
[  848.489436]  should_fail.cold.4+0xa/0x1a
[  848.493518]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  848.498644]  ? graph_lock+0x170/0x170
[  848.500226] binder: undelivered TRANSACTION_ERROR: 29189
[  848.502449]  ? kernel_text_address+0x79/0xf0
[  848.502469]  ? __unwind_start+0x166/0x330
[  848.502485]  ? __kernel_text_address+0xd/0x40
[  848.502504]  ? find_held_lock+0x36/0x1c0
[  848.502521]  ? __lock_is_held+0xb5/0x140
[  848.502538]  ? rds_ib_recv_refill+0x15d0/0x1990
[  848.514959] binder: undelivered TRANSACTION_ERROR: 29189
[  848.516598]  ? check_same_owner+0x320/0x320
[  848.516616]  ? device_bind_driver+0xb3/0xd0
[  848.516630]  ? mac80211_hwsim_new_radio+0x451/0x3410
[  848.516642]  ? hwsim_new_radio_nl+0x7b8/0xa60
[  848.516660]  ? rcu_note_context_switch+0x710/0x710
[  848.562354]  ? genl_rcv+0x28/0x40
[  848.565799]  ? netlink_unicast+0x58b/0x740
[  848.570025]  ? netlink_sendmsg+0x9f0/0xfa0
[  848.574258]  __should_failslab+0x124/0x180
[  848.578487]  should_failslab+0x9/0x14
[  848.582279]  kmem_cache_alloc+0x2af/0x760
[  848.586427]  skb_clone+0x1ed/0x4f0
[  848.589966]  ? refcount_add_not_zero+0x250/0x320
[  848.594709]  ? skb_split+0x11d0/0x11d0
[  848.598587]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  848.603594]  ? netlink_trim+0x1b2/0x370
[  848.607556]  ? netlink_skb_destructor+0x210/0x210
[  848.612389]  ? cleanup_uevent_env+0x40/0x40
[  848.616704]  netlink_broadcast_filtered+0x1024/0x1580
[  848.621889]  ? __netlink_sendskb+0xd0/0xd0
[  848.626138]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.631679]  ? refcount_inc_not_zero+0x1dd/0x2d0
[  848.636423]  ? refcount_add_not_zero+0x320/0x320
[  848.641174]  ? cleanup_uevent_env+0x40/0x40
[  848.645487]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  848.650493]  kobject_uevent_env+0x6e4/0xea0
[  848.654806]  ? _raw_spin_unlock_irq+0x27/0x70
[  848.659298]  kobject_uevent+0x1f/0x30
[  848.663088]  driver_bound+0x1a3/0x220
[  848.666880]  device_bind_driver+0xb3/0xd0
[  848.671022]  mac80211_hwsim_new_radio+0x451/0x3410
[  848.675945]  ? graph_lock+0x170/0x170
[  848.679845]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  848.685980]  ? lock_release+0xa10/0xa10
[  848.689943]  ? check_same_owner+0x320/0x320
[  848.694256]  ? rcu_note_context_switch+0x710/0x710
[  848.699179]  ? __lock_acquire+0x7f5/0x5140
[  848.703402]  ? __might_sleep+0x95/0x190
[  848.707368]  ? kasan_check_write+0x14/0x20
[  848.711590]  ? __mutex_lock+0x7d9/0x17f0
[  848.715643]  ? genl_rcv_msg+0x13a/0x170
[  848.719605]  ? __lock_acquire+0x7f5/0x5140
[  848.723830]  ? mutex_trylock+0x2a0/0x2a0
[  848.727875]  ? graph_lock+0x170/0x170
[  848.731669]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  848.736848]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  848.741851]  ? validate_nla+0x2d9/0x7b0
[  848.745815]  hwsim_new_radio_nl+0x7b8/0xa60
[  848.750127]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  848.755310]  ? __netlink_ns_capable+0x100/0x130
[  848.759975]  genl_family_rcv_msg+0x889/0x1120
[  848.764466]  ? genl_rcv+0x40/0x40
[  848.767905]  ? lock_downgrade+0x8e0/0x8e0
[  848.772049]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  848.777059]  ? kasan_check_read+0x11/0x20
[  848.781195]  ? lock_acquire+0x1dc/0x520
[  848.785165]  ? genl_rcv+0x19/0x40
[  848.788623]  genl_rcv_msg+0xc6/0x170
[  848.792348]  netlink_rcv_skb+0x172/0x440
[  848.796412]  ? genl_family_rcv_msg+0x1120/0x1120
[  848.801156]  ? netlink_ack+0xbc0/0xbc0
[  848.805036]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  848.810216]  ? netlink_skb_destructor+0x210/0x210
[  848.815054]  genl_rcv+0x28/0x40
[  848.818323]  netlink_unicast+0x58b/0x740
[  848.822379]  ? netlink_attachskb+0x970/0x970
[  848.826779]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.832305]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  848.837312]  ? security_netlink_send+0x88/0xb0
[  848.841887]  netlink_sendmsg+0x9f0/0xfa0
[  848.845949]  ? netlink_unicast+0x740/0x740
[  848.850184]  ? security_socket_sendmsg+0x94/0xc0
[  848.854928]  ? netlink_unicast+0x740/0x740
[  848.859155]  sock_sendmsg+0xd5/0x120
[  848.862863]  ___sys_sendmsg+0x805/0x940
[  848.866838]  ? copy_msghdr_from_user+0x560/0x560
[  848.871593]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  848.877120]  ? proc_fail_nth_write+0x96/0x1f0
[  848.881618]  ? __fget_light+0x2ef/0x430
[  848.885583]  ? fget_raw+0x20/0x20
[  848.889031]  ? find_held_lock+0x36/0x1c0
[  848.893086]  ? kasan_check_write+0x14/0x20
[  848.897313]  ? wait_for_completion+0x870/0x870
[  848.901903]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  848.907427]  ? sockfd_lookup_light+0xc5/0x160
[  848.911912]  __sys_sendmsg+0x115/0x270
[  848.915789]  ? __ia32_sys_shutdown+0x80/0x80
[  848.920183]  ? __sb_end_write+0xac/0xe0
[  848.924153]  ? fput+0x130/0x1a0
[  848.927423]  ? ksys_write+0x1a6/0x250
[  848.931223]  __x64_sys_sendmsg+0x78/0xb0
[  848.935272]  do_syscall_64+0x1b1/0x800
[  848.939147]  ? finish_task_switch+0x1ca/0x840
[  848.943630]  ? syscall_return_slowpath+0x5c0/0x5c0
[  848.948548]  ? syscall_return_slowpath+0x30f/0x5c0
[  848.953490]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  848.958846]  ? trace_hardirqs_off_thunk+0x1a/0x1c
2033/05/18 03:45:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xa7b2]}, 0x10)

2033/05/18 03:45:42 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:42 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  848.963682]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  848.968860] RIP: 0033:0x455a09
[  848.972037] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  848.979740] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  848.987010] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  848.994272] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  849.001526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  849.008779] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000026
[  849.058809] binder: 25334:25337 transaction failed 29189/-22, size 0-0 line 2856
[  849.082175] binder: 25334:25341 transaction failed 29189/-22, size 0-0 line 2856
[  849.104244] binder: 25319:25324 unknown command 0
[  849.115907] binder: 25319:25324 ioctl c0306201 20007000 returned -22
[  849.152271] binder: 25319:25324 ioctl c0306201 20000240 returned -11
[  849.162448] binder: undelivered TRANSACTION_ERROR: 29189
[  849.178212] binder: undelivered TRANSACTION_ERROR: 29189
[  849.205516] binder: 25319:25346 unknown command 0
[  849.212314] binder: 25319:25346 ioctl c0306201 20007000 returned -22
2033/05/18 03:45:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x4a97]}, 0x10)

2033/05/18 03:45:43 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000f00", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:43 executing program 3 (fault-call:3 fault-nth:39):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:43 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:43 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x0)
connect$ax25(r2, &(0x7f0000000040)={0x3, {"db8a11cb03691e"}, 0x1a2}, 0x10)
recvfrom$unix(r2, &(0x7f0000000100)=""/80, 0x50, 0x12000, 0x0, 0x0)
getpeername$inet6(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000280)=0xfffffffffffffe93)

2033/05/18 03:45:43 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x40000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:43 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

[  849.583157] binder: 25355:25357 transaction failed 29189/-22, size 0-0 line 2856
[  849.590016] binder: 25354:25359 transaction failed 29189/-22, size 0-0 line 2856
[  849.592792] FAULT_INJECTION: forcing a failure.
[  849.592792] name failslab, interval 1, probability 0, space 0, times 0
[  849.609655] CPU: 1 PID: 25352 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  849.616948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  849.626395] Call Trace:
[  849.628994]  dump_stack+0x1b9/0x294
2033/05/18 03:45:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  849.629516] binder: 25354:25359 transaction failed 29189/-22, size 0-0 line 2856
[  849.632627]  ? dump_stack_print_info.cold.2+0x52/0x52
[  849.632644]  ? kobject_uevent_env+0x62e/0xea0
[  849.632669]  should_fail.cold.4+0xa/0x1a
[  849.632687]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  849.632703]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  849.664342]  ? __might_sleep+0x95/0x190
[  849.668324]  ? graph_lock+0x170/0x170
[  849.672130]  ? __mutex_lock+0x7d9/0x17f0
[  849.676197]  ? string+0x21d/0x2c0
2033/05/18 03:45:43 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  849.679655]  ? kobject_uevent_env+0x62e/0xea0
[  849.684160]  ? find_held_lock+0x36/0x1c0
[  849.688239]  ? __lock_is_held+0xb5/0x140
[  849.692334]  ? check_same_owner+0x320/0x320
[  849.696674]  ? rcu_note_context_switch+0x710/0x710
[  849.701611]  ? put_dec+0xf0/0xf0
[  849.704982]  ? format_decode+0x1a9/0xae0
[  849.709053]  __should_failslab+0x124/0x180
[  849.713295]  should_failslab+0x9/0x14
[  849.717102]  kmem_cache_alloc_node+0x272/0x780
[  849.721699]  __alloc_skb+0x111/0x780
[  849.725418]  ? skb_scrub_packet+0x580/0x580
2033/05/18 03:45:43 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  849.726848] binder: undelivered TRANSACTION_ERROR: 29189
[  849.729753]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  849.729781]  ? netlink_has_listeners+0x2ff/0x4c0
[  849.729798]  ? netlink_tap_init_net+0x3c0/0x3c0
[  849.729823]  kobject_uevent_env+0x801/0xea0
[  849.754131]  ? _raw_spin_unlock_irq+0x27/0x70
[  849.758644]  kobject_uevent+0x1f/0x30
[  849.762456]  driver_bound+0x1a3/0x220
[  849.766268]  device_bind_driver+0xb3/0xd0
[  849.770101] binder: 25373:25375 unknown command 0
[  849.770416]  mac80211_hwsim_new_radio+0x451/0x3410
[  849.770433]  ? graph_lock+0x170/0x170
2033/05/18 03:45:43 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00?', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  849.770455]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  849.770472]  ? lock_release+0xa10/0xa10
[  849.787850] binder: 25373:25375 ioctl c0306201 20007000 returned -22
[  849.790564]  ? check_same_owner+0x320/0x320
[  849.790586]  ? rcu_note_context_switch+0x710/0x710
[  849.790602]  ? __lock_acquire+0x7f5/0x5140
[  849.790620]  ? __might_sleep+0x95/0x190
[  849.790641]  ? kasan_check_write+0x14/0x20
[  849.818397] binder: 25373:25375 ioctl c0306201 20000240 returned -11
[  849.818472]  ? __mutex_lock+0x7d9/0x17f0
[  849.833375]  ? genl_rcv_msg+0x13a/0x170
[  849.837364]  ? __lock_acquire+0x7f5/0x5140
[  849.838700] binder: 25373:25375 unknown command 0
[  849.841603]  ? mutex_trylock+0x2a0/0x2a0
[  849.841619]  ? graph_lock+0x170/0x170
[  849.841639]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  849.841657]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  849.861425] binder: 25373:25375 ioctl c0306201 20007000 returned -22
[  849.864509]  ? validate_nla+0x2d9/0x7b0
[  849.864528]  hwsim_new_radio_nl+0x7b8/0xa60
[  849.864546]  ? mac80211_hwsim_new_radio+0x3410/0x3410
2033/05/18 03:45:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  849.864567]  ? __netlink_ns_capable+0x100/0x130
[  849.864591]  genl_family_rcv_msg+0x889/0x1120
[  849.893731]  ? genl_rcv+0x40/0x40
[  849.897199]  ? lock_downgrade+0x8e0/0x8e0
[  849.901353]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  849.906384]  ? kasan_check_read+0x11/0x20
[  849.910540]  ? lock_acquire+0x1dc/0x520
[  849.914518]  ? genl_rcv+0x19/0x40
[  849.917986]  genl_rcv_msg+0xc6/0x170
[  849.921710]  netlink_rcv_skb+0x172/0x440
[  849.925778]  ? genl_family_rcv_msg+0x1120/0x1120
[  849.930537]  ? netlink_ack+0xbc0/0xbc0
2033/05/18 03:45:43 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:43 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101000, 0x0)
openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x3800, 0x1, 0x3f, 0x0, 0x1, 0x100000001})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000280)={0x4, 0xaa, "b6e01258b9241de10c0cd5a344245ebe448ca9f8e9fce13e082b6950f13d1f489f95cb7d33d0a144eadf3eae087d70b6d79e1d8081431d5cd02c90dbfcb4470e50ac37a2ad280786a6bdd90d79e96067b4038c8cdc1a1419dd89078721e66c9078bdd531580b0694acf520cc12ffb2356a9ff469568533eb6dd8bca3d3888fc60508250cbc8205408589b58d7dc723a65f8fb9043213645cad48ad905d4930be9238479ad68cc2023510"})

[  849.934426]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  849.939622]  ? netlink_skb_destructor+0x210/0x210
[  849.944477]  genl_rcv+0x28/0x40
[  849.947761]  netlink_unicast+0x58b/0x740
[  849.951832]  ? netlink_attachskb+0x970/0x970
[  849.956246]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  849.961783]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  849.966805]  ? security_netlink_send+0x88/0xb0
[  849.971395]  netlink_sendmsg+0x9f0/0xfa0
[  849.973907] binder: 25393:25395 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xaff]}, 0x10)

2033/05/18 03:45:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00)\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  849.975469]  ? netlink_unicast+0x740/0x740
[  849.975492]  ? security_socket_sendmsg+0x94/0xc0
[  849.975507]  ? netlink_unicast+0x740/0x740
[  849.975527]  sock_sendmsg+0xd5/0x120
[  850.000124]  ___sys_sendmsg+0x805/0x940
[  850.003630] binder: 25393:25395 transaction failed 29189/-22, size 0-0 line 2856
[  850.004108]  ? copy_msghdr_from_user+0x560/0x560
[  850.004133]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  850.021923]  ? proc_fail_nth_write+0x96/0x1f0
[  850.026430]  ? __fget_light+0x2ef/0x430
[  850.030411]  ? fget_raw+0x20/0x20
[  850.033867]  ? find_held_lock+0x36/0x1c0
[  850.037939]  ? kasan_check_write+0x14/0x20
[  850.042190]  ? wait_for_completion+0x870/0x870
[  850.046784]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  850.052335]  ? sockfd_lookup_light+0xc5/0x160
[  850.056835]  __sys_sendmsg+0x115/0x270
[  850.060739]  ? __ia32_sys_shutdown+0x80/0x80
[  850.065154]  ? __sb_end_write+0xac/0xe0
[  850.069139]  ? fput+0x130/0x1a0
[  850.072425]  ? ksys_write+0x1a6/0x250
[  850.076238]  __x64_sys_sendmsg+0x78/0xb0
[  850.080298]  do_syscall_64+0x1b1/0x800
[  850.084192]  ? finish_task_switch+0x1ca/0x840
[  850.088695]  ? syscall_return_slowpath+0x5c0/0x5c0
[  850.093629]  ? syscall_return_slowpath+0x30f/0x5c0
[  850.098564]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  850.103941]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  850.108795]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  850.113974] RIP: 0033:0x455a09
[  850.117183] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  850.124967] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  850.132224] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  850.139485] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  850.146741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  850.154009] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000027
[  850.165273] binder: 25355:25357 ioctl 10 20000240 returned -22
[  850.193191] binder: 25355:25357 transaction failed 29189/-22, size 0-0 line 2856
[  850.220639] binder: 25355:25409 ioctl 10 20000240 returned -22
[  850.266755] binder: undelivered TRANSACTION_ERROR: 29189
[  850.272736] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:44 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:44 executing program 0:
syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb7e, 0xd6300)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})
fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x4)

2033/05/18 03:45:44 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x2756000000000000]}, 0x10)

2033/05/18 03:45:44 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:44 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r1, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:44 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x2000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:44 executing program 3 (fault-call:3 fault-nth:40):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  851.134412] binder: 25414:25416 transaction failed 29189/-22, size 0-0 line 2856
[  851.158093] binder: 25427:25428 transaction failed 29189/-22, size 0-0 line 2856
[  851.174449] FAULT_INJECTION: forcing a failure.
2033/05/18 03:45:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xaf2d0000]}, 0x10)

[  851.174449] name failslab, interval 1, probability 0, space 0, times 0
[  851.185774] CPU: 0 PID: 25425 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  851.193055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  851.202513] Call Trace:
[  851.205122]  dump_stack+0x1b9/0x294
[  851.208766]  ? dump_stack_print_info.cold.2+0x52/0x52
[  851.213966]  ? lock_downgrade+0x8e0/0x8e0
[  851.218142]  should_fail.cold.4+0xa/0x1a
[  851.222305]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  851.227427]  ? graph_lock+0x170/0x170
[  851.231235]  ? kernel_text_address+0x79/0xf0
[  851.235778]  ? __unwind_start+0x166/0x330
[  851.239939]  ? find_held_lock+0x36/0x1c0
[  851.244019]  ? __lock_is_held+0xb5/0x140
[  851.248096]  ? intel_dump_pipe_config+0xcf0/0x2000
[  851.253055]  ? check_same_owner+0x320/0x320
[  851.257386]  ? device_bind_driver+0xb3/0xd0
[  851.261714]  ? mac80211_hwsim_new_radio+0x451/0x3410
[  851.266838]  ? rcu_note_context_switch+0x710/0x710
[  851.271783]  ? genl_rcv+0x28/0x40
[  851.275244]  ? netlink_unicast+0x58b/0x740
[  851.279485]  ? netlink_sendmsg+0x9f0/0xfa0
[  851.283732]  __should_failslab+0x124/0x180
[  851.287982]  should_failslab+0x9/0x14
[  851.291786]  kmem_cache_alloc+0x2af/0x760
[  851.295938]  skb_clone+0x1ed/0x4f0
[  851.299481]  ? refcount_add_not_zero+0x250/0x320
[  851.304228]  ? skb_split+0x11d0/0x11d0
[  851.308104]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  851.313115]  ? netlink_trim+0x1b2/0x370
[  851.317079]  ? netlink_skb_destructor+0x210/0x210
[  851.321912]  ? cleanup_uevent_env+0x40/0x40
[  851.326227]  netlink_broadcast_filtered+0x1024/0x1580
[  851.331417]  ? __netlink_sendskb+0xd0/0xd0
[  851.335692]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  851.341229]  ? refcount_inc_not_zero+0x1dd/0x2d0
[  851.345989]  ? refcount_add_not_zero+0x320/0x320
[  851.350750]  ? cleanup_uevent_env+0x40/0x40
[  851.355067]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  851.360077]  kobject_uevent_env+0x6e4/0xea0
[  851.364401]  ? _raw_spin_unlock_irq+0x27/0x70
[  851.368901]  kobject_uevent+0x1f/0x30
[  851.372711]  driver_bound+0x1a3/0x220
[  851.376500]  device_bind_driver+0xb3/0xd0
[  851.380648]  mac80211_hwsim_new_radio+0x451/0x3410
[  851.385573]  ? graph_lock+0x170/0x170
[  851.389371]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  851.395506]  ? lock_release+0xa10/0xa10
[  851.399466]  ? check_same_owner+0x320/0x320
[  851.403780]  ? rcu_note_context_switch+0x710/0x710
[  851.408694]  ? __lock_acquire+0x7f5/0x5140
[  851.412926]  ? __might_sleep+0x95/0x190
[  851.416895]  ? kasan_check_write+0x14/0x20
[  851.421117]  ? __mutex_lock+0x7d9/0x17f0
[  851.425168]  ? genl_rcv_msg+0x13a/0x170
[  851.429133]  ? __lock_acquire+0x7f5/0x5140
[  851.433356]  ? mutex_trylock+0x2a0/0x2a0
[  851.437405]  ? perf_trace_lock+0xd6/0x900
[  851.441569]  ? graph_lock+0x170/0x170
[  851.445374]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  851.450557]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  851.455569]  ? validate_nla+0x2d9/0x7b0
[  851.459534]  hwsim_new_radio_nl+0x7b8/0xa60
[  851.463848]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  851.469037]  ? __netlink_ns_capable+0x100/0x130
[  851.473699]  genl_family_rcv_msg+0x889/0x1120
[  851.478189]  ? genl_rcv+0x40/0x40
[  851.481638]  ? lock_downgrade+0x8e0/0x8e0
[  851.485780]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  851.490799]  ? lock_acquire+0x1dc/0x520
[  851.494759]  ? genl_rcv+0x19/0x40
[  851.498214]  genl_rcv_msg+0xc6/0x170
[  851.501917]  netlink_rcv_skb+0x172/0x440
[  851.505965]  ? genl_family_rcv_msg+0x1120/0x1120
[  851.510708]  ? netlink_ack+0xbc0/0xbc0
[  851.514584]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  851.519763]  ? netlink_skb_destructor+0x210/0x210
[  851.524599]  genl_rcv+0x28/0x40
[  851.527866]  netlink_unicast+0x58b/0x740
[  851.531919]  ? netlink_attachskb+0x970/0x970
[  851.536324]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  851.541850]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  851.546856]  ? security_netlink_send+0x88/0xb0
[  851.551436]  netlink_sendmsg+0x9f0/0xfa0
[  851.555491]  ? netlink_unicast+0x740/0x740
[  851.559715]  ? security_socket_sendmsg+0x94/0xc0
[  851.564457]  ? netlink_unicast+0x740/0x740
[  851.568686]  sock_sendmsg+0xd5/0x120
[  851.572399]  ___sys_sendmsg+0x805/0x940
[  851.576369]  ? copy_msghdr_from_user+0x560/0x560
[  851.581120]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  851.586640]  ? proc_fail_nth_write+0x96/0x1f0
[  851.591130]  ? __fget_light+0x2ef/0x430
[  851.595093]  ? fget_raw+0x20/0x20
[  851.598535]  ? find_held_lock+0x36/0x1c0
[  851.602585]  ? kasan_check_write+0x14/0x20
[  851.606817]  ? wait_for_completion+0x870/0x870
[  851.611396]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  851.616921]  ? sockfd_lookup_light+0xc5/0x160
[  851.621404]  __sys_sendmsg+0x115/0x270
[  851.625286]  ? __ia32_sys_shutdown+0x80/0x80
[  851.629690]  ? __sb_end_write+0xac/0xe0
[  851.633662]  ? fput+0x130/0x1a0
[  851.636929]  ? ksys_write+0x1a6/0x250
[  851.640729]  __x64_sys_sendmsg+0x78/0xb0
[  851.644787]  do_syscall_64+0x1b1/0x800
[  851.648664]  ? finish_task_switch+0x1ca/0x840
[  851.653148]  ? syscall_return_slowpath+0x5c0/0x5c0
[  851.658081]  ? syscall_return_slowpath+0x30f/0x5c0
[  851.663003]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  851.668372]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  851.673208]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  851.678391] RIP: 0033:0x455a09
[  851.681573] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  851.689281] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  851.696537] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  851.703795] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  851.711048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  851.718302] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000028
2033/05/18 03:45:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000006", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xb2a7]}, 0x10)

2033/05/18 03:45:45 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xba3, 0x100)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={<r2=>0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f0000000100)=0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xfffffffffffffffa, 0x4, 0x7, 0x8, r2}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0xa4086558933dab31)

2033/05/18 03:45:45 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  851.731370] binder: 25414:25416 transaction failed 29189/-22, size 0-0 line 2856
[  851.736539] binder: 25427:25439 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:45 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

2033/05/18 03:45:45 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:45 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000003", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  851.813768] binder: undelivered TRANSACTION_ERROR: 29189
[  851.819534] binder: undelivered TRANSACTION_ERROR: 29189
[  851.846611] binder: undelivered TRANSACTION_ERROR: 29189
[  851.874081] binder: 25449:25451 transaction failed 29189/-22, size 0-0 line 2856
[  851.882870] binder: 25454:25455 transaction failed 29189/-22, size 0-0 line 2856
[  851.913122] binder: 25449:25451 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:45 executing program 3 (fault-call:3 fault-nth:41):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  851.933370] binder: 25454:25455 transaction failed 29189/-22, size 0-0 line 2856
[  851.975135] FAULT_INJECTION: forcing a failure.
[  851.975135] name failslab, interval 1, probability 0, space 0, times 0
[  851.981979] binder: undelivered TRANSACTION_ERROR: 29189
[  851.986464] CPU: 1 PID: 25465 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  851.999149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  852.008505] Call Trace:
[  852.011104]  dump_stack+0x1b9/0x294
[  852.014721]  ? dump_stack_print_info.cold.2+0x52/0x52
[  852.019896]  ? lock_downgrade+0x8e0/0x8e0
[  852.024046]  should_fail.cold.4+0xa/0x1a
[  852.028203]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  852.033296]  ? graph_lock+0x170/0x170
[  852.037085]  ? kernel_text_address+0x79/0xf0
[  852.041480]  ? __unwind_start+0x166/0x330
[  852.045626]  ? find_held_lock+0x36/0x1c0
[  852.049682]  ? __lock_is_held+0xb5/0x140
[  852.053734]  ? check_same_owner+0x320/0x320
[  852.058048]  ? device_bind_driver+0xb3/0xd0
[  852.062357]  ? mac80211_hwsim_new_radio+0x451/0x3410
[  852.067452]  ? rcu_note_context_switch+0x710/0x710
[  852.072372]  ? genl_rcv+0x28/0x40
[  852.075844]  ? netlink_unicast+0x58b/0x740
[  852.080100]  ? netlink_sendmsg+0x9f0/0xfa0
[  852.084351]  __should_failslab+0x124/0x180
[  852.088583]  should_failslab+0x9/0x14
[  852.092425]  kmem_cache_alloc+0x2af/0x760
[  852.096590]  skb_clone+0x1ed/0x4f0
[  852.100149]  ? refcount_add_not_zero+0x250/0x320
[  852.104926]  ? skb_split+0x11d0/0x11d0
[  852.108829]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  852.113851]  ? netlink_trim+0x1b2/0x370
[  852.117828]  ? netlink_skb_destructor+0x210/0x210
[  852.122662]  ? cleanup_uevent_env+0x40/0x40
[  852.127027]  netlink_broadcast_filtered+0x1024/0x1580
[  852.132225]  ? __netlink_sendskb+0xd0/0xd0
[  852.136463]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  852.141991]  ? refcount_inc_not_zero+0x1dd/0x2d0
[  852.146739]  ? refcount_add_not_zero+0x320/0x320
[  852.151481]  ? cleanup_uevent_env+0x40/0x40
[  852.155802]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  852.160838]  kobject_uevent_env+0x6e4/0xea0
[  852.165155]  ? _raw_spin_unlock_irq+0x27/0x70
[  852.169655]  kobject_uevent+0x1f/0x30
[  852.173461]  driver_bound+0x1a3/0x220
[  852.177246]  device_bind_driver+0xb3/0xd0
[  852.181382]  mac80211_hwsim_new_radio+0x451/0x3410
[  852.186297]  ? graph_lock+0x170/0x170
[  852.190089]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  852.196232]  ? lock_release+0xa10/0xa10
[  852.200203]  ? check_same_owner+0x320/0x320
[  852.204519]  ? rcu_note_context_switch+0x710/0x710
[  852.209443]  ? __lock_acquire+0x7f5/0x5140
[  852.213679]  ? __might_sleep+0x95/0x190
[  852.217661]  ? kasan_check_write+0x14/0x20
[  852.221898]  ? __mutex_lock+0x7d9/0x17f0
[  852.225961]  ? genl_rcv_msg+0x13a/0x170
[  852.231035]  ? __lock_acquire+0x7f5/0x5140
[  852.235266]  ? mutex_trylock+0x2a0/0x2a0
[  852.239311]  ? perf_trace_lock+0xd6/0x900
[  852.243454]  ? graph_lock+0x170/0x170
[  852.247254]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  852.252444]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  852.257461]  ? validate_nla+0x2d9/0x7b0
[  852.261447]  hwsim_new_radio_nl+0x7b8/0xa60
[  852.265781]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  852.271016]  ? __netlink_ns_capable+0x100/0x130
[  852.275696]  genl_family_rcv_msg+0x889/0x1120
[  852.280213]  ? genl_rcv+0x40/0x40
[  852.283684]  ? lock_downgrade+0x8e0/0x8e0
[  852.287872]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  852.292893]  ? lock_acquire+0x1dc/0x520
[  852.296855]  ? genl_rcv+0x19/0x40
[  852.300312]  genl_rcv_msg+0xc6/0x170
[  852.304036]  netlink_rcv_skb+0x172/0x440
[  852.308096]  ? genl_family_rcv_msg+0x1120/0x1120
[  852.312948]  ? netlink_ack+0xbc0/0xbc0
[  852.316843]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  852.322041]  ? netlink_skb_destructor+0x210/0x210
[  852.326888]  genl_rcv+0x28/0x40
[  852.330167]  netlink_unicast+0x58b/0x740
[  852.334220]  ? netlink_attachskb+0x970/0x970
[  852.338634]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  852.344163]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  852.349173]  ? security_netlink_send+0x88/0xb0
[  852.353765]  netlink_sendmsg+0x9f0/0xfa0
[  852.357831]  ? netlink_unicast+0x740/0x740
[  852.362060]  ? security_socket_sendmsg+0x94/0xc0
[  852.366800]  ? netlink_unicast+0x740/0x740
[  852.371027]  sock_sendmsg+0xd5/0x120
[  852.374732]  ___sys_sendmsg+0x805/0x940
[  852.378703]  ? copy_msghdr_from_user+0x560/0x560
[  852.383463]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  852.388993]  ? proc_fail_nth_write+0x96/0x1f0
[  852.393574]  ? __fget_light+0x2ef/0x430
[  852.397551]  ? fget_raw+0x20/0x20
[  852.400993]  ? find_held_lock+0x36/0x1c0
[  852.405054]  ? kasan_check_write+0x14/0x20
[  852.409291]  ? wait_for_completion+0x870/0x870
[  852.413862]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  852.419386]  ? sockfd_lookup_light+0xc5/0x160
[  852.423866]  __sys_sendmsg+0x115/0x270
[  852.427736]  ? __ia32_sys_shutdown+0x80/0x80
[  852.432141]  ? __sb_end_write+0xac/0xe0
[  852.436113]  ? fput+0x130/0x1a0
[  852.439386]  ? ksys_write+0x1a6/0x250
[  852.443181]  ? syscall_slow_exit_work+0x4f0/0x4f0
[  852.448033]  __x64_sys_sendmsg+0x78/0xb0
[  852.452100]  do_syscall_64+0x1b1/0x800
[  852.455985]  ? finish_task_switch+0x1ca/0x840
[  852.460474]  ? syscall_return_slowpath+0x5c0/0x5c0
[  852.465406]  ? syscall_return_slowpath+0x30f/0x5c0
[  852.470342]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  852.475701]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  852.480535]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  852.485711] RIP: 0033:0x455a09
[  852.488892] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  852.496596] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  852.503858] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  852.511122] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  852.518373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  852.525634] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 0000000000000029
[  852.558230] binder: undelivered TRANSACTION_ERROR: 29189
[  852.564260] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:46 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00@\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xef5b0000]}, 0x10)

2033/05/18 03:45:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:46 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000000)="b1"})

2033/05/18 03:45:46 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c)
r1 = gettid()
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf000000, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1004000000016)

2033/05/18 03:45:46 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffc00, 0x2a000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0xfffffffffffffd80)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)
userfaultfd(0x80800)

2033/05/18 03:45:46 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:46 executing program 3 (fault-call:3 fault-nth:42):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

[  852.826352] FAULT_INJECTION: forcing a failure.
[  852.826352] name failslab, interval 1, probability 0, space 0, times 0
[  852.828641] binder: 25474:25482 transaction failed 29189/-22, size 0-0 line 2856
[  852.837650] CPU: 1 PID: 25473 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  852.850305] binder: 25480:25483 transaction failed 29189/-22, size 0-0 line 2856
[  852.852420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  852.852426] Call Trace:
[  852.852451]  dump_stack+0x1b9/0x294
[  852.852474]  ? dump_stack_print_info.cold.2+0x52/0x52
[  852.852489]  ? is_bpf_text_address+0xd7/0x170
[  852.852508]  ? kernel_text_address+0x79/0xf0
[  852.889642]  ? __unwind_start+0x166/0x330
[  852.893789]  should_fail.cold.4+0xa/0x1a
[  852.897854]  ? __save_stack_trace+0x7e/0xd0
[  852.902170]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  852.907272]  ? graph_lock+0x170/0x170
[  852.911064]  ? save_stack+0x43/0xd0
[  852.914684]  ? kasan_kmalloc+0xc4/0xe0
[  852.918568]  ? kasan_slab_alloc+0x12/0x20
[  852.922706]  ? find_held_lock+0x36/0x1c0
[  852.926759]  ? __lock_is_held+0xb5/0x140
[  852.930819]  ? check_same_owner+0x320/0x320
[  852.935131]  ? rcu_note_context_switch+0x710/0x710
[  852.940066]  __should_failslab+0x124/0x180
[  852.944368]  should_failslab+0x9/0x14
[  852.948154]  kmem_cache_alloc_node_trace+0x26f/0x770
[  852.953254]  __kmalloc_node_track_caller+0x33/0x70
[  852.958273]  __kmalloc_reserve.isra.38+0x3a/0xe0
[  852.963028]  __alloc_skb+0x14d/0x780
[  852.966734]  ? skb_scrub_packet+0x580/0x580
[  852.971047]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  852.976235]  ? netlink_has_listeners+0x2ff/0x4c0
[  852.980980]  ? netlink_tap_init_net+0x3c0/0x3c0
[  852.985656]  kobject_uevent_env+0x801/0xea0
[  852.989962]  ? _raw_spin_unlock_irq+0x27/0x70
[  852.994451]  kobject_uevent+0x1f/0x30
[  852.998240]  driver_bound+0x1a3/0x220
[  853.002033]  device_bind_driver+0xb3/0xd0
[  853.006169]  mac80211_hwsim_new_radio+0x451/0x3410
[  853.011085]  ? graph_lock+0x170/0x170
[  853.014881]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  853.021026]  ? lock_release+0xa10/0xa10
[  853.024988]  ? check_same_owner+0x320/0x320
[  853.029303]  ? rcu_note_context_switch+0x710/0x710
[  853.034220]  ? __lock_acquire+0x7f5/0x5140
[  853.038444]  ? __might_sleep+0x95/0x190
[  853.042408]  ? kasan_check_write+0x14/0x20
[  853.046632]  ? __mutex_lock+0x7d9/0x17f0
[  853.050684]  ? genl_rcv_msg+0x13a/0x170
[  853.054649]  ? __lock_acquire+0x7f5/0x5140
[  853.058879]  ? mutex_trylock+0x2a0/0x2a0
[  853.062937]  ? graph_lock+0x170/0x170
[  853.066727]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  853.071908]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  853.076918]  ? validate_nla+0x2d9/0x7b0
[  853.080883]  hwsim_new_radio_nl+0x7b8/0xa60
[  853.085205]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  853.090386]  ? __netlink_ns_capable+0x100/0x130
[  853.095048]  genl_family_rcv_msg+0x889/0x1120
[  853.099538]  ? genl_rcv+0x40/0x40
[  853.102978]  ? lock_downgrade+0x8e0/0x8e0
[  853.107114]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  853.112125]  ? kasan_check_read+0x11/0x20
[  853.116277]  ? lock_acquire+0x1dc/0x520
[  853.120237]  ? genl_rcv+0x19/0x40
[  853.123693]  genl_rcv_msg+0xc6/0x170
[  853.127408]  netlink_rcv_skb+0x172/0x440
[  853.131480]  ? genl_family_rcv_msg+0x1120/0x1120
[  853.136233]  ? netlink_ack+0xbc0/0xbc0
[  853.140110]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  853.145289]  ? netlink_skb_destructor+0x210/0x210
[  853.150124]  genl_rcv+0x28/0x40
[  853.153393]  netlink_unicast+0x58b/0x740
[  853.157533]  ? netlink_attachskb+0x970/0x970
[  853.161928]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  853.167452]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  853.172464]  ? security_netlink_send+0x88/0xb0
[  853.177041]  netlink_sendmsg+0x9f0/0xfa0
[  853.181099]  ? netlink_unicast+0x740/0x740
[  853.185324]  ? security_socket_sendmsg+0x94/0xc0
[  853.190069]  ? netlink_unicast+0x740/0x740
[  853.194293]  sock_sendmsg+0xd5/0x120
[  853.197995]  ___sys_sendmsg+0x805/0x940
[  853.201974]  ? copy_msghdr_from_user+0x560/0x560
[  853.206728]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  853.212254]  ? proc_fail_nth_write+0x96/0x1f0
[  853.216746]  ? __fget_light+0x2ef/0x430
[  853.220709]  ? fget_raw+0x20/0x20
[  853.224155]  ? find_held_lock+0x36/0x1c0
[  853.228206]  ? kasan_check_write+0x14/0x20
[  853.232434]  ? wait_for_completion+0x870/0x870
[  853.237020]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  853.242551]  ? sockfd_lookup_light+0xc5/0x160
[  853.247040]  __sys_sendmsg+0x115/0x270
[  853.250917]  ? __ia32_sys_shutdown+0x80/0x80
[  853.255313]  ? __sb_end_write+0xac/0xe0
[  853.259279]  ? fput+0x130/0x1a0
[  853.262555]  ? ksys_write+0x1a6/0x250
[  853.266356]  __x64_sys_sendmsg+0x78/0xb0
[  853.270407]  do_syscall_64+0x1b1/0x800
[  853.274284]  ? finish_task_switch+0x1ca/0x840
[  853.278768]  ? syscall_return_slowpath+0x5c0/0x5c0
[  853.283684]  ? syscall_return_slowpath+0x30f/0x5c0
[  853.292078]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  853.297434]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  853.302273]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  853.307456] RIP: 0033:0x455a09
[  853.310634] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  853.318331] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  853.325593] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  853.332846] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  853.340105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  853.347802] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000002a
[  853.367985] binder: 25480:25483 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00?\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:47 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xe7e00000]}, 0x10)

[  853.387270] binder: undelivered TRANSACTION_ERROR: 29189
[  853.415787] binder: 25474:25489 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c300000000000ffffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:47 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840ea596d0ea0067b48f162ef326177894888343489f2a82080085ee9c6d049c5140790e80fa415fab43dccec1674c7dfe905e49862225aecac36fe9e8d01356f7ae151ec49ab28fea2ba346019917682c2f9c9bfb73c1b19381fddcb719362f2934ea25c81a2d8960b3e440eb7eb"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"})

[  853.458712] binder: undelivered TRANSACTION_ERROR: 29189
2033/05/18 03:45:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:47 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

2033/05/18 03:45:47 executing program 3 (fault-call:3 fault-nth:43):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0)

2033/05/18 03:45:47 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000)
getsockopt(r1, 0x6, 0x3, &(0x7f00000001c0)=""/147, &(0x7f0000000280)=0x93)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80002, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={<r4=>0x0, 0x68, &(0x7f0000000380)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e24, 0x101, @empty, 0x2eb}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0xd1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xfffffffffffffff7}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={r4, 0x8, 0x6}, 0x8)
recvfrom(r1, &(0x7f00000002c0)=""/32, 0x20, 0x40000000, &(0x7f0000000300)=@ipx={0x4, 0x5, 0x8, "06246ab3f6cf"}, 0x80)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000f81000)=0x90)

2033/05/18 03:45:47 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xbf95]}, 0x10)

[  853.529243] binder: undelivered TRANSACTION_ERROR: 29189
[  853.548367] binder: 25503:25504 got transaction to invalid handle
[  853.554869] binder: 25503:25504 transaction failed 29201/-22, size -5405984608319139833--1594336441651114947 line 2856
[  853.559950] binder: 25505:25506 transaction failed 29189/-22, size 0-0 line 2856
2033/05/18 03:45:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

2033/05/18 03:45:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x800000000089f3, &(0x7f00000000c0)={"697036746e6c300000000000feffffff", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}})

[  853.599256] binder: 25505:25506 transaction failed 29189/-22, size 0-0 line 2856
[  853.626793] binder: 25503:25504 got transaction to invalid handle
[  853.633141] binder: 25503:25504 transaction failed 29201/-22, size -5405984608319139833--1594336441651114947 line 2856
2033/05/18 03:45:47 executing program 7:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfffffdfd, &(0x7f0000000180)="b1"})

[  853.679222] binder: undelivered TRANSACTION_ERROR: 29189
[  853.685303] binder: undelivered TRANSACTION_ERROR: 29189
[  853.721645] binder: 25530:25531 transaction failed 29189/-22, size 0-0 line 2856
[  853.741527] binder: 25530:25531 ioctl c0306225 20000240 returned -22
[  853.750302] binder: undelivered TRANSACTION_ERROR: 29201
[  853.751445] binder: 25530:25531 transaction failed 29189/-22, size 0-0 line 2856
[  853.777823] FAULT_INJECTION: forcing a failure.
[  853.777823] name failslab, interval 1, probability 0, space 0, times 0
[  853.785278] binder: 25530:25533 ioctl c0306225 20000240 returned -22
[  853.789629] CPU: 0 PID: 25534 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  853.803365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  853.812721] Call Trace:
[  853.815319]  dump_stack+0x1b9/0x294
[  853.818987]  ? dump_stack_print_info.cold.2+0x52/0x52
[  853.824219]  should_fail.cold.4+0xa/0x1a
[  853.827689] binder: undelivered TRANSACTION_ERROR: 29189
[  853.828289]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  853.828310]  ? graph_lock+0x170/0x170
[  853.828325]  ? graph_lock+0x170/0x170
[  853.834233] binder: undelivered TRANSACTION_ERROR: 29189
[  853.838857]  ? find_held_lock+0x36/0x1c0
[  853.838878]  ? __lock_is_held+0xb5/0x140
[  853.838907]  ? check_same_owner+0x320/0x320
[  853.838926]  ? rcu_note_context_switch+0x710/0x710
[  853.869246]  __should_failslab+0x124/0x180
[  853.873493]  should_failslab+0x9/0x14
[  853.877302]  kmem_cache_alloc+0x2af/0x760
[  853.881477]  ? is_bpf_text_address+0xd7/0x170
[  853.885979]  ? kernel_text_address+0x79/0xf0
[  853.890397]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  853.895511]  __kernfs_new_node+0xe7/0x580
[  853.899674]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  853.904450]  ? lock_downgrade+0x8e0/0x8e0
[  853.908608]  kernfs_new_node+0x80/0xf0
[  853.912521]  kernfs_create_dir_ns+0x3d/0x140
[  853.916931]  sysfs_create_dir_ns+0xbe/0x1d0
[  853.921253]  kobject_add_internal+0x354/0xac0
[  853.925752]  ? kobj_ns_type_registered+0x60/0x60
[  853.930512]  ? kfree_const+0x59/0x70
[  853.934230]  ? rcu_read_lock_sched_held+0x108/0x120
[  853.939244]  ? kfree+0x1e9/0x260
[  853.942611]  ? kfree_const+0x5e/0x70
[  853.946332]  kobject_add+0x13a/0x190
[  853.950045]  ? kset_create_and_add+0x190/0x190
[  853.954638]  ? kmem_cache_alloc_trace+0x616/0x780
[  853.959480]  ? kasan_check_write+0x14/0x20
[  853.963716]  ? do_raw_spin_lock+0xc1/0x200
[  853.967978]  get_device_parent.isra.27+0x360/0x5a0
[  853.972915]  device_add+0x2f1/0x16d0
[  853.976648]  ? device_private_init+0x230/0x230
[  853.981231]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  853.986776]  wiphy_register+0x178a/0x2430
[  853.990935]  ? wiphy_unregister+0x12b0/0x12b0
[  853.995435]  ? rcu_read_lock_sched_held+0x108/0x120
[  854.000489]  ? __kmalloc+0x5f9/0x760
[  854.004209]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  854.009746]  ? ieee80211_cs_list_valid+0x7c/0x440
[  854.014586]  ? ieee80211_register_hw+0xc0b/0x35d0
[  854.019435]  ieee80211_register_hw+0x13cd/0x35d0
[  854.024195]  ? rcu_bh_force_quiescent_state+0x11/0x20
[  854.029384]  ? ieee80211_free_ack_frame+0x60/0x60
[  854.034233]  mac80211_hwsim_new_radio+0x1d9b/0x3410
[  854.039259]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  854.045412]  ? check_same_owner+0x320/0x320
[  854.049740]  ? __lock_acquire+0x7f5/0x5140
[  854.053977]  ? __might_sleep+0x95/0x190
[  854.057953]  ? kasan_check_write+0x14/0x20
[  854.062193]  ? __mutex_lock+0x7d9/0x17f0
[  854.066256]  ? genl_rcv_msg+0x13a/0x170
[  854.070230]  ? __lock_acquire+0x7f5/0x5140
[  854.074468]  ? mutex_trylock+0x2a0/0x2a0
[  854.078526]  ? graph_lock+0x170/0x170
[  854.082333]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  854.087522]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  854.092536]  ? validate_nla+0x2d9/0x7b0
[  854.096517]  hwsim_new_radio_nl+0x7b8/0xa60
[  854.100840]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  854.106033]  ? __netlink_ns_capable+0x100/0x130
[  854.110709]  genl_family_rcv_msg+0x889/0x1120
[  854.115235]  ? genl_rcv+0x40/0x40
[  854.118692]  ? lock_downgrade+0x8e0/0x8e0
[  854.122841]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  854.127861]  ? kasan_check_read+0x11/0x20
[  854.132016]  ? lock_acquire+0x1dc/0x520
[  854.135989]  ? genl_rcv+0x19/0x40
[  854.139461]  genl_rcv_msg+0xc6/0x170
[  854.143179]  netlink_rcv_skb+0x172/0x440
[  854.147239]  ? genl_family_rcv_msg+0x1120/0x1120
[  854.151997]  ? netlink_ack+0xbc0/0xbc0
[  854.155889]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  854.161080]  ? netlink_skb_destructor+0x210/0x210
[  854.165930]  genl_rcv+0x28/0x40
[  854.169211]  netlink_unicast+0x58b/0x740
[  854.173284]  ? netlink_attachskb+0x970/0x970
[  854.177700]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  854.183238]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  854.188258]  ? security_netlink_send+0x88/0xb0
[  854.192841]  netlink_sendmsg+0x9f0/0xfa0
[  854.196912]  ? netlink_unicast+0x740/0x740
[  854.201149]  ? security_socket_sendmsg+0x94/0xc0
[  854.205902]  ? netlink_unicast+0x740/0x740
[  854.210140]  sock_sendmsg+0xd5/0x120
[  854.213870]  ___sys_sendmsg+0x805/0x940
[  854.217848]  ? copy_msghdr_from_user+0x560/0x560
[  854.222623]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  854.228166]  ? proc_fail_nth_write+0x96/0x1f0
[  854.232674]  ? __fget_light+0x2ef/0x430
[  854.236650]  ? fget_raw+0x20/0x20
[  854.240104]  ? find_held_lock+0x36/0x1c0
[  854.244169]  ? kasan_check_write+0x14/0x20
[  854.248414]  ? wait_for_completion+0x870/0x870
[  854.253003]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  854.258542]  ? sockfd_lookup_light+0xc5/0x160
[  854.263049]  __sys_sendmsg+0x115/0x270
[  854.266935]  ? __ia32_sys_shutdown+0x80/0x80
[  854.271341]  ? __sb_end_write+0xac/0xe0
[  854.275325]  ? fput+0x130/0x1a0
[  854.278602]  ? ksys_write+0x1a6/0x250
[  854.282414]  __x64_sys_sendmsg+0x78/0xb0
[  854.288040]  do_syscall_64+0x1b1/0x800
[  854.291931]  ? finish_task_switch+0x1ca/0x840
[  854.296427]  ? syscall_return_slowpath+0x5c0/0x5c0
[  854.301356]  ? syscall_return_slowpath+0x30f/0x5c0
[  854.306293]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  854.311662]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  854.316509]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  854.321696] RIP: 0033:0x455a09
[  854.324880] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  854.332594] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  854.339862] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  854.347127] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  854.354393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  854.361656] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000002b
[  854.369339] kobject_add_internal failed for ieee80211 (error: -12 parent: hwsim113)
[  854.377682] ------------[ cut here ]------------
[  854.382880] kernfs: ns required in 'ieee80211' for 'phy112'
[  854.388731] WARNING: CPU: 1 PID: 25534 at fs/kernfs/dir.c:759 kernfs_add_one+0x406/0x4d0
[  854.396940] Kernel panic - not syncing: panic_on_warn set ...
[  854.396940] 
[  854.404292] CPU: 1 PID: 25534 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #75
[  854.411545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  854.420881] Call Trace:
[  854.423495]  dump_stack+0x1b9/0x294
[  854.427109]  ? dump_stack_print_info.cold.2+0x52/0x52
[  854.432298]  ? kernfs_add_one+0x3e0/0x4d0
[  854.436528]  panic+0x22f/0x4de
[  854.439715]  ? add_taint.cold.5+0x16/0x16
[  854.443866]  ? __warn.cold.8+0x148/0x1b3
[  854.447930]  ? kernfs_add_one+0x406/0x4d0
[  854.452072]  __warn.cold.8+0x163/0x1b3
[  854.455948]  ? kernfs_add_one+0x406/0x4d0
[  854.460095]  report_bug+0x252/0x2d0
[  854.463710]  do_error_trap+0x1de/0x490
[  854.467597]  ? math_error+0x420/0x420
[  854.471387]  ? vprintk_default+0x28/0x30
[  854.475439]  ? vprintk_func+0x81/0xe7
[  854.479230]  ? printk+0x9e/0xba
[  854.482496]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  854.487328]  do_invalid_op+0x1b/0x20
[  854.491049]  invalid_op+0x14/0x20
[  854.494484] RIP: 0010:kernfs_add_one+0x406/0x4d0
[  854.499215] RSP: 0018:ffff88018dceece0 EFLAGS: 00010286
[  854.504563] RAX: 000000000000002f RBX: ffffffff87d5bc20 RCX: ffffc90002e91000
[  854.511822] RDX: 0000000000040000 RSI: ffffffff81610ae1 RDI: 0000000000000001
[  854.519092] RBP: ffff88018dceed20 R08: ffff88017ed2e500 R09: ffffed003b5e4fc0
[  854.526352] R10: ffffed003b5e4fc0 R11: ffff8801daf27e07 R12: ffff8801c7676240
[  854.533617] R13: ffffffff885d8920 R14: 0000000000000020 R15: 0000000000000000
[  854.540903]  ? vprintk_func+0x81/0xe7
[  854.544723]  kernfs_create_link+0x112/0x180
[  854.549044]  sysfs_do_create_link_sd.isra.2+0x90/0x130
[  854.554309]  sysfs_create_link+0x65/0xc0
[  854.558352]  device_add+0x7a0/0x16d0
[  854.562052]  ? device_private_init+0x230/0x230
[  854.566624]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  854.572150]  wiphy_register+0x178a/0x2430
[  854.576297]  ? wiphy_unregister+0x12b0/0x12b0
[  854.580788]  ? rcu_read_lock_sched_held+0x108/0x120
[  854.585884]  ? __kmalloc+0x5f9/0x760
[  854.589583]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  854.595110]  ? ieee80211_cs_list_valid+0x7c/0x440
[  854.599944]  ? ieee80211_register_hw+0xc0b/0x35d0
[  854.604773]  ieee80211_register_hw+0x13cd/0x35d0
[  854.609513]  ? rcu_bh_force_quiescent_state+0x11/0x20
[  854.614682]  ? ieee80211_free_ack_frame+0x60/0x60
[  854.619509]  mac80211_hwsim_new_radio+0x1d9b/0x3410
[  854.624514]  ? __rhashtable_insert_fast.constprop.53+0xf50/0xf50
[  854.630659]  ? check_same_owner+0x320/0x320
[  854.634974]  ? __lock_acquire+0x7f5/0x5140
[  854.639203]  ? __might_sleep+0x95/0x190
[  854.643165]  ? kasan_check_write+0x14/0x20
[  854.647386]  ? __mutex_lock+0x7d9/0x17f0
[  854.651430]  ? genl_rcv_msg+0x13a/0x170
[  854.655388]  ? __lock_acquire+0x7f5/0x5140
[  854.659606]  ? mutex_trylock+0x2a0/0x2a0
[  854.663650]  ? graph_lock+0x170/0x170
[  854.667438]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  854.672614]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  854.677614]  ? validate_nla+0x2d9/0x7b0
[  854.681574]  hwsim_new_radio_nl+0x7b8/0xa60
[  854.685879]  ? mac80211_hwsim_new_radio+0x3410/0x3410
[  854.691063]  ? __netlink_ns_capable+0x100/0x130
[  854.695721]  genl_family_rcv_msg+0x889/0x1120
[  854.700203]  ? genl_rcv+0x40/0x40
[  854.703641]  ? lock_downgrade+0x8e0/0x8e0
[  854.707779]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  854.712793]  ? kasan_check_read+0x11/0x20
[  854.716922]  ? lock_acquire+0x1dc/0x520
[  854.720873]  ? genl_rcv+0x19/0x40
[  854.724319]  genl_rcv_msg+0xc6/0x170
[  854.728024]  netlink_rcv_skb+0x172/0x440
[  854.732086]  ? genl_family_rcv_msg+0x1120/0x1120
[  854.736821]  ? netlink_ack+0xbc0/0xbc0
[  854.740690]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  854.745863]  ? netlink_skb_destructor+0x210/0x210
[  854.750687]  genl_rcv+0x28/0x40
[  854.754118]  netlink_unicast+0x58b/0x740
[  854.758167]  ? netlink_attachskb+0x970/0x970
[  854.762556]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  854.768071]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  854.773077]  ? security_netlink_send+0x88/0xb0
[  854.777644]  netlink_sendmsg+0x9f0/0xfa0
[  854.781691]  ? netlink_unicast+0x740/0x740
[  854.785922]  ? security_socket_sendmsg+0x94/0xc0
[  854.790681]  ? netlink_unicast+0x740/0x740
[  854.794899]  sock_sendmsg+0xd5/0x120
[  854.798593]  ___sys_sendmsg+0x805/0x940
[  854.802557]  ? copy_msghdr_from_user+0x560/0x560
[  854.807300]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  854.812814]  ? proc_fail_nth_write+0x96/0x1f0
[  854.817301]  ? __fget_light+0x2ef/0x430
[  854.821301]  ? fget_raw+0x20/0x20
[  854.824748]  ? find_held_lock+0x36/0x1c0
[  854.828795]  ? kasan_check_write+0x14/0x20
[  854.833051]  ? wait_for_completion+0x870/0x870
[  854.837646]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  854.843170]  ? sockfd_lookup_light+0xc5/0x160
[  854.847666]  __sys_sendmsg+0x115/0x270
[  854.851559]  ? __ia32_sys_shutdown+0x80/0x80
[  854.855960]  ? __sb_end_write+0xac/0xe0
[  854.860970]  ? fput+0x130/0x1a0
[  854.864238]  ? ksys_write+0x1a6/0x250
[  854.868036]  __x64_sys_sendmsg+0x78/0xb0
[  854.872090]  do_syscall_64+0x1b1/0x800
[  854.875973]  ? finish_task_switch+0x1ca/0x840
[  854.880462]  ? syscall_return_slowpath+0x5c0/0x5c0
[  854.885372]  ? syscall_return_slowpath+0x30f/0x5c0
[  854.890284]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  854.895636]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  854.900459]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  854.905626] RIP: 0033:0x455a09
[  854.908796] RSP: 002b:00007fcc0e700c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  854.916491] RAX: ffffffffffffffda RBX: 00007fcc0e7016d4 RCX: 0000000000455a09
[  854.923773] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000014
[  854.931029] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  854.938294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  854.945553] R13: 00000000000005ce R14: 00000000006fdbf0 R15: 000000000000002b
[  854.953814] Dumping ftrace buffer:
[  854.957788]    (ftrace buffer empty)
[  854.961482] Kernel Offset: disabled
[  854.965098] Rebooting in 86400 seconds..