CINFO(r2, 0x84, 0x1, &(0x7f00000005c0)={r4, 0x1, 0x0, 0x800, 0x3, 0x400}, &(0x7f0000000640)=0x14) fstat(r3, &(0x7f00000006c0)) syz_read_part_table(0x74000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) timer_create(0x7, &(0x7f0000000600)={0x0, 0x15, 0x1, @tid=r9}, &(0x7f0000000880)=0x0) timer_delete(r11) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000740)="7c9b2e60f31b7284c53a671ab0eb39") ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{}, {0x0, r12/1000+10000}}) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 03:33:29 executing program 5: add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="1031", 0x2, 0xffffffffffffffff) 03:33:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x806, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x8, 0xad}) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000000)=0x7, 0x4) io_setup(0xa, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x235}]) 03:33:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x3, 0x8, [0x100, 0xfffffffffffffffc]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000001c0)=""/101) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x20c0) write$P9_RVERSION(r1, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 292.843766] loop1: p1 p2 p3 p4 < > 03:33:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x6d717f7e0fc456d, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000001c0)={0x5, 0xbf25, 0x7fff}) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002c00), 0x177, &(0x7f0000002c40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="be940abc4a5471068ac44c06e9d1fdc3", 0x10}]) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80000001, 0x2000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000500)={@ipv4={[], [], @multicast2}, 0x4c, r5}) 03:33:29 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)="6d656d6f72790100000016000000ea66571d6ef0133000", 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x3f}) sync_file_range(r2, 0x5, 0x400, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x8001, 0x4) 03:33:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x22000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x2290, 0xfffffffffffffffb, 0xfaf7, 0x0, 0x8001, 0x8d, 0x19, 0x1, 0x1ff, 0x100000001, 0x1, 0x6, 0x800, 0x3, 0x4, 0xfffffffffffffffa], 0x1004, 0x8002}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2285, &(0x7f0000001500)=ANY=[]) [ 293.132202] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 63 (only 16 groups) [ 293.228938] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 63 (only 16 groups) [ 293.316090] QAT: Invalid ioctl [ 293.338316] QAT: Invalid ioctl 03:33:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) 03:33:30 executing program 1: syz_mount_image$f2fs(&(0x7f0000000280)='f2fs\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x33f, &(0x7f00000000c0)=[{&(0x7f0000000000)="1020f5f20100070009000000030000000c", 0x11, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x41, 0x0) renameat(r0, &(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 03:33:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x34000, 0x0) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(&(0x7f00000000c0)=""/161) prctl$setmm(0x23, 0x9, &(0x7f0000ff0000/0x4000)=nil) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x6, 0xe4, 0x7, 0x6, 0x6bfe}) 03:33:30 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x0, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000001000)='oom_score_adj\x00') read(r1, &(0x7f0000000000)=""/18, 0xfffffffffffffe8c) 03:33:30 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) fstatfs(r0, &(0x7f00000001c0)=""/181) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x1, 0x5ed, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x2e, &(0x7f0000000080)="9220d6478fc6a67c975c69f8c328", &(0x7f00000000c0)=""/46, 0x8001}, 0x28) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000280)=0xdd, 0x4) 03:33:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x10000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = dup3(r1, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000040)={0x9, 0x1, 0x8, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x78000010, &(0x7f0000ffe000/0x1000)=nil) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)={0x1, 0x6, [@random="942fa1ddf7fd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty, @broadcast, @remote]}) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb3f73d48582e9efa52445588582ea15be89d67e7a122cd4b8708a691c06eab076a74133a9545f463ed185f3a473b4d698cc3f7465072098bdae04e719f352ad8e5dd07ab760823edde89e140c63eb8782a911faa6a7b5bf7d24046987c03fed0fd53dff54555632a8a3ce441d56e35175d2496b16ba0dbed2e234217dd58c85766a6c5ee645900143461fa7f114030ea550fa81995f7bb589fb0609c442e894bd83d7c18f5e4c974a1d2bd186a6a35f0fcf966e7585c6935734235a2d48c736046865f97a000000d9e4901115e093be4f7203f062df6e9bb15aaf5c"], 0xc3) r5 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x1000f, 0x10) 03:33:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 03:33:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xcc7f90b, 0x200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x552, 0x4, [0x200, 0x40, 0x4, 0xfffffffffffffffe]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0xe3eb}, 0x8) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2000000006, 0x3, 0xffffffff, 0xb, 0x42a, 0x400000000007ff, 0x0, 0x2, 0x1ff, 0x702caebd, 0xb}) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:33:30 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2be9, 0x40000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7, @local, 0x46a}}, 0x579, 0xfd6, 0xfffffffffffffff9, "e9ecc2af023c260e8a25775e9eb887bb914382f7763e059d7fd69bda23030fdc9ceddc9f4a2de859463620dd09b20a60ab00c15e83eb8f034655227ec73228c316bf2ef1be4c6ee67d0f7c2a0c6e5e58"}, 0xcd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000000026, &(0x7f0000ddfffc)=0x401, 0xffffffffffffff9d) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x8004e22, @remote}, 0x169) sendto$inet(r1, &(0x7f0000000180)='K', 0x1, 0x40, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000300)=""/206) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3, {0x0, 0x4}}, 0x20) 03:33:30 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="c4e1f64e08c456a36447bc9e5c17326a", 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x6, 0x1f, 0xe000000000000000, 0x2fb3c5e9, 0x0, 0x401, 0x10000, 0x2, 0x9, 0x1, 0x1, 0xffffffff7fffffff, 0x100000000, 0x2, 0x1, 0x100000000, 0x4, 0x1, 0x8, 0x8, 0x6, 0x401, 0x0, 0xffffffffffff5ce7, 0x8, 0x7, 0xfffffffffffffff8, 0x6, 0x7e00000000000000, 0x1f, 0x4, 0x2, 0x3, 0x10000, 0x7, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x2, 0x8, 0x1, 0x0, 0x6, 0x100, 0x2}, r2, 0xe, r3, 0xa) 03:33:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="4978f6e406fec0b70d86de41e7297c41bfc11dd0a2b9ba33b0d05060f971a151844908354a05168c9c8a67762247f31279f4081fbe8c9bc81904701de61762008c273d8befb08311da7c67bada84db7dd794dd12e447d83ba40d73"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40040, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000240), 0x1) poll(&(0x7f0000000280)=[{r2, 0x100}, {r0, 0x1000}, {r0, 0xe018}, {r1, 0x8008}, {r3, 0x10}], 0x5, 0x2) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000180), &(0x7f0000000480)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0xebbf, 'bond0\x00', 'veth0_to_team\x00', 'ip6tnl0\x00', 'bond0\x00', @remote, [0xff, 0xff, 0x0, 0xff], @random="30aea251ab82", [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x1}}}}]}]}, 0x1c8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 03:33:30 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:31 executing program 4: mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x4, 0x33, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) pipe(&(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x408000) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x4, 0x10000) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x93fa, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @remote}], 0x20) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x9, 0x400000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x82) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0xa, &(0x7f00000000c0), 0x10) close(r3) close(r0) 03:33:31 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)="00000000e435a2c13ee8e0f55e8b3e9a69638bdebef24224f4bbfe536c098e38f500ef903ae58afb40249d8262df7c83af6b367a95e1b692096152ec7904bd567c413fec08a977aefb7e6836dffb590ce09b0b85285a0c508470127004aabd61c21958e34223dc03000000000000002dcc5ed63b2f5db4a7bf822c805351f1326cf3bedd397d1992624e83c82d07190f8540c7e94fcead314980ffaf1a821450c349e47f3b74d4098d700e6e4e9d77df7f0d0f482a7bc1", 0x9, 0xcf, &(0x7f0000000100)=""/207, 0x41100, 0x1}, 0x48) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x5, 0x8000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/133) 03:33:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/stat\x00') getdents64(r0, &(0x7f0000000180)=""/152, 0x98) socket$kcm(0x29, 0x2, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x6342, 0xb6, "cb9459ba21684f84764aa01c133f8faba73d293f5108fe73a2a4c5b6dbf89b9d6a6408444120b51a9fb4b20110aacd8821b8f1fa8430d82d92e9410668a44cadd3d031a056c2d6b7204022d095b5c3a925aa027280cbe6154861d4f196868e9bd72593d78ddb906605bc624c65acdf4ea5ca885a25684373fe7e8e7310096a66c7cc691154c77610ce4dc80a46a2c3a73aea1e54a7fdb2ecd8be31313a6c77a356cddb0c750c21952daad71dda8b39905da8e5f92377"}) getdents64(r0, &(0x7f0000000040)=""/36, 0x11) 03:33:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x400) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, [0x80000001, 0x8000, 0xfff, 0xffffffffffffff1c, 0x2, 0x243a, 0x40, 0x401, 0x3ff, 0x6d, 0x7, 0x2, 0x7, 0xfffffffffffffffa, 0x8e]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1, 0x9}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffff9c, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = dup(r2) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x21, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=0x0) fcntl$lock(r2, 0x0, &(0x7f0000000340)={0x2, 0x3, 0x9, 0xffff, r4}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x106, 0x8}}, 0x20) 03:33:31 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x53, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x6) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x10000) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000200)=0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x78) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x1000) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfbffffff00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) 03:33:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x5) 03:33:31 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xb29, 0x4, 0x0, 0x8, 0x6, 0xfffffffffffffffc}) truncate(&(0x7f000037eff8)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 03:33:31 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000240)=""/252) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x221}], 0x1, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x1, "8616f35c496b6bf62b0f35dde1e30ea4299f5a8cb616712532fb91604331116a2e99807a886b65e96b83d780017659109ae86123384c07987376e51422752bcb", "1dd4177c21bbeb57698e117164245646a71d5298b64fd310699bf77cecf89fa6", [0x3, 0x3]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') fallocate(r0, 0x60, 0x4, 0xc8ba) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x37) 03:33:31 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0x8, 0x4) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000000)=""/30, 0xffffffffffffff34, 0x0, 0x0, 0x80}, 0x120) fcntl$getown(r0, 0x9) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x81, 0xfffffffffffffb43, 0x401}, 0x1}, 0x20, 0x0, 0x0) [ 294.865642] Unknown ioctl 1074048865 03:33:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200), 0x2) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x6c, @empty, 0x0, 0x1, 'lblc\x00', 0x0, 0x0, 0x40}, 0x2c) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0xab07, &(0x7f0000000140)=0x8) close(r0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 03:33:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x13) 03:33:31 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setns(r0, 0x20000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) set_mempolicy(0xc000, &(0x7f0000000100)=0xb2a, 0x3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) 03:33:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20100, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x14, 0xf0, &(0x7f0000000240)="973a2307871f5d86cee5d008cfc17786a17a02129d8b054cbcbd990d9dcbf8571ba21c1ca39609904be54b45db9220afb790377356b83910a295fa9132364aa5438c2046a664ff702ab89003c0611ae4fa1b2fafd769daba455f1812ea82e81b3a672152697cf934160027fb44a288d259b51de4887e374e7efc1dfa221349f80863077538e675e059789b012c68b176e0d73a8f633fc6ca3294f6f4ba5c6746c6f5c29937d6e1aa41c1f77b1847fad123ed7f7463fe26a5f59c76133ec42e49c87265b3593f5b159bb0c79e481fb5f81bb9feb9dfb72af579bf8868ad4c30026029c170932a10db723f02107edc65b8"}) process_vm_readv(r0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000500)=""/239, 0xfffffe6f}, {&(0x7f0000001680)=""/182, 0xb6}, {&(0x7f00000018c0)=""/240, 0xf0}], 0x7, &(0x7f0000000600), 0x0, 0x0) mq_open(&(0x7f0000000040)='mime_typenodev,[\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) memfd_create(&(0x7f0000000100)='\x00', 0x0) 03:33:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x1000, 0x8, 0x9, 0xfffffffffffff000, 0x200}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20120070}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="08082abd7000fcdbdf2501000000080006000800000020000300140002007465616d5f736c6176655f3000000000080003000000000044000200080005000100000008000800070000000800066327aab0965ab68ffa72ed170009000000080003000200000008000500d409000008000700e403000008000800"], 0x80}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000000) ioctl$KDADDIO(r0, 0x4b34, 0x2) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000001c0)={0x3, 0x300, 0x81, 0x2, 0x400}) close(r0) [ 295.099040] Unknown ioctl 1074048865 03:33:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) [ 295.220863] Unknown ioctl -2146417262 03:33:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 03:33:31 executing program 5: accept(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000440)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, &(0x7f0000000480), r1, &(0x7f00000004c0), 0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34003}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000028000008000000000000f6ff11000000"], 0x14}}, 0x0) [ 295.245169] Unknown ioctl -2146417262 03:33:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x12) 03:33:31 executing program 0: r0 = socket$inet6(0xa, 0x4000902, 0x4100000004) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000c29ffc)=0x9, 0x4) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x9, 0x1ff, 0x80000001, 0x6dd17bb5, 0x3, 0x7, 0xff, 0x15a, 0x38, 0x30, 0x100000000, 0x4, 0x20, 0x1, 0x7f, 0x6, 0x21}, [{0x6474e553, 0x10000, 0x9, 0x16, 0x3, 0x81, 0x8, 0x6}], "c75d473bf75eba0c5091e79b1810b4ddf9998165f7949e8685f44ea8428d005095b1cc0843392e9dfb06520a80a596b5759fd1fdf224a713d56b40401310dc1ecf8f212f6e207529d793585f46e7132b79108f44bf81650677125c178afeae16e4ce2d60abc1a78b143afc8de1182661402a1c4ccc647a023e52c3f3c6bfd45c9f751495bccec40e6727f3db23354197ffacf4dbb37639fd9ba179616d5f795b9ca3fd3d463747b56f0ef3f0cf2fb28514e2f42af8e93863893d3697f65ab4640e57f790f8c5a661387084e87f81b20a", [[], [], [], [], [], [], []]}, 0x828) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:33:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5bcb, 0xc0000) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000080)="6c9f48991dd13951bb9dcf33037c79ca0cdd32a5178143168a62660380b1baa994a5061ae84c75e172d4d6392f9e08eac58c8c25e7ee1d3f32ca418d1d6f383f238d6a09a8548eba1c1df5c69247c26bb148160954bb1c782089d2bcbf0ee9188e379ebeff90a07fce73ac87f641e6ff7cf2", 0x72, 0x7, 0x0, 0x3, r2}, &(0x7f0000000180)) r3 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) 03:33:31 executing program 0: sched_setaffinity(0x0, 0xc0, &(0x7f00000027c0)=0x5) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) ptrace$getregset(0x4204, r3, 0x207, &(0x7f0000000280)={&(0x7f0000000140)=""/83, 0x53}) r4 = dup2(r2, r2) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r5, 0x8000, 0x800}, &(0x7f0000000380)=0xc) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 03:33:31 executing program 5: r0 = socket(0x10, 0x802, 0x0) socketpair(0xb, 0x6, 0xabf, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000140)) write(r0, &(0x7f0000000000)="fc0000004a000700ab092500090007000aab80ff010000680000369321000100ff015e400de5c835570000000200000000000000036915fa2c1ec286567f00000000000000000007071d0800008c0000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01f31d05b0350b0041f0d48f680000080548de000000d38a873cf19b01d100000000000000", 0xffffffffffffffa0) 03:33:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) 03:33:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @broadcast}, &(0x7f0000000100)=0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) ioctl$KDDISABIO(r2, 0x4b37) 03:33:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x10000005, 0x0, 0x1}, 0x2c) 03:33:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$LOOP_SET_FD(r0, 0x401070cd, 0xffffffffffffffff) 03:33:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) recvfrom(r1, &(0x7f00000004c0)=""/4096, 0x8ec0, 0x0, &(0x7f0000001500)=@can, 0x20000000) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4040000000, 0x200) bind$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x200, 0x4c, 0xffffffff, 0xfffffffffffffff8, 0x5, 0x2, 0x80000000, 0x1, 0x1, 0x6, 0x56, 0x80000000}) poll(&(0x7f0000000000)=[{r1, 0x74}, {r2, 0x110}], 0x2, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r0], 0x18}, 0x0) 03:33:32 executing program 0: clone(0x210007f7, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4b, 0x2000) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x8100, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x3ff) r3 = dup2(r1, r1) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x44) mmap(&(0x7f0000fff000/0x1000)=nil, 0xdefff000, 0x0, 0x12, r1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x80000000000000, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)="86004db5dcf3847d5b2ff715ab78edbad5a90c58642bb25eb8e26a153f7ccb8244"}}, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 03:33:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x15) 03:33:32 executing program 4: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="10630840"], 0x0, 0x0, &(0x7f00000000c0)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{0x3, 0x1}, {0x4, 0x4}, {0x8, 0x5}, {0x0, 0x8}, {0xb, 0x4}, {0xb, 0xe60c}], 0x6) 03:33:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") lseek(r0, 0x54, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) 03:33:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000000c0)={{0x0, 0x2}, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104fffff13b54c007110009f30501000b00024000000000020000", 0x1f) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8001, 0x1, 0x9}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r2, 0x18, "6651b743028ea1d2a8ffa9c4574870ec3d6e3efaa9079357"}, &(0x7f00000002c0)=0x20) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x75, 0x10}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x24000) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000340)) [ 295.931464] binder: 12451:12454 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:32 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) prctl$getreaper(0x29, &(0x7f00000000c0)) sched_yield() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x40000000000031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x1001) write$P9_RMKDIR(r0, &(0x7f00000001c0)={0x31f, 0x49, 0x1, {0x1, 0x3, 0x6}}, 0xfffffffffffffeb7) ioctl(r1, 0x8000000108912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x5, @loopback, 0x9}, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0xf}, 0x4}, 0x7, [0x4, 0x0, 0x1, 0xffff, 0x2, 0x5, 0x8000, 0xe2a]}, 0x5c) remap_file_pages(&(0x7f0000849000/0x400000)=nil, 0x400000, 0x4, 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/156, 0x9c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 03:33:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1d00) [ 296.023328] binder: 12451:12463 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 296.038693] input: syz1 as /devices/virtual/input/input9 [ 296.058001] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 296.068552] QAT: Invalid ioctl [ 296.085860] QAT: Invalid ioctl 03:33:32 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) keyctl$chown(0x4, r4, r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000ffc)=0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x5, 0x3, 0x100000001, 0x3ff, 0x1, 0x2, 0x80000001, r2}, &(0x7f0000000140)=0x20) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x338, &(0x7f0000000140)}}, {{&(0x7f00000000c0)=@un=@abs={0x1}, 0xa, &(0x7f0000000040), 0x287, &(0x7f0000000600)}}], 0x2, 0x0) 03:33:32 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 296.133265] input: syz1 as /devices/virtual/input/input10 [ 296.173418] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 296.211780] binder_alloc: 12477: binder_alloc_buf size 24384 failed, no address space 03:33:32 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 296.255918] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 296.279241] binder: 12477:12481 transaction failed 29201/-28, size 0-24378 line 2973 [ 296.295915] binder: BINDER_SET_CONTEXT_MGR already set [ 296.310077] binder: 12477:12493 ioctl 40046207 0 returned -16 [ 296.322844] binder_alloc: 12477: binder_alloc_buf, no vma [ 296.342406] binder: undelivered TRANSACTION_ERROR: 29201 [ 296.356927] binder: 12477:12481 transaction failed 29189/-3, size 0-24378 line 2973 [ 296.365684] binder: undelivered TRANSACTION_ERROR: 29189 03:33:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0185500, &(0x7f0000000180)=0x8004123) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x6}) io_setup(0x5, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x81, r0, &(0x7f00000001c0)="af0c44eac340ea5d2119749455ef8dde29067758655de471789a18b0fc988d9fdf9ab209155eefdd1ef09df602adc5beb07bdc4ff52ae3b51a789cfe1e23c0907d0a51cc1efa104e7779eb3a4371f167a834021906de05a5599d4f554d937e3ba07b", 0x62, 0x6d793a78, 0x0, 0x1}, &(0x7f0000000280)) ioctl$int_in(r0, 0x5473, &(0x7f0000000140)=0xc4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'gretap0\x00', 0x4}, 0x18) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 03:33:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 03:33:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8000, 0xb00) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:33:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xd, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0xfffffffffffffe7e, &(0x7f0000000040)}, 0xffffffffffffffca) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200040, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000140)=0xff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) dup2(r2, r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10) 03:33:33 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) keyctl$chown(0x4, r4, r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:33 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:33 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 296.806682] vhci_hcd: default hub control req: 2341 v0800 i0000 l0 [ 296.832801] binder_alloc: 12512: binder_alloc_buf size 24384 failed, no address space [ 296.853821] vhci_hcd: default hub control req: 2341 v0800 i0000 l0 03:33:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000040000000ffdbdf250e"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000500)=[0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x5, 0x0, 0x0, 0x1c, "5281e91991f7ae8916e94677337782de20aaee3844ca8ae6fc30663b"}, 0x28) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000006c0)) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000005c0)=""/228) sendmsg$nl_generic(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)={0xcc, 0x15, 0x0, 0x70bd2a, 0x25dfdbfb, {0x1f}, [@generic="200accfbe51e7e999a3bbb470642c45122e24be0b534cda83226f27c893579fbb6df6314985f73650a2019b4a2d95ca0e88670092accaefc969d5712974434c568e4efff961321567e2645d890fdc2bc9c5e6bdee9f51278c94f262f73cc2ce5c9ddb3e53be5ebafeb8fde8c452a4992d85f53da9620a5a59c384cf742251ab0fbae5679f58a0cb1afd6aa186a9e4dcbd9d248a28a2412faba922fc59107bb2edc6909913762e7e4f7a8e59a60d159174a1e663329adc1"]}, 0xcc}, 0x1, 0x0, 0x0, 0xc000}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="620000008262ae4b4c1904aad0b4e4a1dd22012298b399d4077b5781cda9ca6018af100ae69aefabdeacf98c3eed130ed4c9e3df094d4bbc0b773328ab9ed852433fbd1546303a495ad2eb9a721914a39c1e7e73474b20a4c6d57c10bb597cec3c243b53f5"], &(0x7f0000000140)=0x1) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000540)={0x7, 0xa0400000000}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0xa53, 0x4) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000580)={0x20, 0x5, 0xec, 0x3, 0x82d}) bpf$MAP_CREATE(0x13, &(0x7f0000000000)={0x1000, 0x0, 0x7a}, 0x2c) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 03:33:33 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x442000) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) fcntl$setpipe(r1, 0x407, 0xfffffffffffffff8) sendmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000002340)=@pppoe={0x18, 0x0, {0x0, @local, 'veth0_to_bridge\x00'}}, 0x80, &(0x7f00000028c0), 0x0, &(0x7f0000002940)=[{0x10, 0x111}], 0x10}}], 0x1, 0x800) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="013c003f23"], 0x5) close(r1) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) eventfd(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) sendto$inet(r1, &(0x7f0000000400)="224badb8d456b565cbc26c3793719096c6c3255a1df2e9d657e673cc2f841d84bc5183dc359f97ae52cd19377add78c1ab412bb7d08fcfb45be7552c8a30097fd2646c88847fa6041c", 0x49, 0x4000000, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) renameat2(r1, &(0x7f0000000480)='./control\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x1) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x90) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000300)=0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212013df5be9bcbfe72da65be7e471f32e2f66696c65737973740900000000000000f10b7f3dd163000000000000000000000000"], 0x35) [ 296.885464] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:33:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) [ 296.938466] binder: 12512:12513 transaction failed 29201/-28, size 0-24378 line 2973 03:33:33 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() ftruncate(r0, 0x48d) 03:33:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x40e) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7f, 0x200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a070600000000e5b3b60ced5c54dbb7", 0x10) r3 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x40}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000940)={r4, 0x7fff}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @rand_addr=0x9d}}, [0x6, 0x5, 0x0, 0x8, 0x6, 0x8, 0x8, 0x3, 0x0, 0x1, 0x100000001, 0x4, 0xb50, 0x5fc, 0x400]}, &(0x7f0000000400)=0x100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r5 = accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000580)=@nl, 0x80, &(0x7f0000000980)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/93, 0x5d}, {&(0x7f0000000780)=""/223, 0xdf}], 0x3}}], 0x1, 0x0, &(0x7f0000000e40)={0x77359400}) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x5) rt_sigprocmask(0x0, &(0x7f0000000440)={0xa5b}, &(0x7f0000000480), 0x8) syz_mount_image$bfs(&(0x7f0000000540)='bfs\x00', &(0x7f0000000600)='./file0\x00', 0x100, 0x5, &(0x7f00000008c0)=[{&(0x7f00000006c0)="bd8b01ab38f37e68f88be3e1fa5285ba4d57ae5cfd74635c912a3a716b42eed825bd1915d1e5abaf0609655882221ac3109e5228f483022dddab942dfa7125f2e9ce8440bbc21250c0a836c743387b6e094335cb13e9ce8df00cc7085d948de06d9b3d3022f1115a4157ed62caa2142ab2f916c2be34313ca55ec7684e026eb08d95855c13d3c01e9e9cd0", 0x8b, 0xe13}, {&(0x7f0000000880)="7aadc37c1afdc009f1e248623044373e502a9d880a0cfb377508ecee62cf", 0x1e, 0x3f}, {&(0x7f00000009c0)="b0fb8b7631ad00725ab596293a423edad9a7778121c4bf47eb9987c4b6901c02389741cd8e41038cae028019a021e8314f69e31704f1a6d90b05c6d8bc28b677eabfaa02350ab8dfd6698224cd70b48ec1c256ed9163e49ffb8d4112e6342c5ec3643694b10681c10e4a9ba241ef7de09feb2677ec83e691c1069655641bedb50aaa83189e60924548dc8b399edd2845cf6823621225be13c3d21fcd57e9bb580355de646db432c82bf38f803fe9349dddf24d164057e965638cfcd8b5119dd5e65d1ce933235938d6adb81b996b0d0041c0ed839f19f1080ab0b8d77807f031cd", 0xe1, 0x3}, {&(0x7f0000000ac0)="33489dcc8754af5fe5202b874dffcc5ea57331fbbd41897299165cc3df681a912053ebd2c33fd7468c6bb9a7cd4d3725eb379928f36515c09fa0f32a8797a08b0ee8ee6987b345b52e4517794beebc79ffa2e9f73c507e71a6ffcebaf46716ba105e11b0689294c73e2006fae28df0d9201116e739a1d204a0e5ffaa343e36ce2a28b7314f4ebbba8a32029b794d188e3f7b25ffdbf66296ce8b0c63024df2ed3976022e8ed0b3e04012cf3f59054bc184fab89445f99dd095ddf4e0ee14d1f707423a17593acbb5ab89102cbb1b11303c8e", 0xd2, 0x100000000}, {&(0x7f0000000bc0)="73d4596cbb4b0f3c03e11b6920f700202d88854b4ebcd8da95c72d98087167b3d652245aaccb1c01787fafcf336949e1512bff76babb01d58dd94e5c0cf4730199228a2fee50b7ce7252aaa35414ad410fbcf62ad8c5528f90318ba82549fb1b473c53aa4bf9ab5538c4c3b36d707df6c90b8c5abe06bbac6b8385734ea6108d7aaa9025fac92a3f7202484cb5e7afecbd1cc3266fb18110c2fda87444c3ca9738a7e2ff4b8fb73a5029777cacac1766216ff4852268b1ec6dc26c50f451cbff90dd7dd9c791c094c520c4", 0xcb, 0x90}], 0x40000, 0x0) sendmmsg$alg(r5, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2, 0x0) recvmmsg(r5, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 297.021956] binder: undelivered TRANSACTION_ERROR: 29201 03:33:33 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) keyctl$chown(0x4, r4, r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:33 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() ftruncate(r0, 0x48d) 03:33:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x5ad) io_setup(0x6, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x7fff, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8, 0x0) linkat(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0xfffffffffffffffb, 0x0, 0x0, 0x200000829f, 0x0, 0x0, 0x0, 0x0, 0x7fa7}) ioctl$TIOCGLCKTRMIOS(r4, 0x5412, &(0x7f0000000000)={0xffffffff}) [ 297.221499] binder_alloc: 12557: binder_alloc_buf size 24384 failed, no address space 03:33:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) [ 297.278521] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 297.281966] cgroup: fork rejected by pids controller in [ 297.315769] /syz0 [ 297.317150] binder: 12557:12558 transaction failed 29201/-28, size 0-24378 line 2973 03:33:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000040000000ffdbdf250e"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000500)=[0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x5, 0x0, 0x0, 0x1c, "5281e91991f7ae8916e94677337782de20aaee3844ca8ae6fc30663b"}, 0x28) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000006c0)) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000005c0)=""/228) sendmsg$nl_generic(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)={0xcc, 0x15, 0x0, 0x70bd2a, 0x25dfdbfb, {0x1f}, [@generic="200accfbe51e7e999a3bbb470642c45122e24be0b534cda83226f27c893579fbb6df6314985f73650a2019b4a2d95ca0e88670092accaefc969d5712974434c568e4efff961321567e2645d890fdc2bc9c5e6bdee9f51278c94f262f73cc2ce5c9ddb3e53be5ebafeb8fde8c452a4992d85f53da9620a5a59c384cf742251ab0fbae5679f58a0cb1afd6aa186a9e4dcbd9d248a28a2412faba922fc59107bb2edc6909913762e7e4f7a8e59a60d159174a1e663329adc1"]}, 0xcc}, 0x1, 0x0, 0x0, 0xc000}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="620000008262ae4b4c1904aad0b4e4a1dd22012298b399d4077b5781cda9ca6018af100ae69aefabdeacf98c3eed130ed4c9e3df094d4bbc0b773328ab9ed852433fbd1546303a495ad2eb9a721914a39c1e7e73474b20a4c6d57c10bb597cec3c243b53f5"], &(0x7f0000000140)=0x1) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000540)={0x7, 0xa0400000000}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0xa53, 0x4) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000580)={0x20, 0x5, 0xec, 0x3, 0x82d}) bpf$MAP_CREATE(0x13, &(0x7f0000000000)={0x1000, 0x0, 0x7a}, 0x2c) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 03:33:33 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = getpid() getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x408c5333, &(0x7f0000000280)={0x3e55, 0x0, 'client1\x00', 0x0, "6a61009e6d558526", "996612c5ac5c8cb078011a9807dc07c70ae22ac1535c44ed484aca3b8bfe4fca"}) [ 297.409810] binder: undelivered TRANSACTION_ERROR: 29201 03:33:33 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000006700)={&(0x7f00000062c0)=@xdp, 0x80, &(0x7f0000006680)=[{&(0x7f0000006340)=""/121, 0x79}, {&(0x7f00000063c0)=""/49, 0x31}, {&(0x7f0000006400)=""/226, 0xe2}, {&(0x7f0000006500)=""/147, 0x93}, {&(0x7f00000065c0)=""/140, 0x8c}], 0x5}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x1, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="87e4618c89a3b9cdc727557c27e9de53baf898bc0148ebc1e41423726e4a3f1dc321b1f4b8bf031dd1972fb479e1cdaaee5eda9f905fe952d6240906052242bd236d489726a74f773754607967ecc3d664bd3bcc88b10563d32c519840853083d15dc7f7483d63e540156e6ec37bfb7624be49e56587fe308570c2b5f5c7f492232418e8d6e2", 0x86, 0x1}], 0x20800c, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x1800000000000000, 0x5e, 0x29, &(0x7f0000000440)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d84648a27f11c72be049eb4be1977d486a72d7363417ef6c9079a2ea9747b34bd1d6e19e60597be8e1d504832c8182e40b2572d6ac0963e03f3a", &(0x7f0000000400)=""/41, 0x100}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000b80)={0x8, 0xffffffff, 0x0, 'queue0\x00', 0x2}) getpid() 03:33:33 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) keyctl$chown(0x4, r4, r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:33 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000001580)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000015c0)={0x0, 0x8}, &(0x7f0000001600)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001640)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x42, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x21ff}, &(0x7f0000000100)=0x8) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140)=0xfffffffffffffffd, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000240)="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") 03:33:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 03:33:34 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 297.618181] binder_alloc: 12594: binder_alloc_buf size 24384 failed, no address space [ 297.648382] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 297.697813] binder: 12594:12595 transaction failed 29201/-28, size 0-24378 line 2973 03:33:34 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x48d) 03:33:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1500) 03:33:34 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0xfff, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x4000) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000180)) ioctl(r1, 0x0, &(0x7f0000000500)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0x4109}]}, 0x20}}, 0x0) [ 297.767207] binder: undelivered TRANSACTION_ERROR: 29201 03:33:34 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) keyctl$chown(0x4, r3, r4, r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 297.981761] binder_alloc: 12639: binder_alloc_buf size 24384 failed, no address space [ 297.993910] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 298.012515] binder: 12639:12640 transaction failed 29201/-28, size 0-24378 line 2973 [ 298.023592] binder: undelivered TRANSACTION_ERROR: 29201 03:33:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0xfffffffffffffc88, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x23e}}, 0x50) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/119, 0x77}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_rr_get_interval(r1, &(0x7f00000001c0)) r2 = gettid() listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001580)=""/156, 0x9c) tkill(r2, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 03:33:34 executing program 0: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 03:33:34 executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000e8030000c00200007001000070010000c0020000c0020000200400002004000020"], 0x1) r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f00000000c0)="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", 0xfffffffffffffe61, 0x8002, &(0x7f0000000240)=@abs={0x0, 0x0, 0xd0000e0}, 0xfffffe8d) socket$nl_netfilter(0x10, 0x3, 0xc) 03:33:34 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a33000/0x4000)=nil, 0x4000, 0x0) 03:33:34 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 298.255435] binder_alloc: 12650: binder_alloc_buf size 24384 failed, no address space [ 298.282745] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 298.294787] binder: 12650:12652 transaction failed 29201/-28, size 0-24378 line 2973 03:33:34 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 298.309656] binder: undelivered TRANSACTION_ERROR: 29201 03:33:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 03:33:34 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1ff, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000200)={r2, &(0x7f0000000100)=""/239}) ioctl(r0, 0x8912, &(0x7f00000003c0)="153f6234488dd25d766070") ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000780)="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") ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000002c0)={r3, r4, 0x1000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_emit_ethernet(0xfffffffffffffe55, &(0x7f0000000400)={@local, @broadcast, [], {@llc={0x4, {@snap={0x1, 0x1, 'r', '+i$', 0xd, "fa2672b1e4414f564286dd2738e1148247f53363eff2f6e10531d8b3f4a4b764c917d963f7497722b47403479da968cab6c0dfca72983c3ed13ad79c6c59e27614f5d1d445593632e8acbb57eadf4a472ca3f7af91c9755a9c17bb"}}}}}, &(0x7f0000000040)={0x0, 0x1, [0xeb8]}) 03:33:34 executing program 5: r0 = perf_event_open(&(0x7f00000019c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4480, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001980)='/dev/rfkill\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001840)=@assoc_value={0x0, 0x400}, &(0x7f0000001880)=0x8) connect$rds(r2, &(0x7f0000001cc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000018c0)={r4, @in={{0x2, 0x4e21, @rand_addr=0x3}}, 0x2}, 0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000001680)=@assoc_id=0x0, &(0x7f00000016c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001700)=ANY=[@ANYRES32=r5, @ANYBLOB="26000048f04061f602588ac7fa61b6ecab37b981928153e6db00000000000000000000000000"], &(0x7f0000001740)=0x2e) recvmsg(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/4096, 0xffffffffffffff06}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000012c0)=""/163, 0xa3}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001440)=""/80, 0x50}], 0x7, &(0x7f0000001540)=""/100, 0x64}, 0x10002) unlink(&(0x7f0000001c80)='./file0\x00') setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000001c40)={@mcast1, r1}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'team_slave_0\x00', r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000e78e33582e2bde5bf12da78d8bdbbb5c7098c9d4666f563f7739c3129cc54c4300eea9b853ec529048c65640b4a7f21f4c7f", @ANYRES32=r1, @ANYBLOB="14000200000000000000000000040000"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='em0eth1keyring\x00', r2}, 0x10) sendmsg$xdp(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001a40)="f153192e6ef257f819d2b293901e2dff97119fd99b63a2c4d7c091dda0aa04b27f93365390ca014706a1a1f14666851bac7e9857ba3dad300648baf7e1d017f90317103364c656c914a1dc0dcd8bfe9932674231f38f215b5758f4a0ad5b1ef08fcf1e2fbae6539a7277a0302e429ac0c104e375950b5c8946300bbdb78e6cbc69cb56a348f77040c4b57a37b057e11175ac59ba34bd2c7bfc4c29b1dcb76ac14264363b8e9832de2ef2583c3dac90ea50d2e4436b48190f3c01a45a7e2025009bb41afe556495978164c50b63ddba20e0f9df028d2a859b5b1a67", 0xdb}, {&(0x7f0000001b40)="16a72ae97e8b964b9be6e3c55a34a013deed666f4bdc54495c7dff136559fc32167d29a2700e3f5fce71cd040100177eb1244c8a1dee94de49976f5296c430566a6e6e85bb582c87b5330c9d16d192479c24fefeaab178643b37b892974d492f637490f4d66254a77601e6af0f9e27a372112a0984ea468eaef9c05f78f722dd031199b21df94267d33c3da9deddc651045e7dd8c05e91b0e8ac24397101e61aedd27c290b742f179ddddb2c0b492680ece2b34a0bb96b18b614225f", 0xbc}], 0x2, 0x0, 0x0, 0x20040000}, 0x8000) 03:33:34 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x8) 03:33:35 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 298.515347] binder_alloc: 12671: binder_alloc_buf size 24384 failed, no address space [ 298.540761] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:33:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f00000020c0)=""/48, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) write$P9_RREAD(r2, &(0x7f0000000080)={0x42, 0x75, 0x1, {0x37, "45e8c69cd2b07573c4198f7177b146050a5369824e5b583ab295ef7f64654437f3dd9d86c7cc72f3081550dc9a22398bb85ce42caafcce"}}, 0x42) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 03:33:35 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x50cc2, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x800) mprotect(&(0x7f0000063000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 298.576330] binder: 12671:12672 transaction failed 29201/-28, size 0-24378 line 2973 03:33:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc0000) [ 298.631977] binder: undelivered TRANSACTION_ERROR: 29201 03:33:35 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x11, 0xf4, 0xfffffffffffff001) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000240)="069f05f335525e9ce73ab58fa990935364524a6b12a1fd33a98b81b8de4263fc6c70666725475f85425406b102303d4c2ee4d637d5c249a296451e629c28df8397b3582e3140216fbc42d5", 0x4b) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setitimer(0x0, &(0x7f0000000040), &(0x7f0000000180)) [ 298.672418] input: syz1 as /devices/virtual/input/input11 03:33:35 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:35 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1000010000000000) unshare(0x400) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000000c0), &(0x7f00000001c0)=""/88}, 0x18) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000100)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) signalfd(r0, &(0x7f0000000040)={0x1}, 0x8) 03:33:35 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10000) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000080)={0x401, 0x7, 0xd7a8f00, 0x9202, 0x4}) r4 = openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r0, r4, &(0x7f0000000040), 0x3f) 03:33:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r0, 0x70000, &(0x7f00000000c0)="153f62235565875d76607056815b516893833a3084151e25a9b79d4548c94a4dae881ec33dd4e288ad25bd2bb39e1afa8d2fc6db0815bcab0220a050784a") r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x401, 0x8000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6006f726110002000000000000000000000000000000ff02000000000000000000000000000100000000000890780000"], &(0x7f0000000100)={0x0, 0x800000000003, [0x2, 0x745]}) 03:33:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) 03:33:35 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000002500)) signalfd(r0, &(0x7f0000002540)={0xff}, 0x8) ioperm(0x0, 0x3, 0x0) clone(0x8000020082100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x3ff, 0x7, &(0x7f0000002400)=[{&(0x7f00000000c0)="ed1a3d7af0f9c37d6f80c2e2cab6fe6c274c4ba72e3a271e44c8691c729d661b1a2d34cb", 0x24, 0x9}, {&(0x7f0000000100)="b12bef0f821c0f5d721e6d3f3dc99de090f6282ddf1d7005bc57f46aee84461096c3e47a4fdb88c9db6b7acafc8717f92829224fbf2f9dacbc871825f4f2dc537ef97bef2e61347b0d8ee8ecd2762d4844957fd85bbe1eddf210b5ad891f9d8637e8459ad5fcbde0be599ef4565875b1684c57b7c87d5aea36759a4537f88132f66e6a972102ab2a5d0f7ae6b68b8e44439be616ce6ff7300d9b192154456921db50535d5851304714cbee8332ccd22735f61a6337235f80be4b1fdd91b8401217394712a019c624f002839b65a3b463cab081e51474e8cbe0c78e2777d56d28de2d5334354b918c", 0xe8, 0x46d}, {&(0x7f0000000200)="2a2ef68f044f5c40e0582061ab9ba55a1b7c43e26c319349ef7a95bc6da894d66561116937fc2fee4779b36de03bbe6c223477059e5de86fa100235a9dfd24b8223f3b9ce8849dbf58cb024448333e9aa48f20d50a2596d6821afe890a95cbee4b69bcf11391e468561c7f557ddd4066b7e5baf4bf0c06065cf1fc29759bb5370070cbbdc6b2ae2e9bf14e2405a2878e5baa9d09789f9e242dfd8958984cba8d608e1f", 0xa3, 0x3ff}, {&(0x7f00000002c0)="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", 0x1000, 0x9}, {&(0x7f00000012c0)="882fa9347e1e049155", 0x9, 0x8}, {&(0x7f0000001300)="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", 0x1000, 0x3}, {&(0x7f0000002300)="e9ff094c90868dd4e54a692731b74dc76c1d40273151162e16bb9bbe8b0caaabea98e5b6f8c38e5eb18b1282d28d8655d095840551321d976df446be754def4d7301d883b87c45ca99214b1315cd162d862aadfdf77d3e05a4e3729b8749561fa3d79e387dbd95043c2c0eabf3c1c8b08effc75dde245816a4edaf5c7235df25fcff080a06bde3b8c56d6ff287bd1e3fbd764c6b8acfee5d417b6b4a6d9864060d076c688ca0d8f6f0a8d2c0aca473436a94cb1fc1f87d3c096d2d5fb80e61cdcfd98e9b411f3b32fce3ec8c912fb3c7656d98f75d8ffa319a31fe", 0xdb, 0x2}], 0x10, &(0x7f00000024c0)=']em0em0\x00') [ 298.898667] binder_alloc: 12717: binder_alloc_buf size 24384 failed, no address space [ 298.917789] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:33:35 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 298.954014] binder: 12717:12725 transaction failed 29201/-28, size 0-24378 line 2973 03:33:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x1, 0xfffffffffffffd2b) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x39, 0x0, 0x3, "15da349720da1ef698864709a36cca9a", "0c7ca9ee76d799f39d283380ee3ddc525634af54897437f331b6d03cd31fad6bce576440"}, 0x39, 0x1) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) close(r0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000080)={0x1d}) r1 = semget$private(0x0, 0x4, 0x8) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000100)=""/99) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000440)='{user}eth0eth1\x00', &(0x7f0000000480)='trusted.overlay.upper\x00'], &(0x7f0000000140)) [ 299.008842] ceph: device name is missing path (no : separator in /dev/loop5) [ 299.016113] binder: undelivered TRANSACTION_ERROR: 29201 03:33:35 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:35 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x20000803, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0xa0000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000200)=':procGPL}.vmnet0-\x00', 0x1) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f00000002c0)=0x54) r3 = syz_open_pts(0xffffffffffffffff, 0x8803) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000040)="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") getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000140), &(0x7f0000000180)=0x215) 03:33:35 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7f65db78b282958e"}}, 0x48}}, 0x0) 03:33:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1400) [ 299.253344] binder_alloc: 12760: binder_alloc_buf size 24384 failed, no address space [ 299.292461] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:33:35 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xffffffffffffff05}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xe37e) 03:33:35 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 299.323555] binder: 12760:12761 transaction failed 29201/-28, size 0-24378 line 2973 03:33:35 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7f65db78b282958e"}}, 0x48}}, 0x0) [ 299.392000] binder: undelivered TRANSACTION_ERROR: 29201 03:33:35 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000003fc0)="153f6234488dd25d766070") mknod$loop(&(0x7f00000029c0)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0xffffffff00000000, 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, 0x0) 03:33:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 03:33:36 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x24) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x600, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000240)={0xa, 0xfffffffffffffd96}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYBLOB="2600000000000000f0cd98cbc600000000000000000000002db8686732ffc4ea9fd1d938d269f8707e3aeb038b94dec6a084018b88f8e22daa01002b616a863c3f823e32d3b9735d3754ceedd92df32cc2c53d42cee4e9983b93a804c6cb4216d62c2e83cd622f5b56"]) dup3(r2, r3, 0x0) 03:33:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)="000000008cf624f2e07c847e95e940a0dd6e4b20f5cea123ac9e5b598a865da7f2af140a95a382f33c113e671f12fcf6cab35566ac2afbdd8fc9a3485d374939e09396070183ba70aec1dfcaa358e2b6") unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) [ 299.606725] binder_alloc: 12795: binder_alloc_buf size 24384 failed, no address space 03:33:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0)) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0xbc, 0x7, @scatter={0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/186, 0xba}]}, &(0x7f0000000300)="728f62fa76247a0abb9ac1bbf6c2fafa26ba58bdfcc90c1feaeeab058c6d9279a32d0be7882a37acc54db90a9c0221accaee72c54acaee05aafc6537117ff40051cb353c6be7fc3c06b2aee4e3942c9d9ab3cc8a426e89e6b2cbf72a0b6cd22334ba7025529a7096ef0cdd457d84687e8189047b7b455b9e5f4cba77d8a141ada92d5c15e3a6c0208f7fd69ced0cc6e8a8b26f90b6cc63e67aa5499b5890c0c55333aa63df98ec0a8104f185f0bcefd942edbf5f011b6dd4ae3dd36e", &(0x7f00000003c0)=""/4, 0x200, 0x14, 0x0, &(0x7f0000000400)}) readv(r0, &(0x7f00000000c0), 0x10000000000001fd) 03:33:36 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 299.651609] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:33:36 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x301002, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x161000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000600400004001000040010000480200000000000048020000900300009003000090030000900300009003000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000d69dc968922f637c4e5ec1a6a8a40000000000000000000000000000040000000000a5292baa07a72a0b0238207ea2000000000000000000008000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80040010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d3000004d23f000000ff010000480049444c4554494d455200000000000000000000000000000000000000000091d5000073797a30000000000000000000000000000000000000000000000000ff07000000000000ff020000000000000000000000000001fe8000000000000000000000000000bbffffffffff0000ffffffffff00000000000000ffffffffffffffffffff0000ff69705f7674693000000000000000000069726c616e3000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d00020240000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000bc2fc406e757b98b872f4e22437b31791342c655500aa0fa25be1f9b010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020014801000000000000000000000000000000000000000000000000280069636d703600000000000000000000000000000000000000000000000000000409010000000030007564706c69746500000000000000000000000000000000000000000000004e214e234e244e21030000000000000028005443504d53530000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4c0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000100)={0xfffffffffffffff7, 0x7fffffff, 0x0, 0x3, 0x2, 0xfffffffffffffffc}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000240)={0xa0000015}) 03:33:36 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f9c000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0xfffffffffffffe27, &(0x7f000081afd0), 0x0, &(0x7f0000000100)=""/90, 0xfffffffffffffd0b, 0x4}, 0x40) r3 = dup2(r0, r1) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x5, {0x7, 0x1b, 0x1, 0x1000, 0xdc, 0x7, 0x1ca, 0x2}}, 0x50) 03:33:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x37c552da7f0000) 03:33:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x10000, @mcast2}}, 0x2, 0x2383, 0xff, 0x80, 0x2}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e22, 0xffffffffffffffe0, @remote, 0x9697}}}, 0x84) r3 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_misc(r3, &(0x7f0000000880)={'syz0'}, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6) sendfile(r3, r1, &(0x7f0000000140), 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00a20835ddfe3f"], &(0x7f0000000280)=0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000001c0)={r5, 0x47, "0d1020c5cb1beb5509e2aca814dfa9db2acf2d13e37ab00c27ed1630bae3854a82082eea56d33fe76f72db8f6888b03da8c6ea8cac1e8f86d596af0abf452ccba6b50e8a329d73"}, &(0x7f0000000100)=0x4f) 03:33:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xfff}, 0x1) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x4, 0x4, 0x2b76, 0x0, 0x0}, 0x2c) 03:33:36 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000100)={0x7}, 0x8, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffefe, &(0x7f0000000040)}, 0xffffffffffffff8c) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x1000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)="2f02726f0500000074617000895059372f9199aa53f0bb5cf7b64cb7336b650264b1f1f81db62cc9399668f301b3668ad02b47dd439dcf453f1bceff3b4f5a2745f5", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000000) 03:33:36 executing program 5: r0 = socket(0xa, 0x3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000006) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x2f, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x0, 'ovf\x00', 0x2, 0x800, 0x6f}, 0x2c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x2) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="16f448398ba7d0aed7cd180e007642636dd466a7bbe318e1840d71aa09ab5a15c6f9d0c0748d182bc8c3ef954069b5c2a9927cefc0158b2f1fbc184b8cc7c05f1def7be77aa60458498bc80dc6eb941b049a9964519c1e1c435a84c67e621c583381556e402a5921930d1a7ab77f327b5281e4a3512212fcb730765c0076dc0f46c14646efe30629af89203d960686bb8ea757f9a9bade15a45f5e9ab989f731f546289d7f054cd5ba4af442c3fa26be03fbab48bc89073e0f6f4099cc4b782c92b68ea200bdfb8e6c3ba7ac171253f627e82a24634718f8dc75a4333e1ae911ca5c6e6e34bdfbeaa4f31abb019259666b", 0xf1) 03:33:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) 03:33:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2f54, 0xe39, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030d3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0x5af3c775) close(r0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'nr0\x00', @ifru_mtu=0xc9}}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000240)={0x5, 0xfffffffffffffe14, 0x1, 0x2, 0xd7e1, 0x3, 0x0, 0x0, 0x2005, 0x8, 0x7, 0x0, 0x0, 0x118, 0x67, 0x8000, 0x0, 0x1, 0x7fff, 0xd6, 0x0, 0x80000001, 0x7, 0x5f, 0x2, 0x5, 0x100000001, 0x3, 0x7ff, 0x30, 0x5, 0x40000000000000, 0x1, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x10, 0x1f, 0x9c, 0x2, 0x80eb, 0x0, 0x2}, r2, 0x7, 0xffffffffffffff9c, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={[], 0x1970, 0xff, 0x0, 0x7b, 0x10001, r2}) clock_gettime(0x7, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x20000, 0x0) [ 300.359034] device bridge0 entered promiscuous mode 03:33:37 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:37 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x202000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x800, 0x9, 0x8}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:33:37 executing program 3: timer_create(0x0, &(0x7f0000000380), &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x16, &(0x7f00000001c0)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640), &(0x7f0000000180)=0x8) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x1000000020000, 0x3ff, 0x9f, 0x4, 0x0, 0x9, 0x40000, 0x8, 0x8, 0x5, 0x7fff, 0x7ff, 0x10000, 0x9, 0x7fff, 0x75, 0xffffffffffffff51, 0x1, 0x20, 0x49, 0x100000000, 0x9, 0x7ff, 0x6, 0x5, 0x401, 0x0, 0x9702, 0xffffffff00000000, 0xdc51, 0x9, 0xfffffffffffffffa, 0x80, 0x0, 0x8, 0x84c, 0x0, 0x38e0, 0x0, @perf_bp={&(0x7f0000000200), 0x26daae23da03682f}, 0x0, 0x7, 0x3, 0x6, 0xe93, 0x3, 0x3c}, r2, 0x7, r1, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0x6c050000, 0xaaaa000000000000, 0xfc000000]}}, 0x1c) 03:33:37 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 03:33:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x100, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0xfffffffffffffffc, 0x5, 0xa2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000027f000001000000000a000000ac1414bbffffffffe0000001000000000000ffffffff00000000e0000002ac1414bbffffffff0000"], 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) prctl$setendian(0x14, 0x3) 03:33:37 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:37 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xd, "5da3e36d7e766f42109fee0978"}, &(0x7f00000000c0)=0x15) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e20, 0x800, @local, 0x9}}, 0x6, 0x9}, &(0x7f0000000540)=0x90) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f00000006c0)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r4 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000400)={0xfff, 0x4000, 0x80, 0x100000001}, 0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) 03:33:37 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x400, 0x400000) dup3(r0, r0, 0x80000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000"], 0x14}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') close(r3) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x39, "cd9be26f04e27a1eb6082411ff94786561ae360c5c2a9a0274e939eca2639986be3ba78b97273ddecd8ed225dcb4774e226842ede5b5b146b7"}, &(0x7f0000000040)=0x41) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r5, 0xd73}, &(0x7f0000000240)=0x8) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000340)={0x7, 0x7, 0x3, 0x200, 0x3, 0xff, 0x0, 0x8, 0x100000000, 0x2000000000, 0x6, 0x1}) 03:33:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) [ 301.164850] binder_alloc: 12895: binder_alloc_buf, no vma 03:33:37 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) r1 = accept4(r0, &(0x7f0000000200)=@generic, &(0x7f0000000280)=0x80, 0x80000) ioctl$NBD_DO_IT(r1, 0xab03) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000001c0), 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000180)) 03:33:37 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 301.289643] Unknown ioctl 8707 [ 301.294488] Unknown ioctl 8707 [ 301.312554] IPVS: ftp: loaded support on port[0] = 21 [ 301.329628] binder_alloc: 12915: binder_alloc_buf, no vma [ 301.330227] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 301.390158] binder_transaction: 5 callbacks suppressed [ 301.390177] binder: 12915:12916 transaction failed 29189/-3, size 0-24378 line 2973 [ 301.477301] binder_release_work: 5 callbacks suppressed [ 301.477310] binder: undelivered TRANSACTION_ERROR: 29189 [ 301.937586] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.943994] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.952261] device bridge_slave_0 entered promiscuous mode [ 301.979887] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.986329] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.993264] device bridge_slave_1 entered promiscuous mode [ 302.022112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 302.049336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 302.128466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 302.159658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 302.286934] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 302.294077] team0: Port device team_slave_0 added [ 302.321013] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 302.328364] team0: Port device team_slave_1 added [ 302.355736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.384719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.414613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.444563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.713562] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.720039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.726883] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.733310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.690906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.787219] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 303.878974] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 303.885200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.892784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.983181] 8021q: adding VLAN 0 to HW filter on device team0 03:33:41 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:41 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) sched_setattr(r1, &(0x7f0000000280)={0x30, 0x3, 0x1, 0x6, 0x0, 0x8948, 0x4, 0x2}, 0x0) r2 = getuid() connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'teql0\x00'}}, 0x1e) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000001c0)) fstat(r0, &(0x7f0000001740)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001800)={{{@in=@rand_addr, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001900)=0xe8) stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001ac0)=[0x0, 0xee01, 0xee00, 0xee01, 0xee01]) sendmsg$unix(r3, &(0x7f0000001bc0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000700)}], 0x1, &(0x7f0000001b00)=[@cred={0x20}, @cred={0x20, 0x1, 0x2, 0x0, r2, r4}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x58, 0x20000004}, 0x8000) getegid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x0, 0x0, {{0x3, 0x2, 0x0, 0x0, 0x8d14, 0x1000000000000000, {0x3, 0x9, 0x1ff, 0x9, 0x8001, 0x9cdd, 0x0, 0x0, 0x5, 0x0, 0x5, r2, 0x0, 0x6, 0x7ff}}, {0x0, 0x7}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) ioctl(r0, 0x400, &(0x7f0000000480)="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") 03:33:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000), 0xa) sendto$inet(r1, &(0x7f0000000240)="e45fd01a", 0x4, 0x0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) accept$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0xffffffc6) 03:33:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000003, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f00000000c0), 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="319c6e08000000000000003b02040047290567052d4ae0781b26c2c3e9c438a053ecf3fa7f71b578f4eca90b12d79e7f0b1c66eca24ca632a7403c7ede03db5b80aa433c9267fe1388a294fe4d41c31afa6d6f80b6", 0x55}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) 03:33:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) 03:33:41 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:41 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 304.588860] binder_alloc: 13182: binder_alloc_buf, no vma [ 304.611856] binder: 13182:13185 transaction failed 29189/-3, size 0-24378 line 2973 03:33:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x80000000, 0x100000001, &(0x7f0000000000)=""/53, &(0x7f0000000040)=0x35) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x3) [ 304.743446] binder: undelivered TRANSACTION_ERROR: 29189 03:33:41 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) 03:33:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x4, 0x99b, 0x1, 0x0, 0x0, [{r0, 0x0, 0x9}]}) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) [ 304.872342] binder_alloc: 13201: binder_alloc_buf, no vma 03:33:41 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:41 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 304.948377] binder: 13201:13208 transaction failed 29189/-3, size 0-24378 line 2973 03:33:41 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) sched_setattr(r1, &(0x7f0000000280)={0x30, 0x3, 0x1, 0x6, 0x0, 0x8948, 0x4, 0x2}, 0x0) r2 = getuid() connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'teql0\x00'}}, 0x1e) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000001c0)) fstat(r0, &(0x7f0000001740)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001800)={{{@in=@rand_addr, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001900)=0xe8) stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001ac0)=[0x0, 0xee01, 0xee00, 0xee01, 0xee01]) sendmsg$unix(r3, &(0x7f0000001bc0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000700)}], 0x1, &(0x7f0000001b00)=[@cred={0x20}, @cred={0x20, 0x1, 0x2, 0x0, r2, r4}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x58, 0x20000004}, 0x8000) getegid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x0, 0x0, {{0x3, 0x2, 0x0, 0x0, 0x8d14, 0x1000000000000000, {0x3, 0x9, 0x1ff, 0x9, 0x8001, 0x9cdd, 0x0, 0x0, 0x5, 0x0, 0x5, r2, 0x0, 0x6, 0x7ff}}, {0x0, 0x7}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) ioctl(r0, 0x400, &(0x7f0000000480)="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") 03:33:41 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x4, 0x99b, 0x1, 0x0, 0x0, [{r0, 0x0, 0x9}]}) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) [ 305.034124] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.058700] binder: 13228:13229 transaction failed 29189/-22, size 0-24378 line 2834 03:33:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x20100) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) [ 305.093560] binder: undelivered TRANSACTION_ERROR: 29189 03:33:41 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:41 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x48d) 03:33:41 executing program 1: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r1}) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0) getsockname$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b00)=0x11a) sendto$packet(r0, &(0x7f0000000a80)="2a11f1b5bd5a7b46ea129772e358a020f8ddb29fbd596167713878030a3f46ac45f2cbd24b4c0306fbf7397578535d5c", 0x30, 0xc5, &(0x7f0000000b40)={0x11, 0xa, r2, 0x1, 0xf5e3, 0x6, @broadcast}, 0x14) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x10400, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x1ff}, @in6={0xa, 0x4e23, 0x4, @loopback, 0x100000000}, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast2}, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x1000, @mcast1, 0x2cbb23a}}, 0x0, 0x3d6f, 0x8000, 0x2, 0x4}, &(0x7f0000000340)=0x98) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000640)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000680)={0x1, r6}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mixer\x00', 0x0, 0x0) r7 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'bond0\x00', 0x7f}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x28c4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000380)=ANY=[@ANYBLOB="00f32fa0b304008dc03724f4b53fcabea7dc380ceb996f0a186b68f115eff39a6489661700b1fb3f778cb32207", @ANYRES16=r8, @ANYBLOB="040c2bbd7000fedbdf25090000000c00010008000200b70000002800030008000500ac14141208000500ac14141d14000200697064647030000000000000000000000c000300080007004e23000008000500000800000800060005000000080004000500000024000100080008000100008008000200000000000800010002000000080001000a0000000c000100080005000100000038000300080007004e200000080007004e200000080004005a00000014000200626f6e645f736c6176655f30000000000800030001000000"], 0xd4}, 0x1, 0x0, 0x0, 0xc010}, 0x20000800) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='./file0\x00') ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000007c0)={0x0, 0x101, 0x3, 0x26c, 0x9c9, 0x1, 0x7, 0x9, 0x6, 0x401}) 03:33:41 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x501000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xedc0, 0xffffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6(0xa, 0x8000000080006, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) [ 305.424609] binder: 13254:13258 transaction failed 29189/-22, size 0-24378 line 2834 03:33:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 03:33:41 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x48d) 03:33:42 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 305.546138] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.607854] binder: 13269:13270 transaction failed 29189/-22, size 0-24378 line 2834 [ 305.647893] binder: undelivered TRANSACTION_ERROR: 29189 03:33:42 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x48d) 03:33:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$netlink(r1, &(0x7f0000000e80)={&(0x7f0000000080)=@proc, 0xc, &(0x7f0000000640)=[{&(0x7f0000000380)={0x10}, 0x10}], 0x1, &(0x7f0000000d80)=[@rights={0x10}], 0x10}, 0x0) 03:33:42 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:42 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x0) 03:33:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fremovexattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00') ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xfffffffffffffffd}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x7) r3 = socket$inet6_sctp(0xa, 0xffeffffffffffff5, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x0, 0xad7c, 0x0, 'queue1\x00', 0x2}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendto$inet6(r3, &(0x7f0000000040), 0x40000020, 0x0, &(0x7f0000000080), 0x1c) close(r0) fstat(r2, &(0x7f0000000180)) close(r1) [ 305.789912] binder_alloc: 13284: binder_alloc_buf size 24384 failed, no address space 03:33:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff) [ 305.867417] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:33:42 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x0) [ 305.911592] binder: 13284:13285 transaction failed 29201/-28, size 0-24378 line 2973 03:33:42 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400), 0xc) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) r3 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x0, 0x200) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000500)='/dev/dmmidi#\x00', 0x4a6b, 0x800) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x71, 0x2, {{0xa0, 0x3, 0x4}, 0x5}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e24, 0x3ff, @empty, 0x591}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r1, 0x0, 0x0, 0x9, &(0x7f00000002c0)}, 0x20) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x0, 0x5, 0x1000, 0x4, 0x0, [{0x0, 0x0, 0x1, [], 0x6}, {0x6, 0xfffffffffffff2ec, 0x5, [], 0x401}, {0x1000, 0xab25, 0x0, [], 0x3}, {0x100000001, 0x88d1, 0x94, [], 0x8}, {0x20, 0x1, 0x3, [], 0x5}, {0x7f, 0x1, 0x7f, [], 0xf846}, {0x4, 0x10001, 0x1, [], 0x1}, {0x3, 0x449, 0x5, [], 0xaec}, {0x0, 0x3fff8000000000, 0x1000, [], 0xffffffffffffffff}, {0x2, 0x2, 0x7fff, [], 0x3}, {0x7ff, 0x4, 0x100, [], 0x9}, {0xfffffffffffffff9, 0x0, 0x100000000, [], 0x3}, {0x61, 0x1, 0xffffffff80000000, [], 0x8}, {0x8, 0x9bfc, 0x3, [], 0x4db}, {0x0, 0x0, 0x8}, {0x1, 0xc0, 0x5, [], 0xa0b}, {0x10000, 0x3, 0x7, [], 0x100000000}, {0x0, 0x8000, 0x8001, [], 0x1}, {0x4, 0x401, 0xffffffffffffff7f, [], 0x7}, {0x0, 0x7, 0x1f, [], 0x61a4}, {0x3}, {0x81, 0x2}, {0x2, 0x4, 0x1ff}]}}) sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = dup2(r1, r2) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000480)={0x0, @local, @rand_addr}, &(0x7f0000000580)=0xc) sendmsg$nl_route(r7, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001c20000000bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="00001003080005000400000008000800", @ANYRES32=r9, @ANYBLOB="0800040001040000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 03:33:42 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000140)) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xb0, 0x2, 0x2, "cf10a61a9813fec6ffd32b796df5873b", "08fb961bdc2d7cd2e4b9bb4bf9474652585806f932c5b96500e26de2bd139ac37813b2b81dcc06bd9d6dae69be4cf280301677971789241466f43ad5191cd7d25c3fda6024f5acee3af8e0efd8e81d7aa5da6afc940231e1cde7b76103e8e6630a3bb04bd15e7c056fd8ef96e0706505c54c011c1207aa573ebc6b9da27412d34462ed32065765ffc30424aaa6c1afee7093c62a75b4dbdc98352f"}, 0xb0, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x7, &(0x7f0000000180)=0x4) 03:33:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x402002) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}, 0x10) 03:33:42 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:42 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x0) 03:33:42 executing program 0 (fault-call:5 fault-nth:0): rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:42 executing program 3: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000700)=0xc) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x5, 0x400, 0x0, 0x100000001, 0x401, 0x0, 0x3, 0x0, 0x2, 0x401, 0x3f, 0x0, 0x3d, 0x200, 0x7, 0x7, 0x400, 0xffffffff, 0xd6, 0xbd, 0x4, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x9}, 0x0, 0x1ff, 0x2, 0x5, 0x1, 0x1}, r1, 0x0, r0, 0x2) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)="0a5cc8d071d1e799b82b9b4db89e0207003106007140706da08627a2a93ad605ed0f9a17d5a3f98845f6528dc7b358337cdb9bca5a080d7a1d4ec54472ef319d40f52296") r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00)}}, {{&(0x7f0000000000)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r4, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000001, 0x101280) openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r6, 0x0, 0x20, &(0x7f0000000200)=""/221, &(0x7f0000000000)=0xdd) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) [ 306.190266] binder: BINDER_SET_CONTEXT_MGR already set [ 306.206230] binder: 13325:13328 ioctl 40046207 0 returned -16 [ 306.217662] binder_alloc: 13284: binder_alloc_buf, no vma 03:33:42 executing program 5: unshare(0x20400) r0 = memfd_create(&(0x7f00000000c0)="00000600000000000000", 0x0) fstatfs(r0, &(0x7f0000000380)=""/120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r2 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in6, 0x4e22, 0x3, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x0, r1, r2}, {0x5, 0x81, 0x9, 0x0, 0x3, 0x4b6, 0x3, 0x2}, {0xfffffffffffffffe, 0x10001, 0xfffffffffffffffd}, 0x1ff, 0x6e6bbf, 0x1, 0x1, 0x3, 0x3}, {{@in6=@mcast2, 0x4d3}, 0xa, @in=@multicast1, 0x3502, 0x4, 0x3, 0x1, 0x9, 0x2, 0x101}}, 0xe8) 03:33:42 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 306.246572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.261489] binder: 13325:13328 transaction failed 29189/-3, size 0-24378 line 2973 [ 306.274463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:42 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 306.323502] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 306.350691] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 306.431122] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.464520] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.478715] binder_alloc: 13350: binder_alloc_buf size 24384 failed, no address space [ 306.511477] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 306.563221] binder: 13350:13351 transaction failed 29201/-28, size 0-24378 line 2973 03:33:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 03:33:43 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x8800000) [ 306.611551] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.631191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.638171] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 03:33:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000000180)=""/198, 0xc6) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x7, 0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:33:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec947a1333177e24b5ebadf404", 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = getpgrp(0x0) ptrace$getregs(0xe, r3, 0x213, &(0x7f0000000000)=""/105) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 03:33:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x7fffffffffffffff) 03:33:45 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x11) 03:33:45 executing program 3: r0 = inotify_init1(0x800) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) syz_emit_ethernet(0x35d, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000049fe09004786dd60ac77ec0000000000000000000000000000ffffffffffffebff00000000000000000000000000000000907800000000fe8000000000003f00000000000000008a5937d0251340efe307ef7168d53194c6e6fe42c7b8f1d61cbf512f67bb6ffa6bc46e93574c0974ee8a864733d40a5532f3835d3bac714d651079d6a7d8476b6f0e3e8a525755be7a38977819ce92518de58968b2ce1c89cce32c633caa41ce3401afb80bf205ed72a0b8de64153fa4c3d165f92ef2d5"], 0x0) 03:33:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3f) ftruncate(r0, 0x48d) 03:33:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x14}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x3b, &(0x7f00000001c0)="899594ff2a8bd6ac673efd4672c823b083b1396deac21fe31f62af15b4dd554ec106ccc775907fba4e8ef9add0081fc87c0789f167d96400000000"}) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) 03:33:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xffffffff00000001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0x400}, &(0x7f00000000c0)=0x8) 03:33:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000cc0)=""/246) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x12, r0, 0x0) dup3(r1, r0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$binfmt_aout(r0, &(0x7f0000000dc0)={{0x107, 0x10001, 0x9, 0x241, 0xba, 0x200, 0x110, 0x76}, "c20dccfc50fe0c71ceb4eb1693b8a8eb83f0244fcedd22420f62d171c660c6cd7b64329fa62f1b5c751e752926b3a9d21bbfb265c72c23358481c52c38c4ea8ebcb959764eca5869d29f3fea300dd0fda4751fcc335539", [[], [], [], [], [], [], [], [], []]}, 0x977) [ 308.902410] binder: release 13398:13400 transaction 52 out, still active [ 308.926220] binder: undelivered TRANSACTION_COMPLETE 03:33:45 executing program 0: r0 = getpgid(0x0) prlimit64(r0, 0xa, &(0x7f00000000c0)={0x3, 0xff}, &(0x7f0000000100)) rt_sigprocmask(0x0, &(0x7f0000000040)={0xd6}, 0x0, 0x8) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000002700)={0x0, 0x0, 0x2080}) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) lookup_dcookie(0xfffffffffffffffb, &(0x7f0000000000)=""/5, 0x5) ioctl$BLKRRPART(r1, 0x125f, 0x0) 03:33:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000000180)=""/198, 0xc6) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x7, 0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:33:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 309.018854] binder: send failed reply for transaction 52, target dead 03:33:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 309.113688] binder: release 13416:13417 transaction 54 out, still active [ 309.134846] binder: undelivered TRANSACTION_COMPLETE 03:33:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0xfffffffffffffbff, 0x40) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x20, 0x3, 0x4}}, 0x14) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) close(r1) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000180)=""/66) [ 309.199122] binder: send failed reply for transaction 54, target dead 03:33:45 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0xfffffffffffffd86, 0xfffffffffffeffff, 0x6d, 0x8, 0x81, 0x5, 0x6, 0x0, 0xdaf, 0x7f, 0x7c, 0x1000}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x6) 03:33:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x9) [ 309.304528] binder: release 13444:13445 transaction 56 out, still active [ 309.335165] binder: undelivered TRANSACTION_COMPLETE 03:33:45 executing program 5: r0 = creat(&(0x7f0000002200)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x5e4a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x9, 0x9, 0x9, 0x1f}) 03:33:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000000180)=""/198, 0xc6) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x7, 0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:33:45 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0), 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) keyctl$describe(0x17, 0x0, &(0x7f0000000240)=""/140, 0x8c) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x240982) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 309.408250] binder: send failed reply for transaction 56, target dead 03:33:45 executing program 3: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000240)="42805da0124fefeddc0f01eea873fe19fa380f38211af3f081768cc8000000c481b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1a8f0818ef0d0e0000000044dbe271fb0703") fcntl$dupfd(r0, 0x0, r0) accept4$alg(r0, 0x0, 0x0, 0x80800) getpid() getresuid(&(0x7f0000000200), &(0x7f00000003c0), &(0x7f0000000400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) gettid() fstat(r0, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f00), &(0x7f0000000f40)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001e40)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) 03:33:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1a00) [ 309.545569] binder: release 13466:13467 transaction 58 out, still active [ 309.555901] binder: undelivered TRANSACTION_COMPLETE 03:33:46 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0), 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 309.602749] binder: send failed reply for transaction 58, target dead 03:33:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom(r0, &(0x7f0000000080)=""/241, 0xf1, 0x0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) ioctl(r1, 0x3, &(0x7f0000000340)="30a12965c1670bbfd00a9b18643d2287e2208c9f64976aebe961fbadd296286bcb710fef79775137e6df156eef0f0c403755aee6f0aed406f49da02c5ed2e97148fde4c13b910312cd29776ce532ad614f05039f7e906a96f328fa07c23a205af859de38502a79759e31df222f97e0101deb60b7596cf9d1c4181f231e9a6a2d9128fd") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT2(r1, &(0x7f0000000300), 0x6) ioctl$LOOP_CLR_FD(r1, 0x4c01) [ 309.693871] binder: release 13478:13480 transaction 60 out, still active [ 309.705595] binder: undelivered TRANSACTION_COMPLETE 03:33:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/201) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000003c0)=0x8) 03:33:46 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0), 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 309.764942] binder: send failed reply for transaction 60, target dead [ 309.796257] cgroup: fork rejected by pids controller in /syz1 [ 309.866997] binder: release 13492:13493 transaction 62 out, still active [ 309.878894] binder: undelivered TRANSACTION_COMPLETE [ 309.975280] binder: send failed reply for transaction 62, target dead 03:33:46 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x200, 0x74b1, 0x1}]}, 0x10) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) 03:33:46 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0x10, 0x0, 0x8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendto$inet(r2, &(0x7f0000000980)="f65d80ad58f6f3df28994b76a7934d84bdff5ead238edd4ddf06840953530d04b1d229d5535016324bb33668e2bade60bdbe838b77a093b4e22d84e19c69dc4e1b2ec6cb0f8b7d342acf35d355148685e38c2e4c3d60cc9354877312b48b2d7c6cc10a42bdaf3dfd1dec877878ac", 0x6e, 0x4000800, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/101, 0x27f}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000200)=""/76, 0x3d4}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000800)=""/47, 0xfffffffffffffffd}], 0xa, 0x200000000000000) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000340)) sendto$inet(r0, &(0x7f0000000e40)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f732569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed06a96b23834b6f6ca6b8113baf4cf30347fab7ffc30aea99872cc0dba03b0756347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508761b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f545c1372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc07317c4b198c05e7d1190c0416d102bcfc26ca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8c37b49ba1e102cd91a187d444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec6830c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda477836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e91592d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f2000000000000000000000000000000000000000f3978", 0x481, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xf, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback, [0x0, 0xffffffffa0018000]}, 0x10) recvmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f0000004380)}}], 0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}) 03:33:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 03:33:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) signalfd4(r0, &(0x7f0000000080)={0x8fd8}, 0x8, 0x800) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd255766070") timer_create(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x1, @thr={&(0x7f00000001c0), &(0x7f0000000200)}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) 03:33:46 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="fc6788b2abd0ae4ae91dbf843b0bde804eb6f2717dce9fbd7f055700000000000000000000005e9c4a3b263605a83440cef82fb9aee97665561fb7c165dcb2c0aa59a1ef65ee8b8e63efb5b0a699df3cdc89e92495ce5d3a8a1dbd7ed7ef8974afd77186e1c5ea9eccc2ebd7c5719dd08d608d3c2b739cb31e7c9007e509aa76e6b5c75db25e2772a2c1e35cc7affc0001000076edc320123c3fef0be407157f5c163e13c50ff38bc3467c226e1317acab60df4f6d674a9837087e84b28a38340f444bcc7d8f0951d1267a53226d8cfb9e260df3afa1254c010e2f3e7307aab8172a18a9d7eef4513e9471b13dbff677d8"], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x401) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80000002) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) [ 310.275654] binder: release 13500:13501 transaction 64 out, still active [ 310.291502] binder: undelivered TRANSACTION_COMPLETE 03:33:46 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") pause() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x1ff000}) [ 310.377139] binder: send failed reply for transaction 64, target dead 03:33:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0xde0, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x17000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040)="10000000020000000000000018000000", 0x10}]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x7f) 03:33:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 03:33:46 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0x10, 0x0, 0x8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendto$inet(r2, &(0x7f0000000980)="f65d80ad58f6f3df28994b76a7934d84bdff5ead238edd4ddf06840953530d04b1d229d5535016324bb33668e2bade60bdbe838b77a093b4e22d84e19c69dc4e1b2ec6cb0f8b7d342acf35d355148685e38c2e4c3d60cc9354877312b48b2d7c6cc10a42bdaf3dfd1dec877878ac", 0x6e, 0x4000800, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/101, 0x27f}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000200)=""/76, 0x3d4}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000800)=""/47, 0xfffffffffffffffd}], 0xa, 0x200000000000000) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000340)) sendto$inet(r0, &(0x7f0000000e40)="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", 0x481, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xf, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback, [0x0, 0xffffffffa0018000]}, 0x10) recvmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f0000004380)}}], 0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}) [ 310.487765] binder: release 13518:13520 transaction 66 out, still active [ 310.522426] binder: undelivered TRANSACTION_COMPLETE 03:33:47 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 310.594521] binder: send failed reply for transaction 66, target dead [ 310.635702] IPVS: ftp: loaded support on port[0] = 21 03:33:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r2, 0x403, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x80000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe33}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) fcntl$setpipe(r4, 0x407, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) [ 310.670845] binder: release 13536:13539 transaction 68 out, still active [ 310.684161] binder: undelivered TRANSACTION_COMPLETE [ 310.753101] binder: send failed reply for transaction 68, target dead [ 310.827349] device bridge_slave_1 left promiscuous mode [ 310.833752] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.881268] device bridge_slave_0 left promiscuous mode [ 310.886890] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.958855] team0 (unregistering): Port device team_slave_1 removed [ 310.970637] team0 (unregistering): Port device team_slave_0 removed [ 310.981864] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 311.041284] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 311.116138] bond0 (unregistering): Released all slaves [ 311.892103] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.898632] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.906277] device bridge_slave_0 entered promiscuous mode [ 311.953220] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.960140] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.968042] device bridge_slave_1 entered promiscuous mode [ 312.016444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 312.063884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 312.207393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 312.255888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 312.482488] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 312.490219] team0: Port device team_slave_0 added [ 312.536318] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 312.543790] team0: Port device team_slave_1 added [ 312.581341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.616945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.647687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.698592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.038010] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.044488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.051346] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.057842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.065791] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 313.846328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.052513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.145789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 314.238648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 314.244779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.252728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.343576] 8021q: adding VLAN 0 to HW filter on device team0 03:33:51 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = signalfd(r0, &(0x7f0000000000)={0x8}, 0x8) ftruncate(r0, 0x48d) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x6a0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @multicast1}, 0x0, 0x7ff, 0x5, 0x9, 0x3, &(0x7f0000000040)='veth0_to_team\x00', 0x9, 0xfffffffffffff4e9, 0x6b6}) 03:33:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 03:33:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x8) accept4$unix(r0, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000700000000000000700000000000000004000000000000000000000000000000070909040000000000000000000000000000000000000000000000000000000000000000000000006bf21679000000004000000000000000ff7f000000000000c30702c600000000000000000000000000000000000000000000000000000000000000008000000000070000000000000001000000000000000807ff040000000000000000000000000000000000000000000000000000000000000000000000000600000000000000005200000000000008000000000000000030030600000000000000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000ee000000000000000400b800000000000000000000000000000000000000000000000000000000000000000000000000a344000000000000feffffffffffffff00000000000000008d0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00000000000000020000000000000000000620000000000000000000000000000000000000000000000000000000000000000000000000"]) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000024b000001000000000100000000000000"], 0x14) 03:33:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r2, 0x403, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x80000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe33}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) fcntl$setpipe(r4, 0x407, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) 03:33:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x2, 0x4, 0x4, "2e4069acd7d2cde6ef7f966727f00a6862bc3761c366cba092c22ded646ce33dfb51565787f71a76902d36aee59fca722796d3dde87d4b597cf9c8b572c1527a308e468ab7130363575a0330cd3d747ce3e6f7b8ffbac95d4b52f501865ccde8d52a5d3d1cdbc9aa4197e0fe9440befb35dbaa5fa3677b3026cc74cfde07acfa6024"}, 0x92) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) close(r2) epoll_create1(0x80000) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) [ 314.938315] binder: release 13815:13817 transaction 70 out, still active [ 314.945234] binder: undelivered TRANSACTION_COMPLETE 03:33:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="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"]) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x2, 0xc}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) open(&(0x7f0000000140)='./file0/file0\x00', 0x3, 0x0) 03:33:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:51 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$int_out(r0, 0x3, &(0x7f000000b880)) r1 = socket$inet6(0xa, 0x2, 0x5) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000600), 0x0, 0x4008080, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f000000b680)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000100)="5ca903f9885ce79d656a", 0xa}, {&(0x7f00000002c0)="b8aa4bfef37e9a840b39aff137377e7eb307b9dee3caa9d1ff9db7fbb0f39a547f86b1b78cc8caeb50dead7586dfcfd62c2854a17c33e2b726d7d9ace05a1bd89f380013f8c5f8413a46ba2f39e9ca228c6d86c9de19d89cecc8460e977f5342f21dcebf23bb10b9f70e0caac6db49fd5e2491fc59179e23e094d48432268c8f50e1539d035483cbf61d04b4cc7d59354e5d20b0b90ed6eb1ee5891c6e6b165ab16715c1566fce62052f956fb0378245c5f0aaa9b4c558e7995c8506e1ebd59ff0ca8c973770f50c720fba4fad291f315313f628776672a80da8254ae11cba451ea81f2a6a09ca", 0xe7}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="9b36112154dc2fe530bbcc8d320b46f644e61954256d65774bbd859b81a4f149e1c1bd0a0ca7de0c94399ab19bdcf968b4ec1092d89169bd477a9e8c0cc7e2c5b3b9cfffddbaa8b8f22e2c13f017cc276cf667bbda6fa83482f545b3b016157e6e02372ebbc933fd217a201f6a3483d1137efb19811800b6ab6c15f0be298d5412a0695b197bff02fe1d0a64dd83531fb07d1e63d26b75e2c62f1842174a8727a68200de85d8612374722d9a80f49143ed3d02ed2eae39c5ab9b2dbbc99a42dad2163454c12720cc68dff52aef98055acaea37c7f286694a8fb910db3358c3b35d8a54ca48a9ffd73668e7d46799be661055fe778421", 0xf6}, {&(0x7f00000001c0)="da563045b4af19c78af3efb72b8def2bfd799c4a347a1f48880c0f6ce1b3d9e096123c1e6958e938f9fa566addf3068858fe68b7d3ae11e1ff3acbc0537b5d5787c9f690c495b05e7c1b78bec1f3ebcadbe4c07840c66f9c4208502da584d109e98c0272405ed1258759957ee966012cb59e2322dcff", 0x76}, {&(0x7f00000014c0)="feb704ca8f16f98f12ad556ff0b602ce98e6d81561fd49a60cfbba2a26abf1ff5fcb30770a8267912cafa57942a848fc34008bbba49dcc8b66759114dc8fa13eb8fc38149bcb4e3eb8b0bd5ab07a", 0x4e}, {&(0x7f0000001540)="a1e0b81922b6dc371d683e747894ae53141ab3f6e174652f3fa4220f5ef7aff57233302a2ee1e9baa98403b32007a6dee30892e76d8fa6aeb59e3b022bbe80eebc46737380315c6abea9b3edc1344778b7993170f6444d64d5e8f0d7c25c2fdf25f3e062c17c725ce53cae36ef0dc60a255f66625ba8bb2019722fef0bb1d00fdf7e1d31", 0x84}, {&(0x7f0000001600)="cfbcc7a6c62eaf6c0de16e0bf337c0aa9833a90e3662a5ae635c2d5c8bb48cd676bf0eb937a3b83edb7e03e360b1beb15120c81326e1af12580a5ee2d6244f9340ad894fd7a4a31260707841d2a978e73318c29cf0d965c1ff3c85d92f", 0x5d}, {&(0x7f0000001680)="a51cc771a0af9fb0b80e6f33ef2792123f168ba7924a91d96d74c66b12bd466f5d22e5402bc3f893f405bae06fc58ecccdf647f5928718fe096d8f19b6f4ff7ec90dc3f841c0db1512c7dda812f15df92cd2f40b2b5aa3088464bb69b65cdfbc402fa92f7eef69c16e1c6b80391e1b5e173458eb8ebfd7689c39deb9fed8d63a77536ded4aa1ad93f7d1ac5d2af27b8c4e903d", 0x93}, {&(0x7f0000001740)="7a629052cf5f3e98c48f9088b23195ff60b04794019086a8451b8d147176c08eb8a25cc40cfbfa1f353946e268232d7feab1bdd03de0356b4a9e12952867a3709cb295465cf7eae80abd1a09f3762507e1e9dd195dd9402eab198ad0721fff3521bf8a1f316c2d9d855ca8ab59890b8c1b6d112ce20aaa39e63c96175d2542c536f84537f7d6351cdc313661f38b94e7998f9071", 0x94}], 0xa, 0x0, 0x0, 0x840}, 0x81}, {{&(0x7f00000018c0)=@rc={0x1f, {0x7fff, 0x7fff, 0x7fffffff, 0x5, 0x3, 0xc4a7}, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001940)="9bcc985c04bc785735059a986dfd895aa916caed624ed485a2effb537c7f72cd64236e2a7cb6edd59a733e05791c767d4c4151a2062a02d68b0cdb3535d293f020693a584599e5b6cccd3e72442ec3b45d54804e6d8e077510b804b0d937c85e37f4d63159f5f67df13f6c990f2ed240e68aafc9d7b1b0a0a1b2dea7844f445e56b136a6d8f5acbe5292a42bd68c38e381d7d8f1c95c368f44058b7ad65177394eaea22ea0f82a25a4ed471d8f52ba90ebb13b7fca3f886dbf360f5dfba5d195c8fb041277491b5888f3ce2e51fe7519", 0xd0}, {&(0x7f0000001a40)="f19aef54157ad19f8d06a602687a9a41f300f30eeec556a09eb38b231146064586b54f1414964db12b48f5e027b4403a751e85d172a9d8f1bcdafa64781b2ca605d0ca288a147c74f7ba523eb51da2aabff31d2e444a31bcc849c37405557c2178980cd0a3c99af108133c15b83d2857646ae3d315c8e90507072adebe4ac371bebc00029c12ac897fa1ed5e41a4c616ee6ad90f40932c171be43222571e0e5d726b38aef556c779e4ec7c1c1de1931da69b830fdb921d3e2c37c14fa5f3d013c7f9a754ea57162134b388becee3e2881f85cbecbd378a20198f48c737c70651fef3adf42544d9268dfff875e810d662f950081fbed90ad522", 0xf9}], 0x2, &(0x7f0000001b40)=[{0xa8, 0x84, 0x100000000, "b1e83745759a214e2dd70af7c9944326ea295e78c6019e9b59cb12315f3b8b4ab2494a0d142f9e627457b3975abf4d7d8a4843a51a23edeb3980ad165c068f8509281dcd86f95fb4bc37770e20a99660d491aa4b2736e3b032258c0e390cfdb6cb854f6a301589dcf5ebb37ca66dc04fc61e779a42b642fa386d02ed6519f545ad74c5eefa798be31f767b355738a1ad44f6"}, {0x50, 0x0, 0x1, "3f5eb1308f7f939b5700867a8c39da29580d496894cdf30163fa685f333624d19e5a9be76e5274ffcbb26f0f2d295860df5e21b896886663763c1b2363"}, {0x60, 0x109, 0x1000, "58a6ff2c9e38abf4e92ae565b17235bbd2385b72bfa03aab00a8c170b7b15a71378263263c0c869005929298e5be87756f28f772f93ff73341870d99cea0c17ad5b114b041c9fac43c570429d267429b"}, {0x30, 0x103, 0x401, "f55dda86ed153ae31ef2feb1c9c96fe4fa5db45a2693e6f23d"}, {0x1010, 0x0, 0x73d5, "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"}, {0x108, 0x105, 0xa5a, "36a4336ac8954a34abaf21613816b24f9df00e729324b7029d04a868add70ad59c7dc16d91384e0e4210a5107a55a8c6fcc265bf483d3bf13767ceb4c88b50d61441b292f8bed8f40072ec437f67b348db41fbdb195b40247d7fafc386ae5c4fd23d4743c3ef48159cab50d90e9c6b840aa4735c90d9939052a1d3f307c0fee9bdcd08b81561eaf6bcfc260c35c4838c18e5b38f963b5a9ecf35809419aca1f6932bb88c5220e35a6fc1907481ac4ecc7bd3d450b914387fe19086837c052b41b6fa4160363e618c402a58fa8c65dfe38d39a3067652725da9e40438bae60d9025fbc6916972231b4c3c712bc57bdc42c27e10"}, {0x110, 0x84, 0x80000001, "1da256a134632a905c100848680621a604cd71ef01a094f02ba3dd4ace0684e803b223d4df9892b7ace5b67883cf2f16cdf691ddc380448eefba234227a768210846eddc008a99d19bada49d062e67d52f44b67b40d3af07d7b284a4eb76ada53951e90f2ca4507ee8db4e9860e8de862628f0e0c802dbb607582655f55c876def710cb9eef18ffe38f15437cd2aef935de20fb7ab9be2ea03d1c8adad6a2ce875cc3883dd384f8555c617a33e7916f2d5dd0e6d343e608236c84a7efe693709edbc1cb4f1556cbbd9e1bd6c14d78a55d2e820a3c5d4d797e01346c5f2b9ab1370dad1e0f61b4a1e11b6a0f98d99f0d96d56e6512632e4e808"}, {0xb8, 0x112, 0x4, "ebf325f294b9721758921cda8016f564a3b93e4b9d6bcfa91b8e99d0fd2278fb8f4802b6b3fbbdea4dba716eb1de816723be733b2c7e47033415453610486eb670a340a22966da200c3351ccc2a74d0650c4812109823a0aae5d4c7a3131c866e9e9e50969f93b8361a606248c5ff4d641f782c0c9078185dff6010dc0e95cc3a5b14d5a3b29c54a69cb6670b23033ec337178362ecbef705923ec95b63f6a7123c149a359bade"}], 0x1468, 0x8810}, 0x200}, {{&(0x7f0000002fc0)=@in6={0xa, 0x4e20, 0xfffffffffffffeff, @empty, 0xfffffffffffffff7}, 0x80, &(0x7f0000000240)=[{&(0x7f0000003040)="11822f004c2c8291601b97893e90b6295cdb35c28d9d106dd2277d2ea088bf846f8c57a5bde1eb208da74592cf00829ede7952c8437838f1df6553a5426a7bbf44de07cd3854a8df1699e0ac57ab5ee51a748afff710d374882635dd060634324e7909265966ce52f22c54be6ea762e950ddad509a9440a5400bb2ed8a30348042262412752d0350423ac6df49a4a785", 0x90}], 0x1, 0x0, 0x0, 0x850}, 0x1}, {{&(0x7f0000003100)=@in6={0xa, 0x4e24, 0x3, @empty, 0x6c4}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003180)="30238ddfeda0693291e92be3e88c9172ce92ba7621c934fc1208c978930d5f52536be58420ec6495f9ab316c63a82f2b9ed20b311a603ad8b0757c6bf86ba6af454c4e9b3288e3588cad3502bf2869f7df79f51599b14e81a08068f2a16350bb50aff56b4d4761c43ec53993564abdd7fe0ff2fad80c9dbdbe11ad6bd4842a9aa49a1b6fde6eb6dd3efc89908df6365a166e40615e1f6c14b19ae1aef6c1bdb6a0eeb395784f24b9f10c6a123ed5c62d3339a5b7d7e62a4e99971bdcf95f5bece305c21554", 0xc5}, {&(0x7f0000003280)="35c5b6c8fbfe234c9780a19475245a73d7e09729cdc0202bc250bb44", 0x1c}, {&(0x7f00000032c0)="d1c517810eaed1ece6619099308e8258a13d74b77fead43f9e5e698ef735d71e5cbd93bf79214d4499d67892434f91e10b5bf7c34bf01bdd5e3475dfc0c7e64a55059443d426f159da8384344b6e09d16dfef2e7b4ce09ae54b8fec6e17311e3faa1b7f7014aee6cb46f2ea81141e4d53e93b572806b8a8edaa90fade2480b2985b06c70d84bc44fe671901a668f0f91051ef8a33cd70c3beaa9df4043080b6b94514ebb80b19aeaefc217dcc38a331fae0be8945c04284e4360bafc39c2ef31ef43b1e60d318721d94e2a2c444ba1abffefb39a0723aba7eeab62da2e775c56b6a63e55fc", 0xe5}], 0x3, &(0x7f0000003400)=[{0x1010, 0x112, 0x80000000, "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"}], 0x1010, 0x20000084}, 0x100}, {{&(0x7f0000004440)=@ax25={0x3, {"effbf806d34838"}, 0x3f}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)="96730581a2f4ba5901dc53ba2d79df3338b75911dce3b7ecd481961fd25496a0a61c7e09914d2eb0d7adde703099f2f01b1c304a9fd565e10390037852c600e16b66891ee6c9", 0x46}, {&(0x7f0000004540)="66a6f5df82f979240c8e90e97946968cb91651d34a7d0c3b784f871d727082fcc6ec7ee305b979f0b7b863e29b490df4549195ee5e2abbf180", 0x39}], 0x2, 0x0, 0x0, 0x24004000}, 0x6}, {{&(0x7f00000045c0)=@llc={0x1a, 0x30e, 0x7de3, 0x8000, 0x0, 0x400, @broadcast}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004640)="50470e48addee94052105a7a522f46bb1c077f0383ea71d623254f2bf1477200a531795ec99f157e9b82b56817ef95c3e770326446f2f4806de80af1816561e3e3b8fa6ab115fd43ab094094ea18c943de1e988d2421a749125041e38a2d3e459b1afe1d77479acff4a32fb3927ee1d4de471a44591940c54fc8287619f03470e8cf1abad49bf564e064bfc5f66f541418b999ec36f08458a991bb0bb4bf76", 0x9f}, {&(0x7f0000004700)="447c6051ef544e02756d7d7b99ebcd262116a2c1ead1dc0a6ef92a382c77ee3a04888e6c06665483f640843ae137cc9a224d9a978b39f9c6a8e8b869ee23b88db3691f5f63ea83791f30a6575db5c7d4b898c8dd53c8011d7cdf255e8cb067ed6f117f92b3aa18c8ecbf21d0b7033726a21af9f79c971043fdb7b83a6b344c714a7e0e5c792931a3fecc438e6fc7380febfa05de461453c5934ea9a4d33eccfb2e8089e7e7b2939012eb9ccf4a65f9", 0xaf}, {&(0x7f00000047c0)="f1f76dbc25d036eef201c1aab47599c6a01232a0f885d7d5a0c3b1f6941481123afa9d3679f5ae5b9ef7b1fec85c4456ed0d46f2f70991f4a1ed03ac611a87f18d70c84f54dc5dc6993ea77af10f40539019612f44ef282e1136616b4321b020d01a7f6933823a2cc68f587ca2bafaa3adc1933f677cb08b7833c979a69e12b167ff9ca059459f1371cfd9b69dae9eb35113e95139db320e71d650b89538c7190f153ee5e3fd9d2bbe3740d6fb5e6072ae19b19e450e58f52fad7cfe21eaea35fdfd75b86491b9a37784b3534d441af7ab8fe6fac1cb347dd73f92baea2ed42d9fa7449648468bf40d8863b3130a723139a82a", 0xf3}, {&(0x7f00000048c0)="de15052798ccdb394573d13c938fb55787e033986f9aad078e", 0x19}, {&(0x7f0000004900)="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", 0x1000}, {&(0x7f0000005900)="e301a8129cba5f0c", 0x8}], 0x6, &(0x7f00000059c0)=[{0xc0, 0x11, 0x1ff, "92d09c884ceeae927c25211305974f5f287d4f11d1854c07e57f994fa3a4612c339bad4328b0b63cc0fc118b043c7855b426d8f5a0e91cf5d6eee5129f327085e65f8d5f225beae989fa31c57878c9443c80d0a1cd044ae7c627deaa3996f690a6f8d8c8ae9f46709ebce0c49f4cc13748d9cbf7a8e136f05343ab66172ccae4ceca07d81cc44c4a96f0734dbc157c2f1c7d6b99e91c398a50a23f3489f0662b8942cce586b8ea50df"}], 0xc0, 0x20000000}, 0x1000}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000005a80)="4471c512bdb50b8a0de7dc4965842ab5d4ec1b1d509ebe6347ac83dce0ccd2d7dcf99b1b7dea552759e522c2192c71e87101a17dac15cd39fc902c8f0cd4b1d41902a71a22c25cd9f3343941f1f73d4aba556f358e665164b64f46deb121bedd500ff5cf08e338a0a1793e0dba653fe18b9420b872da05f22ed9fcfac5819d9491992f41c5ed2bee64db5f6854dc6e91b80677837568e6699387345a6692", 0x9e}, {&(0x7f0000005b40)="1587a3756a81d0f0924afdd4fee752b78ec0439bd5655f785499f14dac64df4f10174249543b293399cf62cf61ff29bdb107e24daf9c751ed2af7a2273bfcf1f2096017c5fa2e34654e7ebf21a502a8dc25752749f71c63e2b93b592ee74e39d481ec8a907b3d91c82f7aa3d50897bf452e12d56e711cab4241437439ea0b12ef1d7b73c50a7d3ed4628cd7b6e3b70c49f4be12742501d7fdc", 0x99}, {&(0x7f0000005c00)="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", 0x1000}, {&(0x7f0000006c00)="8a6480f1db73c208e8538819b1d22d477004e34b8e41ae187ef01e3054a46faf6b1ef566fa3deef9b340a1331b7a3ac46afd0b6d169490e483f7e7e030431c9c2ebd9cc5beda9b1c50744bcc3e8cf210d497da60536becd927d95feb6ba10a971bfab19312c955401baaa3fa66", 0x6d}, {&(0x7f0000006c80)="c23a12439b35fdbe9736d379207af1a543f1b87fc2daf7622c61b0bf25b13bfccc7c4e7a9a24c8dc40b3648fec5d96593cd4d604d85063d1db33c9427cd245592b2694682c2975d67a888c40ee34d13c8950398fec3723b1015425319a424b33e9969be055c94d1d697db91164354dc19a5a70b250704f6f8b18ddab97c4cc31304773b20fcff9727c8b458e64a53452844510f4abebeb116537ff30f5f3704b271723067f1a47b4cbae847d0c2bf146f6f32a7824034e48c9beb8791f3833157e86310707fc2c5396b88f59deb06c24fce7735b4fce22b7e938a90d71781d729c21b4806b", 0xe5}, {&(0x7f0000006d80)="4fea9cdf61d056fb59a70bddbd83264e8366a7515406ec2cd252700eeaf770d1acde96cf9fcca95f0698aad326955d47980fe6a6a828584f161c392cc7e6f8b8a6dc4e89710183d45827dbdbf4865abdecb25f483a14bc2e1505cd00867dddd6b604a0b74350e70a0a445d", 0x6b}], 0x6, &(0x7f0000006e80)=[{0xb0, 0x1ff, 0x100, "780fa7007f420a3da78fc9ef79425a20432923735ab8a55f3aa54ceb9500c73a11415d3ac29fe6c3b4c891f29e9f249d035ab40bddb41f45267590c6a8c9ae7ebcc64eb45ee6d86ca4bfd87b8cc8e04064d3fc28f791d61a508f539a0c332e21dbcb6e4503d3c0014dc7b0c74e5a4e8b52fe2d21ddbb2aac46f821c63c49a35493d236ce3f551d44e7e6a7d61d128ff32d9cd2bed7034eb28f17c6ff3df2"}, {0xc8, 0x3a, 0x80c, "574bc7b86a4bd8f024124e12b24ada91145d1205c168b779e03f7ff016eac4c4860db2e1f7066302482df1a98c166311576c32882e46e05f82974b9ecaea44abd728c698e0c9dcbef8805aff06856b35aa451d87f9e4fe1f3670a1777146fb2599ff7e423c6c96da3c08b03f67bc78a35b453ef3dc7fe8206ad6d7e9a402f594e120c199d8179de21d9004051cb8080ef4b78607cc4e12d9d53c981da2531763ffe0ff38b5e5a26ec8a2da8f811bb8d8a96e166d1da9"}, {0x20, 0xff, 0x80000001, "bf849e704a568622af6b"}, {0x1010, 0x101, 0x1, "84c57ab9666c20cfe1997d67d731f48f3fa5386ecd704b10b5320dbffa2492aa3be168814254107aa3d50dba29b5179c6eb46564f71bb63429da34de7dcfc067782c87dca2a8f163b7fe8dfbd16e54908a6f6218e88c618f083761a8c1324c8bf1cf5132c9d10b5c6c5e6bfe770f46b16d2fe3e93e9df3d1d6717e2998d483d739ae6bd7162a9fd22ecb3c42f0f0ae8e4245b84556481f9a9f4b3bb538ab0922644e8119573ab0693f4cfc832119e863daa60c1d352024b9be23a9e7eec12056f473992230bb486ca01318381536082ded4ba7d38d652822a82528c25a92d62ef4496e48e4e5cd28aa81c822b1708e60d3b0f59731876831b1b4fcbfaed1f995dfcd85192609721f4d5e7196975f9e6e7838d0576d85b14645715f253085b0b1568e599755a6ddf0cf8dad9a87da64f77e370a5f12196f600af76f19ee57d6f268dcfa6937b81d04fbd9a18338cb5a1265a54d6598cc55385bd9c5ca4574c2e763c13da26e05d14875b00d7eba51257a28c38d293618839b73335ea8f1112eb24d126f85803a92b8872ebc45e203205bc85ec0baeac975796442284f48b1586607238438356d32e45e2659ed972fb26d25ad7c73c3e350147b96b82e0c5060c9c25c3d57bb000b6864964c6f80ce8afc15edf4f4213640b4a24b5936c00e1b064d23bc484affac24484125a70497ff6d0931521e874ca145cc06c706168def77813e87cd81d68a5dc593d5be5987e89778fd5e891e42c27b2d4216f79d63aeb1484d7569750fd9c9a945525f5de66b521f1f303427d6c195c879fbc408a484f279bbb1ec690825d77134a57ad972f5473dbe621d18a23ceb83f2d1dc85a3e8dfd7e05fb4d1b89c37d1d8409dfc3a04028d9b300b13b915867a836f07a24dfb615c9044d07e4692277181ed875e08ae9c67b27767a1366ebc92bc0c3915a26b98884f3a6262db2c2c78f13ef9bd9c42e3d66a3b6cc596fc3b1cc0ce1b20e4bba33c76df4545cf40bd73e795303e5201cdf9a5467cf5aed1e1dae3c0e54403a6c4aa80c50b1fc0096f7fdf8d49266f9c5d4c056912906a9a4b7083f75d520db963bb8a4aa95838b5e192c88ae81ffef0c91d8d5bbdeea58f49816e7ac47f7adedd0b111f8e4566af628f467a2c2ea6919bfdef2103ce9d3281eed207acf13415609b8d671419f4fe6b16909bac34960558a26e52e274d13ad78c6ef4544bd208d514c2d788268bc28a4af489693b24116117a837cc3983fee2a830fe7123aceb5b90e63385b1f0aae513281ef7e10644799866f057eaeda69c1ee09adcdf34fb1679611cae1fbe3b6a96334045046fb5d03ed5b5d22fb81387053dbc836e7f84a5a5130daa7296df72eb293e896c465ee366caa0165ec86ab3f0d18f86416c054fe0682ac6b7886759109629a2e9645f6e226b3aafd4943a6db1a82ed6fb7fd5a480d03d9e7fc34ff872c9718f8d047bdf1138fe0e8ca94d31774af6963880c8b3265be517bdf90ef4e0cedefa920a76f3cbff0641c5861b52ade87c3b3a49acdebfb9386b037ac27ac314790b44f0a11e91eeacef60bb39cb72de96b13a240e87962a3cd3b9fe2eff6a622c4edc346a80d2734cf5cbe806f0cc61ec27cce9d559ae8c11addc124ca827fb905b588eff0a7ac01b5a5b7285725e0fed269c66f8bd35495259600fc518d1c45b734ed47b38d4db7e35515baabe5c680fc5e8ed4f8cb09d89878accefe56046dab8bd73821141d51f2064881d5af65b31e1d667a7ba73aa9a1f5cf0efdb34de59ed8fef096c0158cfcbfc2644f9161cd03e4554fde7be5dcd9d8b00c1b25fefa2eb723e63ac0fbc3d02357cfe6bb940e4917348a7b756f17e43ddcd66c0180d7b34e93a4ec1596cd8dac68fdbe8d7a0b322fe39cf2073900a2502cef59b313b32a3abd7a7f8e428ccc9d69dc532febb71cb19fe545da9dc970527169ccb93fcc6b6b02bee2b14f2e72a794848b06ee426acc8ba127592f202925c7b4b9637478d1acd5d85d249cf90df4b0e943b7a2ea881906dee9b98e1d5354e5ade9c02fabc21bca2be9b2c872cc62a9ae75186c619a64657a990fbac64a5c014e6f4b2e6d14be9fa4e6635e86ac30a89ae98165fb7fd65a9ce12f8745ad0100e6d3183145313e81be140206402840c038d0ebccfba38228a0682ce1e07ee8a3890db2c5661d4aefa253cbd732ffd559f88c7f01c73106bf7e308bf1c67b09915efea95f8ca50d8d22b0e81f607dc0c47815792a893bca1ee892f29843290622de8eb7f00439d875ea7f28bae40deb93c3ca74360112e23807c28c922c74b8d269638fb704affd094dd6595a8ea24af744814168993ff3678df1487fa0aa523883d287e4cdfb9b73eaedd749833c71977cdf87fb482c8637a3c458b823b935a0d89584ff439ec72318c808945d036f08825507a99abf746ca2955c6685be6c5599951b3b314f5dab0d87c0448a1308dc705b2559f0d9e35be54fdf3469646d65732d593a6ba108c64b449d313cfb6439581cc40703aef79e1d8168973be6294d21b5fd21743090d9ec2da5e4c53584a34f6ed433c1b4ac2fd87d5da47fabac94485e90dcbd43184ed0925dedf3ccb38b66fe545c6d9a1b87f8c9fb91c1563cdfb23b535ec9622acab5a8b87f9502fb6a726fe074f3e89f28545664f594bccdf7bef9c97e54b846c872d8be40725fdc88b924f79df02bd48784c335713ebc7f11635602191be7c3a843a38815fd4d034fe7014c9326edef2865f226e7fbe35960e13ff34b1582d9f0b73206e574b1230203f8713c1c053eac78f365c204bf84d8d54b84d414f5c2334f63d48ae92d52e0d0a0736d95fdcb0ed266a6e06dafeabd95d3cfae2b9dafcba919ecc8326e1556a92ad033b284a7e7aff4d2aa9491d10213183c6fd91f791387d049eb63ae9fc7c23a225ecbe8a60b62fbe87c3f2136d3028a9d4158705451164bcbe440a054477dc9b48c5c93ada5200019a39b04cdaa5e7f2f998d9c2bc9abfad04bba122675a0adf85f024b8acb22e29aa8ee7da68478253546924ed8417c103d97f57a06b6742dfb80bf6b77b508feca84cb7be12b77527474330da907386cd2a5eeff70e726dc809b54e606bc4b364bcb4ef37fe1ce9f0140dd0f53c9978ebd0ae5e7871d2b6565f46e07bae1c333c4335a3d839c6583bf85ec090e7c72d24de4645fa6d95a26a42e04186d502497e385253b65d6b3689531692161b5eca9b03a1cdf37679d1dcf07dab1d5538001c20081781efdec3e2a13d279a7c0afa8892fbdf3aa53672ac1d72f5d8c2bb8d436df99cff4396cdd75539e1983b3833330628f380da72e37e48e1b3bcc49a0e5703548be15c764c6f4102d5559e8f9bd41569eff3e25b722862348853a395b04921c21d36f482b9ddf7c9f931576f8d8d76fde6320f5f35c68f70b4e7ea0bec9c4bd43920e5f1504fab8d3c7aa585756ecce417ef75819dbbee21e4e9591c133fea3fc2bcf33128a3b49fd8fb0bc6503a5d0de4a6de251bf13f5396c27b82ffc7451b7a3df3616f4d3cabca4d02dca7184468336c64cb15d11bfa1c090933fa8438c90e3611a3f6c4fc015d7b0a0f3acbde0c2288b4ce80ffbbc2f4859d7b80381ac1d763028979068e48ab4a28c8596e746b1b47a12f66d7a3629012610b4057a9def42cc8f9efbfed6ccf180cb9f9d5f2ffcfcb0d4d9d04b0b516928661a2a139e0279f5938afde6102bcaf775538dbdb2a36e04cef2350ab694d53d09edcc67d5e86001514df3926f42c1a8b219a4e005bab1ab21825dfc9b55359e8862e145068105463380809db1776f9f84ec8abe156da7e98c18c981574c717cda6860fa77c31f1955d749754c8e3a18319ca17fa8b622917fd11ae93d95885ad39effac845e74ced6178705a64401ad93c85d9469cbce6a5354127593362469d92c84f64fb274523daf35d154cd4ac7d8f0124e228c11da97e6b007a4b61c93fbe73f77fce4421a59ebe950c8bb8301e156751e779394936b9e0d84c6ec45a665b059ca41844540ef96b5e3564f278d98f301f9deed961c26a6431a02ef2a41b5637312746b52c3744d6f11a43cc32f150fca64307d49d192b14a05b0c1f11e7777158e4f2ab26bf0fd1c58ed204ca5eca276fc25d992c3688c0fcab1bcceed5196407489d5beeb080ef7b19ab4e8f921bba343d44e8ebc747b651ea8fd43a9307a6ccff6c3737f4e431ce9bebc966a6697a9c789770144d0885d7cbdc1b87363363ecda18c257acd1db08778c0baff53ac665f7af78f7ab222808e10e4b2a26c6d9d0ae80bda2d8f585ecb595ad08cb130195347ceb9cc7c195e27ff9352ec990cfeb64a4e5b44ed222209f52466c8f90f8d10463742346c08ffee8a34e33b21eddac6d62b62caaa6071d8417bcc7360e744905d784a81f23cb8659526dfbabd41368e9ab25ea04b92f6133fea9fdb45621153d4ace6afab84392b40fc86aae728917671a6bd7279231a3e9065747da40e6e6c4ff3a4c5526e675271fe566d59f22d04db68a61262548ad697a34d9a7ceee57061868693c4e84a0312f3dd4f035bdf31564e4412476251853a63e4b8fcce381f6354d83261835dd38e93f9a04822ff8fbff9885282c41abcbf7f6a7a8d08263478532756fd1b0a4bdcbe6f336234f17cd0804db2fb42b042057084479ee71ba2688fe5564648e9b617cad7aae5223a911666e81f93c58e9aa639bb84894a8ca77c7cdfcb26080b5faf8d7f4a67e8ac116ecaf6284bf30e96229bd277038f824492a495c62ebce6050e65d5a59ff5ed8452c1da8821381e0d22efeea8badf9f591aac8cf6970b9a9ad94c7e9bb274da0e3826b7308b84d501e6d3fe78015c37090a163a290076b7d12ad61bea3dfdd8bfe08534846c0851cda1a97bef506bebfbf27174ccb8b57e8dc5b1e4f30deff169dbc44a0ad12409fe3fd622f24eddb00fbe902fe6c3917802473b826c30124c774a25b0c93f8ddc4af3cb39d652bf1f155942ccf0ee928ecc798e6cbc00dd8cb01a374e2f55f4dc9500c5a780ff0578c5bb6f4cb22e6051693f4919b4b1fba71275ebff33a95322a862ae253e328ee9c40817bbb897f1324c6c6ead2ecac8082e23a1f79ce8d68f84205a7cc2f6ce481718ee45b85adc712f8ae53e3ee4909a6a506cc2152e8d883f6fdef286d5b94935530c9e56918f500da075dc87b5a995e99765e17a18b9158fbf4015679b4f9520458a5b23497b735f46ca0f2055dc130d347cd0e489725ef94ce7497cc1828e26282b0736c1147de6e48164393086fa76be5111c05fbed8ae78659d3a651f43d616b263f58f1a4f4afac6710a1ae04431b66c129909edc00877bbb9267aae8e8c6aeefb133796e05e395a3893c87fc3fa8dff553f456979167fc728d9aaf64dee36a0cb0317aff7ef98de04badcce46cf040f8184247ff59bdd13f21672ea1b0a775e1e60c6f726a14c5c5e7d61321e99cd807a3e7ca2bde1cbc6d93a26f0fc80815af8e4b7f3226c428f9deef7e84b18a756a140fb1b1e76900f2cdd25f04302fa45b3085e08339ffa3789d7b9104a5f9c3b2c321c2019f6475c0a65c242410266773117822408b51d3e8a7d504750f3fb4ba2a716581195eb294112bfe820b5a1ca330fa16f775d6f228ce962bf16e0e802a3386edf2190d6d33a1f18dfe005234b47a8dbfa49a1fae7015faf3f2d8bfcddf2ef8a541c361ee93e825651e95e47f085131fc1ceeaee83a5f724435e6f11af73572b896481f7b539890fb47bb66c02cc1de4c3f73ed864ca26c99c502"}, {0x90, 0x100, 0x5, "5cbc053889cddf56f33e645159c823cc76f703238cf61553038274dfea3322a7c7622a12c805767ec8a8158d10b7f27702882da17b3a116b7cf7a5ed984982321fa108cf460adf687e418cfb15c744dbfb9c3dec8cd02b8eef9895c6b80b0964e2f65cc6692d4427747f3b4234e6c7664e47ac52dca6074b45e1419e"}, {0xd8, 0x11f, 0xf46, "b295825a35a52711273df518d299ed73c51b95292bbe469ed865944b7ceecc216a35aefc8aeb9877b04c55061e18a08e2005eac9f346f730647f13c6afdb362f02e19945e795f1dcb28d51e957ecb1bc237f06779b269869a18d6347b996059035bee7a1ffa3b2a077dc32bcccd726f94659f2f461d7266dc16763aa6766c98fe46d5eb33dcce846171dcf032d5a4f9f88095ead0b75bcc442b4b5ee4def17b74a519fb10f07ad56731b9c6c24a11fefe99022dc055a1e7b772d291fed164310136a4ed5b3b3fb"}, {0x30, 0x110, 0x80000001, "046c8d3d77a170d6a40539221fce29c9cd70e753c91d2f1867066d1303"}], 0x1340, 0x4}, 0x80}, {{&(0x7f00000081c0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f000000a440)=[{&(0x7f0000008240)="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", 0x1000}, {&(0x7f0000009240)="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", 0x1000}, {&(0x7f000000a240)="08636d8434a0f716e7325777494a27902bc5ae", 0x13}, {&(0x7f000000a280)="94baa58a06476ae1e00e7fac369976e6bbdb3e732228db28feb1b60ba39a00c194f46eca0d6399c6ebd63d483cc8b9280ce77d5677be1b93a4bf9cabb8f5f50017a6e7a70f3f9bb1f575619efa1cc6d7449306971e5c24b2bfe300fad7d1bdf05d0170ac9b66f8b713563042d8c6ad3db6e4b771353441f877c0fce85176ba18df2f9040a5b0f4de8e33c64c3659b8bc1a04fc44a3888fdd83b66bfad1d126", 0x9f}, {&(0x7f000000a340)="ffc76ee8c4a30c3304d42084edd77b4f2b0b74a37947ce0a104ed431fff1e5071f801196bef365f0f2a77ae174f589676d19474f571c13e79dbd3fe3abaa4e765827d07e0825d342de497795ba4ade9e0cce886b2763b8898f9b458fdefd5e37118e320ad2aa1df3c15fdea04ee618f7093ca230d2eb9c4518d7a1f490be55f57b59830dc200116497111269fa36f80178669203c5fd017215a863b00f97653438626a8779d9d93969a3bd89b99e80a933ed0f44f88ee1525b6e172057c9d02cccea0ae05af8dc54248334a17ec813778ef45a107a152012e368547a118fb266dec5a4e1dc8593280da07f7e30dda8abaac5df", 0xf3}], 0x5, &(0x7f000000b8c0)=ANY=[@ANYBLOB="a80000000000000000000000070000004bd1d403098396eab42e1b7cbf7ac4ca1515b6e3723435370d1bfcd035c382c75fdaefdd675d62a607dff5aee0304cf9f76e235a161f8efc8ac3e83c5286ba1228414898c1cd165d375e14dba28059c44c3510a927924a3bd7f3316f3cec099ecaf82fd00f56c639b98908f2d772d159563a719c6da250a75dd4c24ca47afd276d34be2e141324ef5520d43ea6f672b77efdd1087f861e00e8000000000000008800000000000100b661ee48601109d6832d975006ae4d6790d9b3d2a06905fe170ef7294e58253439357a25d99c61fe91078d0613a40fa0ef13e50859aa925fc81d356312bd81429b57f3d666ec5d5b20300ea21e772fbd5583c07480442fd3c696757f47838f52ba057b05d8227fea56e3650e2d559ee2ef3128bb4279eaaf06ed3ab0d7c53ac2b01ddc29478b684ff4c37d727a667fd10f231e60d423a3f0306c69f9107c8a3813d44ff4aec2c2d6f942f50fa0be0e6de5d0279e50cdc8322fe501206b4dc413a3f86dcb9e7e40ac13b55c146759cad66dd2495725d04a0010100000000000003f0100002000000007409a044fa4c19a046494867b0e8530270c8c135fb7e95145e810a6ce4f10a55961cc16e51c4e4cd9e735d65f21885200eaa1a51b120b95ae3dbfdc9a9aac5def932b64dcb75cde41466162d66a0766c11eb5389f86984b5b09206824fcd6e51abd41a37131176b5b1436e7d49f1cf1d7d80106bed03fa50853af9127ddfd994ebaaed391505013fff1b67d61fefe09e72a7eed01763a2edf5a2189eccf8c2197969e6ee3a86c03c34f542f1cc097f149596ed1a46ed40d24e0454475f0ffa3f3fc31436faf9c46a1bb26501867b8fc11f91d8975302bb7a6ec8fe270ee53be8805fbe4aeef60c6ea81627bf7152ca303ac9a3d7c4979dfdcc733b9b3d52facfe2cb03fb73e6a3ec24f489c316228ea5d92038241a22a7bac2da6dc1e3cdb9b8e5e6aa1ef02384315911d204ff5e15be13154fe85220858eaa3e065a66f784e8cba73a997f385ddee05783178083dfc054c68eeb181325905ae7a2090eb7d2c56173f8976467c0a03da06f171a482f4d3e62cc837732c619463ebec48c3e77d02e1af84335520455455ba406bdbaf9d0353b8c5e189799e6c2525f0b2dc23d7a648290ff58f7d4ed3eefb109dd2d8e5cb2af6668b180c7ec04592f0861097fedda7b58e01b211f384549e9ac8356580e823d0f7d9e52ee4ca310de055936d911e91e4736cda3f590c45ce7f1499aa963873b402d2e99f378c25431298d33f742e6cfc8f00f9bcf3465b9842dcd23503d0a11ce1ab20387bbb4d885b718156d6ac1f69fdc536b1cb39ba9a8bad46db2b6857909987f123a490d9a5c119bdc080d921dd68b4e23670b1b5794d37efc69d1fd6c2d1e38abcddb766dcc439d369453d9f51b892721b36be9a34f62e151ca439e22b9f416097c1f31380d4418149dc55a0fc12e585bf0548ca394b0ed116e867a386cb973febcf83143155db18399f312eb8957d3e67bae5cd88fc5bb942e5f65b81c8968ddad958f357200d73b7f2a20dce6897a3846893f62d678fa3026ed7dfad735f4158194634e6c678c5cfb33a96f661482af92ed581a66fde539c54bb9c7ee5eaa7081eb42ecebb4fa0ba422dd6e198ab3eed6387e05460d330c588ce9d3da0fed507e1d48ba00e33dc76280001e48c904867da36e19ea0c3297d68d0c9a8de2df0ee57b7c89d0a7a01046331643b3f88e8b70e25f2559dd74660c42d745f59b12ec11237e46e2d22669cc4cacf1679104ec97f2cff030e2661bdc6d84022935abdedc8636576533209b1aa03a4841ba17aa4ac531033d0ca23dc2b0ea99e8234edddaaa9292fe0ba861fa2a2db4d1ebe1c1dd9d4fb45a95d19153eeb9a1d6917b0976d6960ed18e8d8e698fd35e5f80e1397deb35ee4c8c48f688ad9ced605dcc40419cc7ee3762a772104508664e1c97f86ac6e007552a12863d207f35cd8eac1c86554fb71604b022b439de5ac737568f5db0caf3f6b8d2785866d233c6db1b7bdada919d0da716a2ea330832c3e530fc88b3573266944995c5e4bd0f9be72be2c310b44c2f33330ba9cfab43d14b96d49fb9d8648b1a425973cd7e5670d29281f43336905ed7116ba8f3029035f536d21076ed0274b00576a6c65e7b0c29a49c984ccb55b748f7d3769e5413de7ca0c892683fdf124990d351a01943e0c0cc51e3486f9d24d8e8ba4b64ceb1153646a5d8f5f237767cf80243e7964ac30a97af9d440b0c07e7cc65e52de3d53afdb33e756079e561c2e047d1f7b29d42758a5d58bf1343326490e6cbd2bd6e1bb8b9cca4de305caf147405f89a8d651fb20b44e0ac0a055516adbc79501bf88da16517cae32dcf8cc1a8ee8219f1fad42014f414ecf63d04cdf451a28933b8bd410352050a4d680607e73d90583def68b7fab290ec01c399e2f134c96f5423141e96bed01b2bab3a147d0857638789a28bcc18bfe296b4297515f68c512b97e124c168ca72487c9d91d379f882c6dca01345b4ef6930fde5b2876806b6d4a74400a022300666a551e9e0ce608338e1f6bd8b86341ef20086c259e71667e3dd3c7f4c4d34427db97a993ef4fd22bab45c381267d9573ce5099ce6c45ee0e8fdebd7f72f926d443bee6e03a8c369301d1ae6dc9fb4abc7ef18825e0af81c4ff4476a1fc52289b2504fe4a26397a67c95915a86946747713e5857867e30164f6f50f173d8d23050549b36a801ab32f1e289f8aaebfe50e20f5e0a50026e5568417bb56992ef5acb42c94dc47cff4f769416799154eeccf874cabd79f78298ce7bfbf0a0658980f356edbc793e65389521a1c02b2d041fd241affa47213235be4ec0f90b29d98ae69d7cfbed7e5d5e84f262fca09c336c1f5623a444cdacf0b58ab1d11fce78469b97823f484d5cc3b6709e6ff36342f44295e894e58a8e0bc70a3d9d822b301c737d2ad92bdda484ce54bfcf0140806ad2dc909bf4d7e7ffb2e0b9930a32eec659b1a50f138d8aad6be51790648f7c6db2fb84e6418a47278d0e99bbaf6ef7e48ada28b965bfab015020c503bc031d9226d72938aeedd8566791dbd8006f9a697ee7ab5059ca65c6611279e8a1112ced3c584c679c9d3f9f183ce04d37205c684643c24e42320a10f2aac70612b241f29e0da75a24905fbcad824cd04636332f1997894ec36292100dee3e074591119386586d9b78e28e712122d306e7f60031ef5f1348d8c93b2420827ee5fd1006cfb7eb6b614d9ff781174243765ea59680c4155e0ae1e525dae02e42bc93b0aa7a0a357a837401bcb0e6da8f251ed38e7eaf8caa659d4cfe15956985f9b6420dd6c09cf240cfa82ed02caf897127cbb2c8d7606e6405fd6abecc5303ff57f99c1fb44f642c771a346f54aff5b7b2a495d31304d575b4b20d700983cc1531e38df9f511ac82907c178ede8c900150e0459b5ba170582d9c00831ac3c9ee4fd9b6c75e88748224b8bb4eb44cea6108437e61292ac6501050066fac2313ccdcebcc14476ed620493a4e4a153a14d6cb354c0442edf249cdbc36cc523edcd374ad7da46d71ef1fbcf388d17f5eefa1e027c161e8218f159d14258063bb2b8de2d656f2413d59635b472ea3759c47d878dc7ac21271292fde4cdf7e253dcbd4db3d629ef59ed2d802747de456dc2ee3221d31add0e7f1f3b1d94a51d2889aba4222f360b04f86f186df72ac64665291138fcce4643d98dfbf1d06b3c28fac3a0d6b27c21f0b14b321a2ee20398e3413cdc03037a7467eac79c3ddfaefe31ff92af598d868fba9caf042cdc48a37115e4071fff1772ffac8604500e5e39e5b9141d15b1867ec3d6530059bc373d466d4113e900088f397981faf561733dbed5ef074b1315cae0117da5777836e45deb32bd4d056fe70284bdfe44bae6ada3dc0e9e8d762eb7c169137a612ae6e2e16ed330f16fc8c08d248da12c9e9f3e94780c30d050dca34891ba2cca33dbd43f852ae3f4e9d46038b9ba55558115e3c925a8abadf08dfb9db4dc02df98cf0621e021b0e6c8c368edd963a94848bc284d3648433b0b7f63e736ae6404a7b84b59f82a05264d2bfc3985fbac203933ee34c4fb11a5f74cfcfaee67fb6ae2df60605fadfa3ebfbe76d160698578dde4e7c4ad7c4784a3a7d21c9e2be3684b4c56f183edcb964386513613707ee58533e1020c7904e48b09e6960ba708f153d857d0f836cf49a3288d64033529ab4682677d3becdbd4e545fed100ea2541ebac739839ff38657c4462213b5d9d7c771073a5b1096b9ced5789b02b8c7e7732a3b0adb9eb12f7423045bc4442d48393d62380c66c6f9d66575009af6f195618e36ee5a5fd4417e2e289084996ba92c5f60c100d54e7a53960c1c23c4d5f3af7d4b63136d9fd6cf11f6c203a909f6fa5bcbdd4582bf88a2ca0e159e9a99c37603eaa236b38c55a5a8e97554108f0bc0ae26a03372690744a6000936e3a6e975893f76cbb52c2bec61f5e8ff7d334f24d35bb1ead1384232e18aba45187b163bd4aa7d6f7ce506161b227f258bbbf888674d60295a51c01a2487ec04f8167a9accb990a134575d32bcfe37492fd77732e7bd21a71cfe94c6b93dad8971e640bafde66a9b917f0df4f59ace9999d2805efe9dd732be959c6eb0cfeffd13f897ac41b81888ab8286ab45f5636362fdd8cd66b8869c2d600c47dc0f31c10459c91bad01c91c1d95570a5f691c98baa657bca55a143d4ac48572cadc39b86ee0e33c9a953f743caa1ec14206246803b911920a478933fd466739aa9e1d634b5f1ca55879d2ca7881c6853ed2d06e78bd53ad69fd2232f9c091637fdd7280f6ed22497df22f02d1b1a7948aa98ba4dc48ff0ac3b5c1d1567ffb34bc2bd136bfab3ccc254569b3f5df94ce696068508fbd0f920e598de1f3a0a5ce0c59a5ea0bcc06640d1cdcf2d9acc692c9e8204bcfba2a1dc9a005e0524ea6d1f28c9d2db8d6859538edb31c76c0da80be2643a411d9741f097a31326019b938622764a147c05745246db6060f67f9c4c3d42126f50250faea51d8e018f9db4749bf662dd3f2130652d3c81a09220a3ec0a25f75239f1e213214e577d9dae3bb5a4c792b4b0ec50283deedb420c12c59b8fcffff8246b86433c4f0500ae678f449ed18ed2feb3c4bcd152327e52cca8a4df662519093885a079076498162683c0a3f6dd7601e1ed1e4584772173b3ebf9c10620bfca01981aa3f02f4414c153da0a6dd508adfe87c5636d92f712d3f1d3b8e3f8a30b6958888028afc738e825edc8f0ef2ea4333038cb080417e59564ea771adc669078cb49abd405f5bd0f16ca2d32f03e2a93fa34d406bbb0c8e3b18d7eb8c1a51080b58f0fad88444c8f3cc1b686b6c1f280548c976e9ae27663fd46ad14ce06d4048be9284871067cf721e5cbfd9294d7fad1db47b031d37762c984580f885f55b34fab3847ad5089de8b36c7e3bd15b744a0c179cb086f6d7cfd94618e612fdcb6db3a05b119c49bd3fed2998ea03e829e2fa1c5c5d9bd29191bee9ad407bdaf8b892f453a14087f16496998fb766bb59af255bc0ac93ded86cc79516d8287db7cac42bf88592469cbe098bc5c8c0fcdfdca416d9a33f9e601d5743c50ed119ac61f2c3ef6ad675e856d9ab48f18ad95d5bfdf26acd038e3a03b121acfd77b03df0acf0aee38a120fbcc61c1a02a4a39b40fab6b9b02210f3757c163e880b5ce1b403690f21b23af7b2f744a9124bb58dc4309e6abece63e9876d2c73c8eb292eba13a25758ed5ecd243c3e00bb48bc73b455db6f8760cd2e623c067d0b98d3678d76bdba5b556bee481f14e2aeb16c7af06de876a0f195e31e96e9b0124daacf93538648cf1090b01031f0aaca3dd35510821156611104338203b15acfef163914dd5bf53c6685bde8eb6e5fcb246dfdff1b76bc6daa6292303548e8f4eaf5c97ae14a4148866eb283c7041e32133742ca4e9319bca66362f667067bb55b07b54400790729be26075457445ca22ecc45e83f07e7075ff33062a4d00daa821e51a7638e78a44e65e6660df09f845d95cf1fd4f548210ab540bf48d68e25ff44bd1cfb29b9be016e26311612e38f02db455e0a3a423e92df6a14fe85742352f24b165c331957224ce63853fc3b76a32e5c2236c43298c736a50bdbbddbc7245049285f131bced341be9b051f3580fe42130adab7197567e396f7100aa0fcffb977d3e158b10af5ba99af2a0f451c3165b0185cca6ff6e676c0847b034d9b23be2c13a316a866c8e07651dec39a740d5eb356c9485f0263eca2462e6c66d5c07f92e8b29ff19176385b55aca384ba505f4fd582705cc6930c5fc7c64e0494c88d2784e8ec92b9378f4157d6fc24976455dbbd8703343b0c8326d2ae0b14c8b8021550934bdd7ada6797735a4b0eaf4f22df115123c4dcf94c718b8d74eb21c4a8af4d3821e9a518b47b3643b03776ff0cb05e4908b6f01cd55c40a76a00f9a326e12f0922e5b7bcaad6e37b17e5b0706abf9133df08d33ddfd6b72aa1439730dddff61673e9d8dba06fa68e4bc92ceca28d8da8624c077f7edf4206dbadc83035502fc3caa4235d45a3ab0cb28bce86579b3281ef129e1f335764ec2a0483a3b47e4224c16b011b28424b6000d13930e3275956f23f5cc5c2552fe2935bdb4d0b58ff7e609c849a180484ff1717c10ac5aa39e597017acfdfa5e689d80b559"], 0x11a0, 0x8000}, 0x8001}], 0x8, 0x0) 03:33:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) [ 315.056350] binder: send failed reply for transaction 70, target dead 03:33:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r2, 0x403, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x80000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe33}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) fcntl$setpipe(r4, 0x407, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) 03:33:51 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1, 0x7, 0x3, 0x3, 'syz0\x00'}, 0x3, 0x8, 0x9, r1, 0x1, 0x9, 'syz1\x00', &(0x7f0000000040)=['\x00'], 0x1, [], [0x759a, 0x4, 0x40, 0x1]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x448d) 03:33:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r2, 0x403, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x80000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe33}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) fcntl$setpipe(r4, 0x407, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) [ 315.214215] binder: release 13850:13853 transaction 72 out, still active [ 315.233465] binder: undelivered TRANSACTION_COMPLETE 03:33:51 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() r2 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) r3 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='--nodevem0%!\x00', 0xfffffffffffffff9) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) keyctl$link(0x8, r2, r3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000240)={0x7}, 0x1) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 315.301633] binder: send failed reply for transaction 72, target dead 03:33:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 03:33:51 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) clone(0x2000, 0x0, 0xfffffffffffffffe, &(0x7f0000000580), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="010029bd70fddbdf250c0000000800050046000008000300040000002c0001000805000000000000080005000471000008000200000000000800010002000000080009005c00008c1ec74d0008000200870000000c000700280000000400000008000200bc00000014000300fe8000000000000000000000000000aa3d000b007369700008000800150a0000080009003b000000000059ec00000e53e8ec688e"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x1, 0x3, 0x5}, 0x2}}, 0x18) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000280)={0xffff, 0x800, 0x100000001, 0x204}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0x1}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xfffffffffffffffa, 0x8) [ 315.395117] binder: release 13872:13875 transaction 74 out, still active 03:33:51 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)) r1 = getpid() r2 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="cc91619b1239a81a0b3d70927ff7138742713005d36998d74b2bc1fbfd2dc20f500780f8ca120a9b453eb603ee9777e1c249a71cb4", 0x35, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x2, r3) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 315.436886] binder: undelivered TRANSACTION_COMPLETE [ 315.509375] binder: send failed reply for transaction 74, target dead 03:33:52 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfc0004) listen(r0, 0x4) listen(r0, 0x401) 03:33:52 executing program 5: r0 = semget(0xffffffffffffffff, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x11) 03:33:52 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':', 0x1}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:52 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0xff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) 03:33:52 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 03:33:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x900) 03:33:52 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) ftruncate(r0, 0x48d) [ 316.016616] binder: 13909:13910 got transaction with invalid offsets ptr [ 316.023739] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64 03:33:52 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xe8030000, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) getresgid(&(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) r3 = dup3(r1, r2, 0x80000) ioctl(r3, 0xfffffffffffffffd, &(0x7f0000000300)="b006b47fe5d67846a39579518fe14791e8ebd47fcc7df2ebd09ce7cb57089460480deaefb34f199d72ba09b4d383ecf404f69a1045f5dee2d32e22a842a6e49864fcb741cdb6d0aa0677bd3a3389bab58c3f09686aabc80e0f51809cc7d48f062ef5964ce68d6fbcac568edf151e59fe50b33c4c074636e5b1") socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x8, 0x4, [0x2, 0xf4, 0x9, 0x3e]}, &(0x7f00000003c0)=0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000140)) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x1, 0xfff, 0xa2e7}, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x6}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r4, 0x9}, &(0x7f0000000480)=0x8) ioctl$VT_ACTIVATE(r3, 0x5606, 0x3) 03:33:52 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x80000000, 0xa, 0xfffffffffffffff8, 0x7fff, r2}, &(0x7f00000000c0)=0x10) ftruncate(r0, 0x48d) [ 316.060613] binder: 13909:13910 transaction failed 29201/-14, size 0-58 line 3001 [ 316.120052] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64 [ 316.127200] binder: undelivered TRANSACTION_ERROR: 29201 03:33:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x7fda52c53700) 03:33:52 executing program 3: timer_create(0x0, &(0x7f0000000380), &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xadf}, &(0x7f0000000600)=0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000140)) r4 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6, 0x90000) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x3e, "e6b4d34579896ef1f86541835884fd01d1f132d32b3d44cb453089eff2c3710930605ab95296f6cd1d154ae966e18562607bf996d17cfbc019d28724d73c"}, &(0x7f0000000180)=0x46) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl(r2, 0x39b, &(0x7f0000000700)="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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0x0, 0xe603000000000000, 0xfc000000]}}, 0x1c) 03:33:52 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':', 0x1}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:52 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000380)=0xc) r2 = getgid() syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x186, &(0x7f0000000300)=[{&(0x7f0000000080)="f0e3f1c65a8c15b5fa9a2d099d77d295944ef5e2265d52c16718f3da05e976e179c7bae649b619fbc329c1aa6dbea9f17917d24dd9acc9081992be11f5c1111a20d12440c210d9441956673ecce530b66bc70d5a23cf1229af0ff07f92c910d4f2043bad957533ae0159b5b0b30102fd598f6f0e9ada7001482aa47e1ac2c1e43fe9a38c87d7af7e1fadf95164f903609a3ffa7e06bac5625141e07f9c5a1fa9f2037ea12793f55d8285011296810bed6f27b44ffecbf1150d5ef8ee9dc6ad5d7be21f2c96067cd9712af8137b190562dc128401da897e13fa08e6ea5442bb4ccd", 0xe1, 0x2}, {&(0x7f0000000180)='\x00', 0x1, 0x7}, {&(0x7f0000000240)="44ae19e7e1c46f2796777105239dd3cee1ce14379c91289ca049a2c5c3dfb609b1242f171aa4244b3076f98b003e00ca02052cc7cd3b055220d5894c15e466fcc244b905c147135aca3476aee438fc3af130a96c4c43d667b2f9735e4eab87859585c8c4e9e4b2048bd22076271ea7ca3e4539fce5d75c2ac86468fc61178f1348af0b63d336e516e4cdeb164bc53aab1864cce0a019d284888a9bd583ee2b59bc8b1465878505728d70b57a4a2f0b0efcdf7db182f4513d44148a", 0xbb, 0x1}], 0x804000, &(0x7f00000004c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031662c756d61736b3d30303030303030303030303030303030303030303137372c706172743d3078303030303030303030303030636130362c6749643dbbc1443abb6fc57da50561822dc51c3adb0cb337e2a65ccb6cf54477e5c28bb1d10139e8586fb0173b4dd7d953", @ANYPTR64, @ANYBLOB=',session=0x000000000000007f,nodecompose,decompose,gid=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:52 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x7f, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000000c0)={0x1}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000002c0)=[&(0x7f0000000300)='\x00', &(0x7f0000000100)='**-user\x00', &(0x7f0000000140)='-}em1vmnet0\x00', &(0x7f0000000280)='posix_acl_accesseth1vboxnet0+\x00', &(0x7f00000001c0)='cpuset.\x00']) [ 316.564380] binder: 13952:13953 got transaction with invalid offsets ptr 03:33:53 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 316.652912] binder: 13952:13953 transaction failed 29201/-14, size 0-58 line 3001 [ 316.682753] binder: undelivered TRANSACTION_ERROR: 29201 03:33:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':', 0x1}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:53 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x3, 0x1}, {0x8, 0x6}, {0x3, 0x8}, {0x8, 0x2}, {0x6, 0xe6}, {0x0, 0x3}], 0x6) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) 03:33:53 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xe8030000, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) getresgid(&(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) r3 = dup3(r1, r2, 0x80000) ioctl(r3, 0xfffffffffffffffd, &(0x7f0000000300)="b006b47fe5d67846a39579518fe14791e8ebd47fcc7df2ebd09ce7cb57089460480deaefb34f199d72ba09b4d383ecf404f69a1045f5dee2d32e22a842a6e49864fcb741cdb6d0aa0677bd3a3389bab58c3f09686aabc80e0f51809cc7d48f062ef5964ce68d6fbcac568edf151e59fe50b33c4c074636e5b1") socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x8, 0x4, [0x2, 0xf4, 0x9, 0x3e]}, &(0x7f00000003c0)=0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000140)) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x1, 0xfff, 0xa2e7}, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x6}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r4, 0x9}, &(0x7f0000000480)=0x8) ioctl$VT_ACTIVATE(r3, 0x5606, 0x3) [ 316.809331] binder: 13974:13977 got transaction with invalid offsets ptr [ 316.819608] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) [ 316.859292] binder: 13974:13977 transaction failed 29201/-14, size 0-58 line 3001 03:33:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80883) r4 = dup(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e20, 0x27e, @remote, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000140)={0x7ffffffff000, 0xff5a, 0xfa00, {&(0x7f00000000c0), r5}}, 0xffffffffffffff10) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0xfffffffc}, 0x2) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhci\x00', 0x2, 0x0) r7 = add_key(&(0x7f0000000500)='.dead\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="0121403a924f4c8ba29b5b910db14af5cc7857ea1a0da9f1ac0ba285d04686e108be385d7beccd2e4cfcb3785464b911c1d60a784c02195823e79794af56f2da1518026ddf4f26c87a4c", 0x4a, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r7) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000580)=0x15200, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x1000}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xdc, 0xff, 0x4}, &(0x7f00000003c0)=0x10) r9 = shmget$private(0x0, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) shmat(r9, &(0x7f0000002000/0x2000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000400)={r8, 0x8001, 0x8, 0x401}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x3f, 0x0, 0x9}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={r10, 0x1}, &(0x7f0000000380)=0x8) [ 316.908175] binder: undelivered TRANSACTION_ERROR: 29201 03:33:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 317.058536] binder_alloc: 13994: binder_alloc_buf, no vma [ 317.087941] binder: 13994:13995 transaction failed 29189/-3, size 0-24378 line 2973 03:33:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x2, 0x8, 0x101}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04010000008b00ddb8460900ffb25b4802938207d9033780398d5375c51640939029ef0702f295136f8f6575eb353c72e475f7fd54482c03ac4db096404b4de6116f32f59d55f0147dcbb2fa3bf1fffba371917c4d7e26bd2f39d1dc1f7d99b0fd60d9a3", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200000800, 0x20000000012, @local}, 0x1c) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8001, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x2, 0x3f}, 'port0\x00', 0x0, 0x812, 0x100, 0x7, 0xe3, 0x0, 0x4, 0x0, 0x4, 0x2b52}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x5862, 0x6, 0x8, 'queue0\x00', 0x8}) 03:33:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) [ 317.119307] binder: undelivered TRANSACTION_ERROR: 29189 [ 317.200467] misc userio: Invalid payload size 03:33:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:53 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) io_setup(0x6e0a, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r1, 0x0, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000100)={r2, r3+10000000}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) ftruncate(r0, 0xb4) [ 317.267113] misc userio: The device must be registered before sending interrupts 03:33:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x18, @mcast2}, 0x80, &(0x7f0000000180)}, 0x0) r1 = accept(r0, 0x0, &(0x7f00000000c0)) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e24}, 0x10) ioctl$void(r0, 0xc0045878) [ 317.337270] binder_alloc: 14011: binder_alloc_buf, no vma [ 317.342938] binder: 14011:14012 transaction failed 29189/-3, size 0-24378 line 2973 [ 317.366187] misc userio: Invalid payload size [ 317.373694] misc userio: The device must be registered before sending interrupts 03:33:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_WIE_ON(r1, 0x700f) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0)=""/218, &(0x7f0000000080)=0xda) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r2, &(0x7f0000000080), &(0x7f0000000600)}, 0x20) bind$vsock_dgram(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) sendfile(r2, r0, 0x0, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x3eec0e372a0b70e5) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000082) 03:33:53 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 317.410711] binder: undelivered TRANSACTION_ERROR: 29189 03:33:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x44}}, 0x0) setrlimit(0xd, &(0x7f0000000000)={0x3, 0xd30}) 03:33:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x700) 03:33:54 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:54 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000013c0), 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0xfffffffffffffffd, 0xa49d9cc0f084c306) syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x400, 0xc0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x77, 0x80000) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xfffffffffffffff8, 0x40) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x109000, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x5, 0x840) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) accept$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)="72646d612e63757272656e74e0", 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x8}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x7fff, @mcast1, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, [], 0x12}}], 0xc4) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001400090100000000000080000a000000", @ANYRES32=r3, @ANYBLOB="1400060000000000bbf1ffff000000eb6c4745c6693de17a914ec301ac000000000014000100fe80000000db03e3c8b67c38bac3e100000000000000000000aa"], 0x40}}, 0x0) 03:33:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a040007000000000413002d54036205001afbff030000001000e0c90002000043737bb7bf578b3e008000000000f0ff00000000000000"], 0xffffff9f}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3fffe99, 0x0) [ 317.608700] netlink: 'syz-executor1': attribute type 1 has an invalid length. 03:33:54 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x5, 0x2, 0xffffffffffff0001, 0x5}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 317.668614] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 317.669242] binder_alloc: 14045: binder_alloc_buf, no vma [ 317.675932] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 317.693971] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 317.734898] binder: 14045:14047 transaction failed 29189/-3, size 0-24378 line 2973 [ 317.742210] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 317.754780] netlink: 'syz-executor1': attribute type 4 has an invalid length. 03:33:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1e00) 03:33:54 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x20014006) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0xfffffffffffffffd, &(0x7f0000000500)={@empty, @rand_addr=0x3, r3}, 0xc) [ 317.785333] binder: undelivered TRANSACTION_ERROR: 29189 03:33:54 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0004f9", @ANYBLOB="04002b0003000000151ff28a3a088e7fc6b5d0771735e30abeaf485f9f0ca2e33bf2e9dd40b3ce4cee6d5b6c83b397edbc4c14f09f8b24fbd4caeb161fd895b1b2272a9440e1466ea3878a970200ed6d6a71d92555dfc83b4098720000000000020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@mpls_getnetconf={0x1c, 0x52, 0x3, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x321}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = memfd_create(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000340)=0x5) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x8000) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000200)={0x80000001, 0x3, 0x80000000, 0x10001, "b884231ccffba773c61aca2199401528af8206f742a446ced77d1b854dda4697"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0\x00', r1}) 03:33:54 executing program 0: rt_sigprocmask(0xfffffffffffffffc, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/36) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000400)={{}, 'port1\x00'}) 03:33:54 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='\'']}) [ 317.977470] binder_alloc: 14078: binder_alloc_buf, no vma [ 318.016727] binder: 14078:14082 transaction failed 29189/-3, size 0-24378 line 2973 03:33:54 executing program 1: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300), &(0x7f0000000200)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000800), &(0x7f0000000880)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000003c0)={{}, {0xa, 0x0, 0x0, @local}}, 0x5c) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 03:33:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000070000008612b75efeddcd0c17ab9b04787c00ff7f040003000000009273640000000da2f09122d20ed0"], 0x32}}], 0x1, 0x0) 03:33:54 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0x3ff, 0x0, 0x9, 0x1, 0x7}, 0x14) [ 318.069576] binder: undelivered TRANSACTION_ERROR: 29189 03:33:54 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000) 03:33:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080), 0x3a0) 03:33:54 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x100000001, 0x12) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f00000000c0), 0x0) 03:33:54 executing program 3: prctl$intptr(0x1d, 0xfffffffffffff0c5) prctl$getreaper(0x40400000000001e, &(0x7f0000000000)) [ 318.280359] binder_alloc: 14112: binder_alloc_buf, no vma [ 318.316913] binder: 14112:14114 transaction failed 29189/-3, size 0-24378 line 2973 03:33:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="467176b1efd1a6400fe034072b57bbd4b8d6cb7a0f3c6dbde52206911f3b049270217d03e38d5b46278f568a2a45681eefa9e37c03d56284a319e38d251c0e7cb54af7b099ac596bdf269ea590ba91f632a055ca6df4d3c3883b594b6196e640f875e820343060b89aee9c50474370b7c1d6fce8b47e58e451fe173dbdbab9b1950077070c00d24a81f97a1126f70d447c39a17b7b49beabd56e644dd393003ddc830c4a20fe4f5f2582858c85819f203324ccaa0665b1376b4469c6aff55eafad619924111578982c3a624a910d", 0xce}], 0x1, &(0x7f00000002c0)=ANY=[]}}], 0x1, 0x0) 03:33:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x401) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r3 = accept4(r0, 0x0, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x177, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x14) [ 318.347256] binder: undelivered TRANSACTION_ERROR: 29189 03:33:54 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:54 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000140)='\x00', 0x5) clone(0x400, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x400000000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x7}, 0x8) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) sync_file_range(r0, 0xfffffffffffffffe, 0x3, 0x0) 03:33:54 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25a766070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="df", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 03:33:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) [ 318.541372] binder_alloc: 14139: binder_alloc_buf, no vma [ 318.561707] Dead loop on virtual device ip6_vti0, fix it urgently! [ 318.583873] binder: 14139:14145 transaction failed 29189/-3, size 0-24378 line 2973 03:33:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)) 03:33:55 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000040)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:55 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 318.603869] binder: undelivered TRANSACTION_ERROR: 29189 03:33:55 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x5, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/11) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000000/0x12000)=nil, &(0x7f0000000140)) 03:33:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 03:33:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'ipddp0\x00'}) [ 318.761690] binder: 14161:14162 transaction failed 29189/-22, size 0-24378 line 2834 [ 318.798053] binder: undelivered TRANSACTION_ERROR: 29189 03:33:55 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz0\x00', {0x30, 0x10000, 0x80000001, 0x2c2832e}, 0x2f, [0x7, 0xffffffffffff8000, 0xfffffffffffff23c, 0x0, 0xfed, 0x5, 0xffff, 0x1ff, 0x25, 0x200, 0x1, 0x68, 0x96, 0x7db7, 0x13, 0x3ff, 0x5, 0x5, 0xf45, 0x1000, 0x3, 0x9, 0x100000000, 0x7, 0x20000000, 0x4b, 0x101, 0x3000000000, 0x7fff, 0xfffffffffffffc01, 0x9, 0x2, 0x6, 0x7, 0x1, 0x400, 0x6, 0x6, 0x5, 0x354f, 0x39, 0x0, 0x1, 0x0, 0x2eb65e13, 0x2, 0x80, 0x4830, 0x6, 0x0, 0x3, 0x9, 0x40, 0x7fff, 0x9, 0x1f, 0x0, 0x7, 0xfffffffffffffff9, 0x5, 0x0, 0x100, 0xf873, 0x6], [0x5, 0x8, 0x7, 0xe534, 0xb01, 0x4, 0x6, 0x26b, 0x3, 0xaa6f, 0x7061, 0xfffffffffffffff7, 0x1010000000000000, 0x0, 0xef, 0x9, 0x4, 0x307facc9, 0x0, 0x7, 0x6584, 0x0, 0x8, 0x5, 0x4, 0xffffffffffffffff, 0x1f, 0xffffffffffffff4f, 0xb1e7, 0x1, 0x1, 0x3, 0x0, 0x1f, 0x3, 0xffff, 0x4, 0x40, 0x6, 0x3f, 0x0, 0x100000000, 0x9, 0x6, 0x1, 0x7ff, 0xfffffffffffffffe, 0xc4, 0x5, 0x8, 0x5, 0x4, 0x9d4, 0x2, 0x7, 0x5, 0x40, 0xfffffffffffffaa3, 0x4, 0x5a, 0x61f, 0x7, 0x8, 0x800], [0x9, 0x7ff, 0x2, 0x5, 0x3, 0x5, 0xfffffffffffffff9, 0xcd, 0x6, 0xfffffffffffffff8, 0x87d, 0x0, 0x200, 0x6, 0x1, 0x4ec3276a, 0x1ff, 0x9, 0x9, 0xb57b, 0x9, 0x9, 0x4, 0x10000, 0xfffffffffffffff7, 0x2, 0x1, 0x59, 0xc8, 0x200000000000000, 0x80, 0x4, 0x6, 0x40, 0x10000, 0x0, 0x100000000, 0x2, 0x4, 0x1f, 0xda3, 0x1ff, 0x3, 0x2, 0x101, 0x7a, 0xfffffffffffeffff, 0x1, 0x8000, 0x749c, 0x56, 0x20, 0x9, 0x4, 0x1, 0x4c3013f, 0x6809, 0x3, 0x7, 0xfffffffffffffffd, 0x6, 0xa5, 0x2, 0x2], [0x0, 0x1f, 0x6, 0x1ff, 0x800, 0x65, 0x0, 0x2, 0x8, 0x0, 0x5, 0x5, 0x7, 0xff, 0x9, 0x90, 0x1, 0xd8, 0x6, 0x3, 0x2, 0x5, 0x1, 0x0, 0x3, 0x10000, 0x2, 0x9, 0x1, 0x3f, 0x8, 0x4, 0x2, 0xb5e, 0x396, 0x1044, 0x3, 0x5, 0x7f, 0x8, 0x4, 0xfff, 0x3, 0xb0ee, 0x6, 0x0, 0x1f, 0x10000, 0x81, 0x7, 0x0, 0x1885, 0xffffffffffffff00, 0xfffffffffffffff7, 0x9, 0x29076bd0, 0x3, 0x1ff, 0x40, 0x0, 0xde90, 0x2, 0x2, 0x1]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) ftruncate(r0, 0x48d) 03:33:55 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:55 executing program 1: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x80e85411) 03:33:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1000000000000108) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_pts(r1, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x9}, 0x118) dup3(r2, r1, 0x0) readv(r2, &(0x7f00000020c0)=[{&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000d00)=""/153, 0x99}, {&(0x7f0000000fc0)=""/55, 0x37}, {&(0x7f0000001000)=""/175, 0xaf}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x6) write(r1, &(0x7f0000c34fff), 0xffffff0b) 03:33:55 executing program 5: pipe(&(0x7f0000007f40)={0xffffffffffffffff}) bind$llc(r0, &(0x7f0000007f80)={0x1a, 0x201, 0x400, 0xffffffffffffff00, 0x0, 0x3}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000002c0)=0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x9715, 0x0, 0x0, 0x0, @broadcast}, 0x10) 03:33:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 03:33:55 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:55 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000000)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() fdatasync(r0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) ftruncate(r0, 0x48d) 03:33:55 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) 03:33:55 executing program 1: r0 = msgget(0x0, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000740)=""/172) 03:33:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept(r0, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @remote}, {0x1, @link_local}, 0x0, {0x2, 0x4e21, @remote}, 'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000007c0)=@req={0x28, &(0x7f0000000800)={'ip6tnl0\x00', @ifru_hwaddr=@dev={[], 0x16}}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={0x0, 0xffffffff, 0x30, 0x4, 0x7fffffff}, &(0x7f0000000440)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000480)={r3, 0x5}, 0x8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x80000000000001f}]}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000580)={r3, @in6={{0xa, 0x4e23, 0x359b, @remote, 0x5}}, [0x40, 0x0, 0x0, 0x9aea, 0x9, 0x3, 0xc05, 0x80, 0x6, 0x9, 0x800, 0xffff, 0xffffffffffffffff, 0x1, 0x4a]}, &(0x7f0000000680)=0x100) socket(0x1, 0x3, 0xfffffffffffffff8) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @remote}, 'lo\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000a40)={@in={{0x2, 0x4e20, @local}}, 0xfffffffffffffff8, 0xfffffffeffffffff, 0x2, "b4f212cd361a96d05500fe4b56372bf3d15cbcc7bf9ad12119c3836b8fbfadbee6b31a39cdc90653e2e4970426b2fad3768e91e29f29d2de36c376506a1d8390770f23e3a07e1f7361cfd05f859dcb85"}, 0xd8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x3400}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x890e, &(0x7f0000000880)="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") r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet(r2, &(0x7f00000006c0)="e8c1b55f8f4cadfb30da24005b57a28f6ec320cd8940a3172e8d959edfa76e2defa08833d7b664343071b2d3fef91a7e32d7f6feb7ec074a250007da6e387995c2849734594d85b84e04ac101373baad52af691155178e618e6b3502387fd9c36189207f6831cc13fb4ca8a4db51ac2df12b2ef34a4a2448c8a830a638b2790cce43e5752f4b0013f4bfb5af408052cd4007bed295e59606f1d4d89ed08403eaeb770e3184e58f55ab9530bc7e684ac7b101749ef3a03b3f290d070dc9a1d4d7b6b0b08bab7ce51fc344e240c04e", 0xce, 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1, 0xff01}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)}, 0xc3}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'vcan0\x00', 0x9300}) connect(r2, &(0x7f00000012c0)=@nl=@unspec, 0x80) 03:33:56 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = getgid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) setresgid(r2, r3, r4) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x410000, 0x0) ftruncate(r0, 0x48d) 03:33:56 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:33:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25a766070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="df", 0x1, 0x40041, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 03:33:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:33:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 03:33:56 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) [ 319.689826] Dead loop on virtual device ip6_vti0, fix it urgently! [ 319.728208] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:56 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0x98}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:33:56 executing program 5: personality(0x20008) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) uname(&(0x7f00000000c0)=""/176) 03:33:56 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='\b']}) 03:33:56 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) 03:33:56 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) semop(0x0, &(0x7f0000000080), 0x1dc) 03:33:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0xa) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:33:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:33:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 03:33:56 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) 03:33:56 executing program 5: 03:33:56 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = semget$private(0x0, 0x1, 0x2) semctl$GETVAL(r1, 0x2, 0xc, &(0x7f0000000000)=""/235) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 320.127850] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:56 executing program 4: 03:33:56 executing program 5: 03:33:56 executing program 4: 03:33:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 03:33:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x200100, 0x0, 0xfffffffffffffffe, &(0x7f0000000400), 0xffffffffffffffff) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='dummy0\x00') timer_create(0x0, &(0x7f0000000140)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=""/46, &(0x7f0000000300)=0x2e) 03:33:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0xfeb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 320.564531] cgroup: fork rejected by pids controller in /syz5 03:33:57 executing program 1: 03:33:57 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x101200, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000140)={0x3, 0xef3, 0x101, 0x0, 0x4, 0x8af}) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2f9e8c75, &(0x7f0000000000)=""/251) 03:33:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:33:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 03:33:57 executing program 5: 03:33:57 executing program 4: 03:33:57 executing program 5: 03:33:57 executing program 4: [ 321.238149] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:57 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0xf000) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x44880000, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) ftruncate(r1, 0x48d) 03:33:57 executing program 5: 03:33:57 executing program 4: 03:33:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) [ 321.475149] IPVS: ftp: loaded support on port[0] = 21 [ 321.530535] IPVS: ftp: loaded support on port[0] = 21 [ 322.162381] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.169377] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.177831] device bridge_slave_0 entered promiscuous mode [ 322.225495] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.232236] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.240515] device bridge_slave_1 entered promiscuous mode [ 322.287856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 322.335909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 322.483274] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 322.534896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 322.767895] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 322.775547] team0: Port device team_slave_0 added [ 322.821593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 322.829239] team0: Port device team_slave_1 added [ 322.874329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.924692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.972743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 322.980515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.998000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.039170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.404131] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.410599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.417388] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.423900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.431912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 324.156265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.470297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.565783] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 324.664796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 324.671219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.679620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.769654] 8021q: adding VLAN 0 to HW filter on device team0 03:34:01 executing program 1: 03:34:01 executing program 5: 03:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:34:01 executing program 4: 03:34:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) 03:34:01 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000080)="00000092459da54333edecfe70949d144f6688da38515da02dbab59b256238a98534ffd9ccd31a707ca8861d1b665446908cac41e6e39286f16343b663df591e30117dd7188f971357afd279edfe18f74fb490277d83170eb5232a0d9ae4d8957255f8a9194c494096abfd", 0x100000000000001) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:34:01 executing program 4: [ 325.408768] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:01 executing program 5: 03:34:01 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ftruncate(r2, 0x48d) 03:34:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1, r2}]) 03:34:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 03:34:02 executing program 5: prctl$intptr(0x1d, 0xfffffffffffff0cd) prctl$getreaper(0x40400000000001e, &(0x7f0000000000)) 03:34:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) 03:34:02 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x8200000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:34:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="1200000000000000000000000000080000fffffdfd"]}) 03:34:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25a766070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) 03:34:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) 03:34:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) sendto$inet6(r0, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) [ 325.768410] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:02 executing program 1 (fault-call:5 fault-nth:0): sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:34:02 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x100000001, 0x4, 0x1b, {}, 0x401, 0x81}) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 03:34:02 executing program 0: rt_sigprocmask(0x20000000000000, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x11b) r0 = getpgrp(0xffffffffffffffff) ptrace$getenv(0x4201, r0, 0x5, &(0x7f00000001c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)="2f70726f632f7379732f6e65742f697076342f76ffff6261636b75705f6f6e6c79002cc905b294d1d6ae37a63981ec643b18688e2bf84bac1dd3e42982694899c0b8a650d8964d6180ae2b5e3fbafb895625da2109c625dc3334a0c9d63af0d2", 0x2, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) r2 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) listen(r2, 0x6) exit_group(0x1000000000800009) r3 = getpid() renameat2(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140032285dc800003a00080a25bd7001ffdbdf25f5f12bd0cc74f4a6293c63cec535e1d558f9f646705eea383cd2c56715c354cfe540adc9e709034e002b102f20dd7a42e591ca9747ac483aeb37557bb84793087827070c3bb248f681a992716823eafa54ce2d8b36662bf86723fd85aca0bdf613c6f183d6a07a18e97f78fb89cb9f57ed8600000000000000bbda0000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48004) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ftruncate(r2, 0x48d) [ 325.928973] dccp_invalid_packet: P.Data Offset(0) too small [ 325.934827] dccp_invalid_packet: P.Data Offset(0) too small [ 325.958348] FAULT_INJECTION: forcing a failure. [ 325.958348] name failslab, interval 1, probability 0, space 0, times 0 [ 326.012192] CPU: 1 PID: 14666 Comm: syz-executor1 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 326.020738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.030115] Call Trace: [ 326.032727] dump_stack+0x1d3/0x2c4 [ 326.036388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 326.041628] should_fail.cold.4+0xa/0x17 [ 326.045722] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 326.050852] ? graph_lock+0x170/0x170 [ 326.054671] ? print_usage_bug+0xc0/0xc0 [ 326.058750] ? graph_lock+0x170/0x170 [ 326.062585] ? find_held_lock+0x36/0x1c0 [ 326.066719] ? ttwu_stat+0x5c0/0x5c0 [ 326.070463] __should_failslab+0x124/0x180 [ 326.074716] should_failslab+0x9/0x14 [ 326.078531] kmem_cache_alloc_trace+0x2d7/0x750 [ 326.083221] ? _raw_spin_unlock+0x2c/0x50 [ 326.087396] binder_get_thread+0x255/0x880 [ 326.091651] ? binder_free_ref+0xa0/0xa0 [ 326.095734] ? ttwu_stat+0x5c0/0x5c0 [ 326.099463] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 326.105015] ? rcu_pm_notify+0xc0/0xc0 [ 326.108925] ? __might_sleep+0x95/0x190 [ 326.112917] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 326.118558] binder_ioctl+0x270/0x1940 [ 326.122468] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 326.128123] ? find_held_lock+0x36/0x1c0 [ 326.132211] ? __fget+0x4aa/0x740 [ 326.135692] ? lock_downgrade+0x900/0x900 [ 326.139871] ? check_preemption_disabled+0x48/0x200 [ 326.144919] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 326.149858] ? kasan_check_read+0x11/0x20 [ 326.154024] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 326.159318] ? rcu_softirq_qs+0x20/0x20 [ 326.163325] ? __fget+0x4d1/0x740 [ 326.166802] ? ksys_dup3+0x680/0x680 [ 326.170533] ? find_held_lock+0x36/0x1c0 [ 326.174620] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 326.179572] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 326.185238] do_vfs_ioctl+0x1de/0x1720 [ 326.189149] ? __lock_is_held+0xb5/0x140 [ 326.193229] ? ioctl_preallocate+0x300/0x300 [ 326.197650] ? __fget_light+0x2e9/0x430 [ 326.201650] ? fget_raw+0x20/0x20 [ 326.205164] ? __sb_end_write+0xd9/0x110 [ 326.209247] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 326.214802] ? fput+0x130/0x1a0 [ 326.218110] ? do_syscall_64+0x9a/0x820 [ 326.222115] ? do_syscall_64+0x9a/0x820 [ 326.226124] ? lockdep_hardirqs_on+0x421/0x5c0 [ 326.230737] ? security_file_ioctl+0x94/0xc0 [ 326.235173] ksys_ioctl+0xa9/0xd0 [ 326.238669] __x64_sys_ioctl+0x73/0xb0 [ 326.242641] do_syscall_64+0x1b9/0x820 [ 326.246572] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 326.252021] ? syscall_return_slowpath+0x5e0/0x5e0 [ 326.256967] ? trace_hardirqs_off+0x310/0x310 [ 326.261478] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 326.266516] ? recalc_sigpending_tsk+0x180/0x180 [ 326.271288] ? kasan_check_write+0x14/0x20 [ 326.275540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.280415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.285631] RIP: 0033:0x457679 [ 326.288836] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:34:02 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x100000001, 0x4, 0x1b, {}, 0x401, 0x81}) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 03:34:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) [ 326.307759] RSP: 002b:00007f92c33e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.315481] RAX: ffffffffffffffda RBX: 00007f92c33e26d4 RCX: 0000000000457679 [ 326.322752] RDX: 0000000020007000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 326.330030] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.337313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 326.344596] R13: 00000000004ce440 R14: 00000000004be99e R15: 0000000000000000 03:34:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./file2\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0xffffffffffffff21}, 0x1003f) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0xffc1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000980)=ANY=[]) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)) truncate(&(0x7f0000000280)='./file2\x00', 0x5) ioctl$FUSE_DEV_IOC_CLONE(r2, 0xc028660f, &(0x7f0000000040)) [ 326.397320] binder: 14664:14666 ioctl c0306201 20007000 returned -12 03:34:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:34:03 executing program 1 (fault-call:5 fault-nth:1): sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:34:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40100000003, 0x87) sendto$inet6(r0, &(0x7f0000000080), 0xfc00, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000001700)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000001940)={@multicast2, @loopback}, &(0x7f0000001980)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000003b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003d40)={'team0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003e80)=0x14) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000040c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004100)=0x14, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004140)={{{@in6=@loopback, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000004240)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000044c0)={'rose0\x00'}) accept4(0xffffffffffffffff, &(0x7f0000004680)=@ll, &(0x7f0000004700)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004800)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000004840)={'vcan0\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000004880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000048c0)=0x14, 0x80800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00', 0x10) getpeername(0xffffffffffffffff, &(0x7f0000004b00)=@xdp, &(0x7f0000004b80)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004d00)={'bond_slave_1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f0000007480)=@generic, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007500)=""/74, 0x4a}], 0x1, &(0x7f0000007700)=""/131, 0x83}}], 0x1, 0x100, &(0x7f0000008d00)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009900)={{{@in=@rand_addr, @in6=@mcast1}}, {{}, 0x0, @in6}}, &(0x7f0000009a00)=0xe8) 03:34:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) 03:34:03 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000040)={0x8}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x5, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/242) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 326.682125] FAULT_INJECTION: forcing a failure. [ 326.682125] name failslab, interval 1, probability 0, space 0, times 0 [ 326.712245] CPU: 0 PID: 14693 Comm: syz-executor1 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 326.720765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.730129] Call Trace: [ 326.730157] dump_stack+0x1d3/0x2c4 [ 326.730191] ? dump_stack_print_info.cold.2+0x52/0x52 [ 326.741593] ? graph_lock+0x170/0x170 [ 326.745420] should_fail.cold.4+0xa/0x17 [ 326.749509] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 326.754640] ? find_held_lock+0x36/0x1c0 [ 326.758713] ? graph_lock+0x170/0x170 [ 326.762527] ? binder_transaction+0x6d6/0x7b50 [ 326.767146] ? graph_lock+0x170/0x170 [ 326.770958] ? check_noncircular+0x20/0x20 [ 326.775206] ? find_held_lock+0x36/0x1c0 [ 326.779299] ? ttwu_stat+0x5c0/0x5c0 [ 326.783036] __should_failslab+0x124/0x180 [ 326.787279] should_failslab+0x9/0x14 [ 326.791094] kmem_cache_alloc_trace+0x2d7/0x750 [ 326.795787] ? _raw_spin_unlock+0x2c/0x50 [ 326.799948] binder_transaction+0xb2f/0x7b50 [ 326.804373] ? print_usage_bug+0xc0/0xc0 [ 326.808449] ? __lock_acquire+0x7ec/0x4ec0 [ 326.812693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.818236] ? print_usage_bug+0xc0/0xc0 [ 326.822305] ? select_task_rq_fair+0x3590/0x3590 [ 326.827100] ? binder_thread_release+0x680/0x680 [ 326.831872] ? __lock_acquire+0x7ec/0x4ec0 [ 326.836131] ? print_usage_bug+0xc0/0xc0 [ 326.840208] ? print_usage_bug+0xc0/0xc0 [ 326.844285] ? __lock_acquire+0x7ec/0x4ec0 [ 326.848537] ? __lock_acquire+0x7ec/0x4ec0 [ 326.852780] ? print_usage_bug+0xc0/0xc0 [ 326.856857] ? mark_held_locks+0x130/0x130 [ 326.861120] ? mark_held_locks+0x130/0x130 [ 326.865362] ? graph_lock+0x170/0x170 [ 326.869172] ? check_noncircular+0x20/0x20 [ 326.873421] ? mark_held_locks+0x130/0x130 [ 326.877667] ? find_held_lock+0x36/0x1c0 [ 326.881749] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 326.886863] ? graph_lock+0x170/0x170 [ 326.890673] ? print_usage_bug+0xc0/0xc0 [ 326.894747] ? __wake_up_common_lock+0x1d0/0x330 [ 326.899542] ? graph_lock+0x170/0x170 [ 326.903362] ? print_usage_bug+0xc0/0xc0 [ 326.907433] ? print_usage_bug+0xc0/0xc0 [ 326.911497] ? do_raw_spin_lock+0xc1/0x200 [ 326.915742] ? find_held_lock+0x36/0x1c0 [ 326.919816] ? __might_fault+0x12b/0x1e0 [ 326.923909] ? lock_downgrade+0x900/0x900 [ 326.928068] ? lock_release+0x970/0x970 [ 326.932063] ? ttwu_stat+0x5c0/0x5c0 [ 326.935809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.941354] ? check_preemption_disabled+0x48/0x200 [ 326.946395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.951935] ? _copy_from_user+0xdf/0x150 [ 326.956111] binder_thread_write+0xa03/0x2990 [ 326.960643] ? binder_free_buf+0x640/0x640 [ 326.964903] ? graph_lock+0x170/0x170 [ 326.968737] ? __save_stack_trace+0x8d/0xf0 [ 326.973091] ? find_held_lock+0x36/0x1c0 [ 326.977177] ? __might_fault+0x12b/0x1e0 [ 326.981249] ? lock_downgrade+0x900/0x900 [ 326.985407] ? lock_release+0x970/0x970 [ 326.989386] ? ttwu_stat+0x5c0/0x5c0 [ 326.993115] ? find_held_lock+0x36/0x1c0 [ 326.997206] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 327.002747] ? _copy_from_user+0xdf/0x150 [ 327.006907] binder_ioctl_write_read.isra.42+0x306/0xb90 [ 327.012381] ? kasan_check_read+0x11/0x20 [ 327.016537] ? binder_thread_read+0x4920/0x4920 [ 327.021223] ? _raw_spin_unlock+0x2c/0x50 [ 327.025382] ? _binder_inner_proc_unlock+0x3f/0x80 [ 327.030319] ? binder_get_thread+0x1b6/0x880 [ 327.034738] ? binder_free_ref+0xa0/0xa0 [ 327.038814] ? ttwu_stat+0x5c0/0x5c0 [ 327.042542] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 327.048092] ? rcu_pm_notify+0xc0/0xc0 [ 327.052004] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 327.057635] binder_ioctl+0xab0/0x1940 [ 327.061540] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 327.067170] ? find_held_lock+0x36/0x1c0 [ 327.071245] ? __fget+0x4aa/0x740 [ 327.074710] ? lock_downgrade+0x900/0x900 [ 327.078872] ? check_preemption_disabled+0x48/0x200 [ 327.083896] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 327.088830] ? kasan_check_read+0x11/0x20 [ 327.092983] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 327.098277] ? rcu_softirq_qs+0x20/0x20 [ 327.102287] ? __fget+0x4d1/0x740 [ 327.105768] ? ksys_dup3+0x680/0x680 [ 327.109489] ? find_held_lock+0x36/0x1c0 [ 327.113560] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 327.118502] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 327.124142] do_vfs_ioctl+0x1de/0x1720 [ 327.128038] ? __lock_is_held+0xb5/0x140 [ 327.132118] ? ioctl_preallocate+0x300/0x300 [ 327.136531] ? __fget_light+0x2e9/0x430 [ 327.140528] ? fget_raw+0x20/0x20 [ 327.143989] ? __sb_end_write+0xd9/0x110 [ 327.148063] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 327.153619] ? fput+0x130/0x1a0 [ 327.156909] ? do_syscall_64+0x9a/0x820 [ 327.160912] ? do_syscall_64+0x9a/0x820 [ 327.164921] ? lockdep_hardirqs_on+0x421/0x5c0 [ 327.169518] ? security_file_ioctl+0x94/0xc0 [ 327.173940] ksys_ioctl+0xa9/0xd0 [ 327.177404] __x64_sys_ioctl+0x73/0xb0 [ 327.181300] do_syscall_64+0x1b9/0x820 [ 327.185193] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 327.190562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 327.195501] ? trace_hardirqs_off+0x310/0x310 [ 327.200003] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 327.205026] ? recalc_sigpending_tsk+0x180/0x180 [ 327.209800] ? kasan_check_write+0x14/0x20 [ 327.214047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.218937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.224153] RIP: 0033:0x457679 [ 327.227354] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 327.246275] RSP: 002b:00007f92c33e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.253993] RAX: ffffffffffffffda RBX: 00007f92c33e26d4 RCX: 0000000000457679 [ 327.261265] RDX: 0000000020007000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 327.268559] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 327.275826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 327.283131] R13: 00000000004ce440 R14: 00000000004be99e R15: 0000000000000001 03:34:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:34:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) [ 327.547549] binder_transaction: 2 callbacks suppressed [ 327.547580] binder: 14690:14693 transaction failed 29201/-12, size 0-24378 line 2913 [ 327.561318] binder_release_work: 2 callbacks suppressed [ 327.561326] binder: undelivered TRANSACTION_ERROR: 29201 03:34:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:34:04 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x4b}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x2, @loopback, 0x6}}, 0x6, 0x9}, &(0x7f00000001c0)=0x90) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x100048d) flistxattr(r1, &(0x7f0000000040)=""/237, 0xed) 03:34:04 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) dup(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x10, r1) ptrace(0x420b, r1) 03:34:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:34:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) 03:34:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) [ 327.946383] binder_alloc: 14737: binder_alloc_buf size 24384 failed, no address space [ 327.966637] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 327.977930] binder: 14737:14739 transaction failed 29201/-28, size 0-24378 line 2973 03:34:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) [ 327.991630] binder: undelivered TRANSACTION_ERROR: 29201 03:34:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 328.036795] device bridge_slave_1 left promiscuous mode [ 328.042437] bridge0: port 2(bridge_slave_1) entered disabled state 03:34:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 328.097480] device bridge_slave_0 left promiscuous mode [ 328.114549] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.121936] IPVS: ftp: loaded support on port[0] = 21 [ 328.161072] binder: BINDER_SET_CONTEXT_MGR already set [ 328.176262] binder: 14753:14757 ioctl 40046207 0 returned -16 03:34:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2020000000009) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001840), 0x400000000000093, 0x0, 0x0) 03:34:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) 03:34:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 328.208188] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 328.298184] binder: BINDER_SET_CONTEXT_MGR already set [ 328.314792] binder: 14764:14767 ioctl 40046207 0 returned -16 [ 328.337099] team0 (unregistering): Port device team_slave_1 removed 03:34:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 328.358873] team0 (unregistering): Port device team_slave_0 removed [ 328.374089] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 328.443533] binder: BINDER_SET_CONTEXT_MGR already set [ 328.450614] binder: 14774:14777 ioctl 40046207 0 returned -16 [ 328.457964] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 328.554721] bond0 (unregistering): Released all slaves [ 329.328146] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.334643] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.342260] device bridge_slave_0 entered promiscuous mode [ 329.390462] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.396992] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.404453] device bridge_slave_1 entered promiscuous mode [ 329.452838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 329.498892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 329.644765] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.693318] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 329.742494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 329.749448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.797394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 329.804260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.946753] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 329.954295] team0: Port device team_slave_0 added [ 330.002922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 330.010533] team0: Port device team_slave_1 added [ 330.051693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.085417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.115689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 330.123879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.132153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.179686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 330.187302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.205206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.532043] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.538735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.545346] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.551856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.559698] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 330.626357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.580820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.691704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 331.791178] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 331.797930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.805133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.908037] 8021q: adding VLAN 0 to HW filter on device team0 03:34:08 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x80, 0x2, &(0x7f0000000000)=0x6}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), 0x8) 03:35:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x8, 0x101000) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file0\x00', 0x10010) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xc) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/184, 0xb8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000080)={0x3, 0x1ff}) 03:35:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) 03:35:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:04 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="6194bcc9894f2a2621bf6d82cfdc0241323508e7", 0x14}, {&(0x7f0000000040)="eb20f7ec184f1cffab90e030ace6868e41fa5488c5ef73d12badbf30476158ff41c5e09d59589da32a3d1779acb6812da3cddb7228e89bea659ec8c019feb5611263c9110c55be9005bcad751c82949f0d761e324d7fbc36f6c5c4aa23216178f790e96d9f6e5f01e7ad3b1143063073b5dcf5456325529a97d7199ccda27f92afd0ba50cd71b4cafcfe8663cde60a373af10504dcdf6eb31de79702fa63f7ce8e73c66e15470e5302cf37187f738465694909a08200f855cf17a0bf0ff8c4a1c81c7e14ff625285e6ad", 0xca}], 0x2, 0x0) ftruncate(r0, 0x48d) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x8440) 03:35:04 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6608, 0x800) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2010fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) [ 388.328711] binder: BINDER_SET_CONTEXT_MGR already set [ 388.344505] binder: 15047:15051 ioctl 40046207 0 returned -16 03:35:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306258, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 388.378150] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:04 executing program 4: 03:35:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 388.521380] binder: 15066:15067 ioctl c0306258 20007000 returned -22 [ 388.564442] binder: BINDER_SET_CONTEXT_MGR already set 03:35:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1700) 03:35:05 executing program 4: [ 388.601700] binder: 15066:15075 ioctl 40046207 0 returned -16 [ 388.649286] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 388.652993] binder: 15066:15067 ioctl c0306258 20007000 returned -22 [ 390.214695] IPVS: ftp: loaded support on port[0] = 21 [ 390.496623] device bridge_slave_1 left promiscuous mode [ 390.502303] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.556918] device bridge_slave_0 left promiscuous mode [ 390.562397] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.754058] team0 (unregistering): Port device team_slave_1 removed [ 392.765095] team0 (unregistering): Port device team_slave_0 removed [ 392.775072] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 392.819904] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 392.881505] bond0 (unregistering): Released all slaves [ 393.382340] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.388883] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.396367] device bridge_slave_0 entered promiscuous mode [ 393.442997] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.449520] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.457415] device bridge_slave_1 entered promiscuous mode [ 393.502409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 393.548416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 393.688298] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 393.742293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 394.006385] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 394.014266] team0: Port device team_slave_0 added [ 394.068252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 394.076947] team0: Port device team_slave_1 added [ 394.127528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 394.135016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.156341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.200150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.248391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 394.255837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.267041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.301865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 394.308970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.318771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.716842] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.723261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.729954] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.736381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.743967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 394.956611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.725812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.817162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 395.908783] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 395.914991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.923234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.013068] 8021q: adding VLAN 0 to HW filter on device team0 03:35:13 executing program 4: 03:35:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r2}) ftruncate(r0, 0x48d) 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 03:35:13 executing program 5: 03:35:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:13 executing program 4: [ 396.678074] binder: 15358:15359 ioctl c0306263 20007000 returned -22 [ 396.715049] binder: BINDER_SET_CONTEXT_MGR already set 03:35:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x1, 0x1000, 0x9, 0xff, 0x1, 0x3}) [ 396.721903] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:13 executing program 5: [ 396.766418] binder: 15358:15365 ioctl 40046207 0 returned -16 03:35:13 executing program 0: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:13 executing program 4: shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffd000/0x1000)=nil) 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x19) 03:35:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:13 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0xe80}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 03:35:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x800100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x48d) 03:35:13 executing program 4: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300), &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000005c0)=""/159) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) prctl$intptr(0x1d, 0xfffffffffffffd89) prctl$intptr(0x1e, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @broadcast}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syzkaller1\x00'}) 03:35:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x6) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ftruncate(r2, 0x48d) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x3, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:35:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) [ 397.057410] binder: 15399:15401 ioctl c0306225 20007000 returned -22 [ 397.107816] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 397.136168] binder: BINDER_SET_CONTEXT_MGR already set 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) 03:35:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpgid(0x0) waitid(0x1, r1, &(0x7f0000000080), 0x1, &(0x7f00000000c0)) socketpair(0xa, 0x80003, 0x8, &(0x7f0000000040)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) setpgid(r2, r2) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000680)="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") syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') personality(0x0) 03:35:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 397.165514] binder: 15399:15411 ioctl 40046207 0 returned -16 03:35:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0xfdfdffff, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "bcfe536e6708a452cbc800002000"}) 03:35:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 397.281994] binder: BINDER_SET_CONTEXT_MGR already set 03:35:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) sched_getscheduler(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x21d, 0x1, 0x3, 'queue1\x00', 0x1}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfffffffffffffffb, &(0x7f0000000680)=""/4096) ftruncate(r0, 0x48d) 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) [ 397.349267] binder: 15426:15428 ioctl 40046207 0 returned -16 03:35:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 397.428683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 397.510185] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 397.535120] binder: BINDER_SET_CONTEXT_MGR already set [ 397.540810] binder: 15460:15463 ioctl 40046207 0 returned -16 03:35:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x78}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x688a) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000180)=""/242, 0xf2}], 0x90a29f227652e4c8, 0xfffffffffffffffc) 03:35:14 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0xc00, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)={r1, 0x0, 0x1, [0x9d]}, 0xa) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000100)={0x81, 0x1000, 0x1, 0x1}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0xc4002, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040)=0x390b, &(0x7f0000000080)=0x4) r4 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x40180000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) ftruncate(r4, 0x48d) 03:35:14 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 03:35:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 397.917782] cgroup: fork rejected by pids controller in /syz4 [ 397.959909] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 397.997917] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:14 executing program 4: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x890e, &(0x7f00000002c0)="025cc83d6d345f8f7620701a6f4fabfd67e74d2b4fa17538aee7dacd835a261cc7df232da7cfbed8b0b048a44f38df21a133d5060000009192d3c3369e4b7379e8375c885094423869d92f000000000000000024c61d4c4dc9fd8bb270c494adfda824d0f4") getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xfffffffffffffffd, 0x6, 0x6}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x40000) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000140)={0x0, 0x81, 0x2}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, r0/1000+10000}}, &(0x7f0000000200)) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, &(0x7f000002c000)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0xc8, 0x0, 0x2, [{{0x5, 0x3, 0x8, 0x1, 0x6, 0x3c7, {0x1, 0x20, 0x4, 0x7, 0xffffffffffff8f45, 0x8676, 0x400, 0x5eb, 0x0, 0x4, 0x0, r4, r5, 0x5, 0x101}}, {0x6, 0xc5f6, 0x1d, 0x7ff, 'loem1lobdevvboxnet0(trusted.{'}}]}, 0xc8) [ 398.014186] binder: BINDER_SET_CONTEXT_MGR already set [ 398.027777] binder: 15480:15487 ioctl 40046207 0 returned -16 03:35:14 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 398.073374] IPVS: ftp: loaded support on port[0] = 21 03:35:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0x0, 0x408001) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) fallocate(r0, 0x3, 0x0, 0xfff9) 03:35:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) [ 398.264474] binder: BINDER_SET_CONTEXT_MGR already set [ 398.275536] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 398.276060] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 398.309126] binder: 15505:15509 ioctl 40046207 0 returned -16 03:35:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 398.500872] IPVS: ftp: loaded support on port[0] = 21 [ 398.549017] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:17 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) membarrier(0x40, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:17 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) 03:35:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x6) 03:35:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 400.653459] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 400.681023] binder: BINDER_SET_CONTEXT_MGR already set 03:35:17 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffd7) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 400.707843] binder: 15527:15538 ioctl 40046207 0 returned -16 03:35:17 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xa4160e830264e0c8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200000, 0xb2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{0x6, 0x1000}, 'port0\x00', 0x0, 0x4, 0x400, 0x7, 0x7, 0x101, 0x94b2, 0x0, 0x2, 0x5}) ioprio_set$uid(0x3, r0, 0xffff) 03:35:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) [ 400.834790] binder: BINDER_SET_CONTEXT_MGR already set 03:35:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:17 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000100)="451d3c2d8000563e4a5c59bbc63c2fabf6aeada1a66628d14091548dfc4e757c693160b7bcde864af5f859face67e87bf021470a54157a87684539a88176121456e1c8970547bac7e2d39e6418992b18d00a613517fb886c60f13d586be0f530", 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 400.888854] binder: 15552:15555 ioctl 40046207 0 returned -16 03:35:17 executing program 4: mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002bc0)='overlay\x00', 0x0, &(0x7f0000002c40)={[{@xino_on='xino=on'}, {@index_on='index=on'}, {@metacopy_on='metacopy=on'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "4d86572043b9b92ec84a9eae092489a8b5c52a1a1677cdc00dcff624cabab376fcde5fe3ad121c411f847819b489ad7240249e6d24921d17e9d1b8b9fe64e9ca49296855022295435847950ad5ae2f884c9524d35e3d5cfe97eec999377b7494e5e5572cbeb4e25aff76e04e937dab0fd3507d9d0c66b1836d085383ebf97f47510334b487c981e5a05f13de33d82ac4ee33b92e741cd26f2abe35dd8093986b0143e642214b7bb6a18be34645658c91ca098a3cdc9e740a9209f7d143eee0ec8392049aee99a0c842f5c389170a4beecd083e2f170e157761f18b078b9f05cedcae290f4e2aa15a0fdaf2a58a"}, 0xf1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101401, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x2, 0x1, 0xffffffffffffff80, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) 03:35:17 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001fe8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x142, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, r3, 0x3}, 0xc) [ 401.078482] binder: BINDER_SET_CONTEXT_MGR already set [ 401.084115] binder: 15581:15584 ioctl 40046207 0 returned -16 03:35:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:17 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0x3}, 0x0, 0x0) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x600) 03:35:17 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 03:35:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00', r3}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000001c0)=0xc) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES32=r4, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) 03:35:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:18 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) 03:35:18 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) rt_sigpending(&(0x7f0000000080), 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ftruncate(r0, 0x48d) [ 401.551252] binder: BINDER_SET_CONTEXT_MGR already set [ 401.581404] binder: 15599:15612 ioctl 40046207 0 returned -16 03:35:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000001c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) accept$alg(r3, 0x0, 0x0) 03:35:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:18 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x300) 03:35:18 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:18 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 401.821438] binder: BINDER_SET_CONTEXT_MGR already set 03:35:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 401.873689] net_ratelimit: 4 callbacks suppressed [ 401.873700] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140)=0x2a, 0x4) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) [ 401.921176] binder: 15636:15642 ioctl 40046207 0 returned -16 03:35:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 03:35:18 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:18 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)="e200", 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = getpid() setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) fallocate(r0, 0x61, 0x401, 0x9cd2) sysinfo(&(0x7f00000000c0)=""/222) 03:35:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 03:35:18 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000680)=""/75) sync() ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="425cc80700") r1 = socket(0x10, 0x802, 0x0) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x101001) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={"69705f76746930000000dfff00", 0x4000}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000540)=0x401) ioctl$LOOP_CLR_FD(r2, 0x4c01) sendto$inet6(r1, &(0x7f0000000580)="c294b27fc8abb96297d11b43aec50ddbf16b5b6defcfe9390842651a67c786c8b534a038018c7280a239da0dbbd583d858c47dd01278e70f85ffdd154a24d605953d51d9062879ccb55693f7284140339299e2381d3f0d5c8c2ab5daea7daae241c3487710295c95b423c6f4d9bffc15f76dd8828e244f8e388fd9b12401e893b0017a81a4f307f3638b4e0ebee0972e7f88e718da30cbafe7e9d29775f7d28447a45c7aa7be22de4101aee678c880b8fb22fb62e24b8dc69b8ebdc4", 0xbc, 0x8000, &(0x7f0000000640)={0xa, 0x4e22, 0x4, @ipv4, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000700)={0x4}, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x8, 0x500000000000000, 0x2, 0x1000}, {0x1, 0x0, 0x3800000000, 0x2}, {0x4, 0x8, 0x0, 0xfffffffffffffffd}, {0x9, 0x3, 0x5, 0x3}]}, 0x10) fcntl$notify(r1, 0x402, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x3, 0x2, 0x6, 0x10000, 0x4, 0x9}) getcwd(&(0x7f00000000c0)=""/86, 0x56) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000340)=""/160) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) execveat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000280)='K@/}\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='ip_vti0\x00', &(0x7f00000004c0)='ip_vti0\x00'], 0x1800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@mcast2, 0x1, 0x3, 0x2, 0x4, 0x1, 0x7, 0xd98}, &(0x7f0000000780)=0x20) [ 402.139171] binder: 15669:15670 ioctl c0306202 20007000 returned -22 [ 402.153196] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 402.177562] binder: BINDER_SET_CONTEXT_MGR already set 03:35:18 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:18 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r1, r2, &(0x7f0000000180), 0x100000001) r3 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ftruncate(r3, 0x48d) [ 402.206737] binder: 15669:15677 ioctl 40046207 0 returned -16 [ 402.230461] binder: 15669:15670 ioctl c0306202 20007000 returned -22 03:35:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x16) [ 402.378889] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:18 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 402.473305] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:19 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x200, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000280)) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000640)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x803, 0x0) r3 = getpid() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0xd, r4}, 0x50) sendmmsg$inet_sctp(r2, &(0x7f0000871fc8), 0x71, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x300000000, 0x92da, 0x1, 0x7f, 0x0, 0x0, 0x15110, 0xb, 0x40, 0x0, 0x2, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x8001, 0x9, 0x2a7, 0x0, 0x7, 0x0, 0x2e2, 0x0, 0xffffffffffff7fff, 0x544, 0x9, 0x4, 0x0, 0x8000, 0x0, 0x28, 0x1ff, 0x9, 0x5, 0x218b, 0x7a, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1ff}, 0x2, 0xfffffffffc79b272, 0x9aa, 0x6, 0x0, 0x5, 0xffff}, r3, 0x0, r1, 0x1) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x8, 0x6, 0x3f0}) perf_event_open(&(0x7f0000000440)={0x7, 0x70, 0x0, 0x0, 0xda3, 0x5, 0x0, 0xfff, 0x89, 0x1, 0x7f, 0x7fffffff, 0x7, 0x72bad64, 0x7, 0x3ff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xff, 0x5, 0xd2b, 0x4, 0x6, 0x5, 0x800, 0xe5, 0x0, 0x97, 0x9, 0x38b, 0x20, 0x0, 0x7fff, 0x0, 0x10000, 0x2, @perf_config_ext={0x1, 0x400}, 0x2280, 0x7, 0x80, 0x0, 0x100000000, 0x4, 0x9}, r3, 0xd, r5, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={r4, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x1506b110}, 0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="7c5cb3bbe23d7e992e809cece356c011511496010d03a2b92d32d971", 0x1c}], 0x1, &(0x7f0000000b40)=ANY=[], 0x0, 0x4000800}, 0x10) [ 402.651508] binder: 15707:15711 ioctl c0306209 20007000 returned -22 [ 402.724030] binder: BINDER_SET_CONTEXT_MGR already set 03:35:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 402.760783] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:19 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000800)=0x451) write$P9_RLCREATE(r0, &(0x7f0000000840)={0xff12, 0xf, 0x2, {{0x8, 0x4, 0x3}, 0x100000000}}, 0xe5) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) r3 = inotify_add_watch(r1, &(0x7f0000000900)='./file0\x00', 0x0) inotify_rm_watch(r2, r3) r4 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000100)="7f6e222f44afd5289ca55a8d9a3e7ca756d2032f3e5427f033179cbee9d07ba4477c2b59", 0x24, 0x81}, {&(0x7f0000000240)="e65e445da989e672e9aba24b6b73314e7833c4975bab27769f9935ca694226244c2457235e74f407740cb1c435924e6539d749f6db00d4bd8e11964960d255b8a9140ec6d3f98c3cd62794f72bf5cda3c055647730ae44cffd8c782889de99e9c2d7b91285d3e8e57ac0d7d5a4c587f2757a90b3bcf475b7006edc12f2d93ddb46c89aa912a49af70ce53e2c39eb3683bed65ed199243a87b55ada412f25f05405ab193ae01c4615d20da72ba4c83cc06902340461c75a43ccd5f8cd730ae34024a83d472639d5b8919213df6fbdfb4ca93234a93ef0aba2661f558681c445a8903ee41f401eb10b", 0xe8, 0x1f}, {&(0x7f0000000340)="d2bbcd5d5a64c51748ffb5157c3cde21323f14cdda2d194390463dcf9c477c03d99d76d628caae9146720e3fe49f8be16600cb11765ccedfd49592ef84a2bfae3c09c2d75d29958da61d4ee6bf97c3420025d50840d79c7f50af48b2ec8c3d9ad2ca79accb3357c39f5e90bb7b91093b917cf21bb36d16e10732106c7d8547227b0850ccacf659e2278c3494d71632a67f0c7b1fdd56f8e602916c32a1e1ab6aca9af9e3fa608f91fc7ca2f17ba72beb4d760632452ed2e9e83ceaadd5b23464ab54cc44031bc0960eecf2be553584e2fe82fc57ec9cf13ac17093c0f2f7f014918b36eb6f98195157a22dd4622843ad2b", 0xf1, 0x3}, {&(0x7f0000000140)="c8c83081dd70f7f26336857535a8b55e93e5380f7cef7e3e7f216ed1be5ea2b89d0143b683028103ce2d61197b068a15277797d82a082146cd235e8785bc8a407f3ad9d16ffd308406e56fee40ba0ca408713bec7d1fe13c5593dcc5069b7dbd7dd934eba4a8683fe648a10161007edc1ebd79e487d5729cde307403933e1c0366eac903edca0a3c0028d89e432a0caf16d29c5293a1d26b799e67c4c0b36a6594ebc2c7e33d500af075e77cf49ae50a7c4cf23e87598abf78906df3703737b7", 0xc0, 0x4d7}, {&(0x7f0000000440)="a6b577152c5f6210c5c847bf740c1dbdd9a02de995806de390b74647abff72b13ff1cda39c6016d3636dfecd3db9af3a9dda8666a4ff8f84dc180be6e6190cfdef01b51cfaa89b09f755713176a30c9d17a2bc4b7ac306bf8a014b3d5981738483362c022b77b06b754d9ac3272a4015549bef34971c2806e755d376b1547a76614f332822aa9606bb9d16188d6e6825268d9f4b37c79c4373fa110811b3f823f13729ccb3c6bd32efb12882c99b7ffb157c2e7b430f225c8c152b04d84c3a54079ccd42d0", 0xc5, 0xffffffff}, {&(0x7f0000000540)="3dcb394efb1109e145a9c120f5524f0f753b76c4ed55401082e2d1815fa77f502fc67e2753901935b9c5fedecac5f45d8af23d3926c8fbd615b6af2229c75af9fe43e05a228ef63391727d434e8fe1f0146d8a869686ccbd0da27868cd78ee2b0beed11d48c5899ef18206044eaa3707", 0x70, 0x1ff}, {&(0x7f00000005c0)="317557c037d1348f133034308706e2e485b7cd08a69622f7d8e21abd7ce189aff87ddf36d01f58036fdb6fd21e3cede8432c67448bd7b8b57600c3340985eebf55da497d1724ddaa56f1f79481e8eb73c787990d0d0bf0a5ee9a5c3655a9cbadd552f0e9904691d467f5b096cc8451c700e972b3a98597c9e01590", 0x7b, 0x12}, {&(0x7f0000000680)="4c4aa56f98dc8d585883509d4f459aabd3fdb156acb9790907b6125280", 0x1d, 0x7}], 0x20, &(0x7f0000000780)='!}(&') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) inotify_add_watch(r4, &(0x7f0000000880)='./file0\x00', 0x800) ftruncate(r4, 0x48d) [ 402.806668] binder: 15707:15711 ioctl c0306209 20007000 returned -22 [ 402.808335] binder: 15707:15715 ioctl 40046207 0 returned -16 03:35:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x18) [ 402.884089] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:19 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:19 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306259, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 403.053259] binder: 15732:15734 ioctl c0306259 20007000 returned -22 [ 403.073803] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 403.082156] binder: BINDER_SET_CONTEXT_MGR already set 03:35:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) [ 403.106309] binder: 15732:15738 ioctl 40046207 0 returned -16 [ 403.129996] binder: 15732:15734 ioctl c0306259 20007000 returned -22 03:35:19 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:19 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x405, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}]}, 0x34}}, 0x40000) [ 403.340321] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 403.345777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 403.368618] binder: BINDER_SET_CONTEXT_MGR already set [ 403.373936] binder: 15746:15754 ioctl 40046207 0 returned -16 03:35:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 03:35:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 403.577860] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:20 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x10d001, 0xf000, 0x9, 0x0, 0x1000, 0x7, 0x5, 0x319e074f, 0x3, 0x80, 0xfffffffffffffff8, 0x3}, {0x10000, 0x0, 0x9, 0x400, 0x1, 0x0, 0x12e, 0x0, 0x2, 0x4, 0x8, 0x77}, {0x4001, 0x13000, 0xc, 0x4, 0xf4d9, 0x3f, 0x2, 0xba, 0x1, 0x6, 0x3f, 0x200}, {0x5000, 0x10f000, 0xe, 0x4d34, 0x1f, 0x70, 0x5, 0x2, 0xa12, 0x7, 0x100000001, 0x3}, {0x3002, 0x1000, 0x0, 0x8, 0x1, 0x4, 0x1, 0x3, 0x3f, 0x27, 0xffffffff80000001, 0x3}, {0x2000, 0x1000, 0xb, 0x3, 0x9ce8, 0x9, 0xc04e, 0x7, 0x1f, 0x400, 0x0, 0x6}, {0xf000, 0x0, 0x8, 0x5, 0x3f, 0x1, 0x3000000000000000, 0x3, 0x3, 0x0, 0xfff}, {0x10000, 0x105000, 0x8, 0xe5, 0x7, 0x0, 0x5, 0xda, 0x7078dd9e, 0x9eee, 0xeb}, {0x0, 0x10000}, {0x0, 0x1}, 0x2, 0x0, 0x3720648509bd65e4, 0x20000, 0xc, 0x0, 0x4, [0x10000, 0x200, 0xffffffff]}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$VT_RELDISP(r1, 0xb701) 03:35:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 03:35:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:20 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_getattr(r0, &(0x7f0000000040), 0x30, 0xf1a37876b69778d) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) [ 404.077364] binder: BINDER_SET_CONTEXT_MGR already set [ 404.090333] binder: 15779:15785 ioctl 40046207 20007000 returned -16 [ 404.120589] binder: BINDER_SET_CONTEXT_MGR already set [ 404.134372] binder: 15779:15793 ioctl 40046207 0 returned -16 03:35:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 404.165794] binder: BINDER_SET_CONTEXT_MGR already set 03:35:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 404.190020] binder: 15779:15785 ioctl 40046207 20007000 returned -16 03:35:20 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x8) 03:35:20 executing program 5: socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 404.362996] binder: BINDER_SET_CONTEXT_MGR already set [ 404.376656] IPVS: ftp: loaded support on port[0] = 21 [ 404.378904] binder: 15807:15811 ioctl 40046207 0 returned -16 03:35:20 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 404.559276] binder: BINDER_SET_CONTEXT_MGR already set [ 404.572348] binder: 15820:15824 ioctl 40046207 0 returned -16 03:35:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() ptrace$poke(0x4, r2, &(0x7f0000000080), 0x7ff) rt_tgsigqueueinfo(r2, r2, 0x39, &(0x7f0000000000)={0x1d, 0x200, 0x57, 0x7}) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0xc4c85512, &(0x7f0000000400)=""/200) 03:35:21 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x80040000) 03:35:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 404.985374] binder: 15836 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 404.985403] binder: 15836:15837 ioctl c018620c 20007000 returned -22 [ 405.101458] binder: BINDER_SET_CONTEXT_MGR already set [ 405.118934] binder: 15836:15852 ioctl 40046207 0 returned -16 [ 405.139567] binder: 15836 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 405.139587] binder: 15836:15837 ioctl c018620c 20007000 returned -22 [ 406.506723] device bridge_slave_1 left promiscuous mode [ 406.512485] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.546915] device bridge_slave_0 left promiscuous mode [ 406.552386] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.732272] team0 (unregistering): Port device team_slave_1 removed [ 408.742505] team0 (unregistering): Port device team_slave_0 removed [ 408.754744] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 408.810403] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 408.909822] bond0 (unregistering): Released all slaves [ 408.982125] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.989264] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.996384] device bridge_slave_0 entered promiscuous mode [ 409.029977] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.036390] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.043913] device bridge_slave_1 entered promiscuous mode [ 409.071931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 409.099949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 409.230016] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 409.280631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 409.508385] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 409.518093] team0: Port device team_slave_0 added [ 409.565633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 409.573742] team0: Port device team_slave_1 added [ 409.620446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.667946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.714904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 409.722477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.741477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.781765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 409.789539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.806996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.296550] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.302956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.309692] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.316093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.323812] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 411.036184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.436143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.529157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 411.621318] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 411.627641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.634641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.728555] 8021q: adding VLAN 0 to HW filter on device team0 03:35:28 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x1000, ""/4096}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000001080)) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000010c0)) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1e0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001100)={0x1}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001140)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @multicast1}], 0x30) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000001180)) getpeername$unix(r0, &(0x7f0000001340)=@abs, &(0x7f00000013c0)=0x6e) r1 = getpgrp(0x0) ioprio_get$pid(0x2, r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x303) r2 = fanotify_init(0x8, 0x101000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={r0, 0x6, 0x1, 0x1, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001480)={0x1800000000000000, 0x80, 0x1, 0x75, 0x1, [{0x7fffffff, 0x6, 0xffff, 0x0, 0x0, 0x1000}]}) socket$packet(0x11, 0x2, 0x300) alarm(0xfe9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001500)='tls\x00', 0x4) socket$inet_sctp(0x2, 0x5, 0x84) syslog(0x0, &(0x7f0000001540)=""/244, 0xf4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000001640)={{0x5000, 0x110001, 0xd, 0x9f, 0x9, 0xfff, 0x1, 0x5, 0x5, 0x800, 0x4, 0x6}, {0x94fff0750623b8cb, 0x10d002, 0xb, 0x4, 0x5, 0x7fff, 0x3, 0x6, 0x1ff, 0x7, 0xffffffff, 0x5fd}, {0x4, 0x2000, 0xe, 0x100000001, 0x4, 0x5, 0x1, 0x400, 0xfffffffffffffff9, 0x1000, 0x2, 0x40}, {0x100000, 0x102000, 0x8, 0x7, 0x0, 0x1, 0x80, 0x5, 0x80000001, 0x100, 0x2, 0x8}, {0xd004, 0xd000, 0xa, 0x5, 0x3f, 0x38, 0x4, 0x4, 0x3ff, 0x2c6, 0x0, 0x6}, {0xf000, 0x3000, 0xd, 0x9, 0x17, 0x0, 0xfff, 0x401, 0x1eba, 0x0, 0x8039, 0x8f}, {0x100000, 0xd000, 0x10, 0x3, 0x321, 0x6, 0x10001, 0x5, 0x6, 0x7, 0x6, 0xc744}, {0x0, 0x4, 0x19, 0x6, 0x6, 0x101, 0x3, 0x8, 0x3, 0x80, 0x400, 0x8c3}, {0x0, 0x6000}, {0xf003}, 0x50000, 0x0, 0x10002, 0x0, 0x9, 0x6100, 0x2, [0x200, 0x4, 0x10001, 0xab88]}) r3 = semget(0x3, 0x0, 0x500) r4 = getuid() stat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() getgroups(0x1, &(0x7f0000001840)=[0xffffffffffffffff]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001880)={{0x1, r4, r5, r6, r7, 0x8, 0x8}, 0x101, 0x3, 0xe7}) r8 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001c00)={0xbc, 0x0, &(0x7f0000001ac0)=[@increfs={0x40046304, 0x4}, @clear_death={0x400c630f, 0x3, 0x3}, @increfs={0x40046304, 0x2}, @enter_looper, @transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x58, 0x8, &(0x7f0000001900)=[@fda={0x66646185, 0x9, 0x0, 0x4}, @fda={0x66646185, 0x5, 0x1, 0x9}, @flat={0x73622a85, 0x1, r8}], &(0x7f0000001980)=[0x30]}, 0x4}}, @reply_sg={0x40486312, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x48, 0x10, &(0x7f0000001a00)=[@ptr={0x70742a85, 0x1, &(0x7f00000019c0), 0x1, 0x4, 0x35}, @fda={0x66646185, 0x4, 0x0, 0xd}], &(0x7f0000001a80)=[0x40, 0x68]}, 0xfff}}], 0x6c, 0x0, &(0x7f0000001b80)="110f0646a10c8fbab99343ccb8f582f55c2e9d3f57517ff759fd6d87711d8082c95534baa523a0e982a0b0227c6939978ef7d9897a2e2f059b6976c12c9861d4a1c1628baa51efb1044c167630bc2e947e19b924ceda0fac1ba6ddc6fc3cbd0503937c514bafe7f7ff7b21ee"}) 03:35:28 executing program 5: socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:28 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000300)='\x00', 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) chroot(&(0x7f0000000440)='./file0\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = signalfd4(r0, &(0x7f0000000240)={0xb717}, 0x8, 0x80000) ftruncate(r2, 0x48d) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa020040}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xdc, 0x12, 0x4, 0xfbead1f162ff8279, 0x70bd2b, 0x25dfdbfb, {0x5, 0x0, 0x1}, [@generic="4847f8b68be0f6e23a0321351d5e83f67344374ac27d03eb84a447d659d16434c2984ecb1c14d8701db0ee9e7e7839717478207729399a6fb43ef5287ff34de01b7aa3664cc3cab5bc8329d78e08ea6ef54feeb5d1615aaf71539ed4044bf90153524f5b8f5bb9b9ae6501f650edf7cbcb4252a0b22434a22af7035cf65ce506ecf962008574550b23ef74362a2344740b7297cdeba8f8ea39c56fe21622a9011033c0f85391f786", @nested={0x20, 0x67, [@typed={0x8, 0x73, @str='\x00'}, @typed={0x8, 0x2b, @pid=r1}, @typed={0xc, 0x85, @u64=0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0x2, "265b24dd358d0f83b6c74ebb63342f7097054120a07a126e437b50c902256eb2a41f1bbe56d16288cce9c28b535337f4a3d5fac357ca49e3d44545f2fcd122b765db90eb35408f79dc70ed9c8e6f6cc7226a571095d0110af1e5a87e3c140ddc80db60a96d9c0e70d5c750ffd46d8a983011eb8c9d217a8445e8f32f1d0198c0430bce882d1b700d0aac38259f61a6a7f071d74ed3893ac8a807160d6e4d9b1529f1c76f3feeaf2b79e8a5920f0e92883cade0b00f4909950f4bb88d1f52ac4b1b0dc97b909d6676e1ddf3fa6abd29e75471d871ae6f0c7c27a8b665378de25eeebe4420f7cd65f8d0da4d1b9f7e8b2c46773ed1aeebd6684ac9366521d332f9", 0xa1, 0x180000000000, 0xd08, 0x401, 0x8, 0x401, 0x2, 0x1}, r3}}, 0x128) 03:35:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x2) 03:35:28 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc030620a, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 412.321437] binder: 16118:16121 ioctl c030620a 20007000 returned -22 [ 412.322488] net_ratelimit: 6 callbacks suppressed [ 412.322499] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:28 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) prctl$getname(0x10, &(0x7f0000000000)=""/225) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:28 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x45) clone(0x2102001fdc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=r1) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0xeb) ftruncate(r0, 0x7) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x9, 0x20, 0x1}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r2, 0xea, "4a22d10a441ae682ac8d76032665c145943683183c6c1443b3818d05260d1d07d244cce0f67ddf8085b4dfc6c934ac3c2faa56d56ce20398216906faf410e9b5fb8357dade2602dda71eb5c4c2260ed80e1a34fca4ab714a31c676d8413967f3261071a25f98327490a24ff8fecc5300b15ad1bcaf2912e464e4c28d7322bb2ff442a14ff59b3ceb7063a7a01aac316c58e3f68e95eacdaff739709e2f658219a36956f494003f927495b6fa9383353d596b0f4fbd5e38b47b43b1660952832509bf4ddcbc8b6ef7a48d1112ab7defc8c76427deaa10926385304b8d3fb27832b6b4587f487fb3486091"}, &(0x7f0000000380)=0xf2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) [ 412.377530] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 412.389890] binder: BINDER_SET_CONTEXT_MGR already set [ 412.401185] binder: 16118:16133 ioctl 40046207 0 returned -16 03:35:28 executing program 5: socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x2af) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) 03:35:28 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x5, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:28 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0xec73c4de2db5db80) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, 0x1}, 0x10) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x8000000000) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x1b, 0x5, 0x2, 0x7fff, 0xe0f, 0x40, 0x8}}, 0x50) ftruncate(r1, 0x48d) pread64(r0, &(0x7f0000000680)=""/4096, 0x1000, 0x48) 03:35:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1c) 03:35:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 412.621507] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 412.638030] binder_alloc: 16157: binder_alloc_buf size 24384 failed, no address space [ 412.657272] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:29 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:29 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() syncfs(r0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 412.706306] binder: 16157:16163 transaction failed 29201/-28, size 0-24378 line 2973 [ 412.738980] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 412.759303] binder: BINDER_SET_CONTEXT_MGR already set [ 412.772367] binder: 16157:16171 ioctl 40046207 0 returned -16 03:35:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 03:35:29 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) ioctl$TIOCCBRK(r0, 0x5428) [ 412.813832] binder_alloc: 16157: binder_alloc_buf, no vma [ 412.820043] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 412.854773] binder: undelivered TRANSACTION_ERROR: 29201 [ 412.868125] binder: 16157:16163 transaction failed 29189/-3, size 0-24378 line 2973 [ 412.894774] binder: undelivered TRANSACTION_ERROR: 29189 03:35:29 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) signalfd(r0, &(0x7f0000000000)={0x7}, 0x8) 03:35:29 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x5800, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:29 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 413.056289] binder_alloc: 16196: binder_alloc_buf size 24384 failed, no address space [ 413.064583] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 413.092732] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 413.106253] binder: 16196:16197 transaction failed 29201/-28, size 0-24378 line 2973 [ 413.142942] binder: BINDER_SET_CONTEXT_MGR already set [ 413.158043] binder: 16196:16209 ioctl 40046207 0 returned -16 [ 413.181445] binder: undelivered TRANSACTION_ERROR: 29201 03:35:30 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x0) ftruncate(r0, 0x3f) 03:35:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 03:35:30 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x59, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:30 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYBLOB="31dff57ad5e5905299f0f8261b3e4820bb8797c9347a1a9e6061989d169908a2c27a753a68220a1ad20853e4e4589f90315d7da42924cbe2f008000000000000001d366369d8223be05887b04a2b423b1a017bad1f144975f529571024877dcdd7bf800000e44b23a3a3a73d610000"], &(0x7f00000002c0)=0x1) r1 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) r2 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000640)=""/161) write(r0, &(0x7f0000000200), 0xfffffffffffffef6) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, &(0x7f000000c2c0)=[{&(0x7f000000bf00)=""/139, 0x8b}, {&(0x7f000000bfc0)=""/220, 0xdc}, {&(0x7f000000c0c0)=""/93, 0x5d}, {&(0x7f000000c140)=""/193, 0xc1}, {&(0x7f000000c240)=""/115, 0x73}], 0x5, &(0x7f000000c340)=""/106, 0x6a, 0xffffffff}, 0x6}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x10000000000000f7, 0x0, 0x0, 0x7d48bddc}, 0x100000001}], 0x2, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000600)) recvmmsg(r1, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002b80)=""/108}, {&(0x7f0000002c00)=""/51}, {&(0x7f0000002c40)=""/215}, {&(0x7f0000002d40)=""/204}, {&(0x7f0000002e40)=""/197}, {&(0x7f0000002f40)=""/164}, {&(0x7f0000003000)=""/4096}, {&(0x7f0000004000)=""/181}, {&(0x7f00000040c0)=""/216}, {&(0x7f00000041c0)=""/9}], 0x0, &(0x7f00000042c0)=""/17, 0x0, 0xfffffffffffffc00}, 0xd04}, {{&(0x7f0000004300)=@ax25, 0x0, &(0x7f0000005640)=[{&(0x7f0000004380)=""/36}, {&(0x7f00000043c0)=""/249}, {&(0x7f00000044c0)=""/78}, {&(0x7f0000004540)=""/242}, {&(0x7f0000004640)=""/4096}], 0x0, &(0x7f00000056c0)=""/231, 0x0, 0xfff}, 0xc}, {{&(0x7f00000057c0)=@alg, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005840)=""/13}, {&(0x7f0000005880)=""/105}, {&(0x7f0000005900)=""/48}, {&(0x7f0000005940)=""/75}, {&(0x7f00000059c0)=""/175}], 0x0, &(0x7f0000005b00)=""/142, 0x0, 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/196}], 0x0, &(0x7f0000005d00)=""/193, 0x0, 0xde7}, 0xfffffffffffffe00}, {{&(0x7f0000005e00)=@rc, 0x0, &(0x7f0000006040)=[{&(0x7f0000005e80)=""/158}, {&(0x7f0000005f40)=""/208}], 0x0, 0x0, 0x0, 0x294000000000}, 0x80000001}, {{&(0x7f0000006080)=@nl, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006100)=""/225}, {&(0x7f0000006200)=""/208}, {&(0x7f0000006300)=""/143}], 0x0, &(0x7f0000006400)=""/136, 0x0, 0x8}, 0x7}], 0x7, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x6}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000007c0)={r4, 0xff, 0x2, [0x4, 0xfff]}, &(0x7f0000000800)=0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r9, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) dup2(r9, r6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000280)={r8, 0x81}, 0x8) setsockopt$inet_buf(r3, 0x0, 0x31, &(0x7f0000000840)="07953002f46cccade723d12d7cc66468927c54826c7113b0dd5f08e83ee7bd84b4f3b291ed16d40c6dc3ba11f5e9e2db3b1245dd65928cdd0b07e204717acf14f4a0d8fc856312cd329cbf1483e6bfd10ccbb1e3df358a7cd483c8ba422cdadf40fd457e10e25ebd6573e1ba5185cb7fab78af981e904d95acb62d604c491e120736156ba5089e307226dc3988546d1a5337f85d6b1d7351798c0a945c4b2c9b2e55683f0bc17ad63219b048b8332b6de39fd12bc065f679ac1759344f7695049813cd861388013f1fd0fb2f85e286e942e4e24d5e68af4c0da2089e3975718fdaf9112573d07c09e4c519", 0xeb) shmctl$SHM_UNLOCK(0x0, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="f600290182630300"], &(0x7f0000000340)=0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000000}) 03:35:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:30 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = shmget$private(0x0, 0x1000, 0x78000010, &(0x7f0000ffe000/0x1000)=nil) r1 = geteuid() getgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]) r3 = getuid() r4 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r6 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0xff80000000, r1, r2, r3, r4, 0x0, 0x6}, 0x5, 0x2, 0x48, 0x0, r5, r6, 0x5}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r7 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000200)) socket$pppoe(0x18, 0x1, 0x0) ftruncate(r7, 0x48d) [ 413.748023] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 413.776245] binder_alloc: 16216: binder_alloc_buf size 24384 failed, no address space [ 413.785003] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 413.797443] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) [ 413.876247] binder: 16216:16218 transaction failed 29201/-28, size 0-24378 line 2973 03:35:30 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 413.924165] binder: BINDER_SET_CONTEXT_MGR already set 03:35:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 413.986536] IPVS: ftp: loaded support on port[0] = 21 [ 413.989013] binder: 16216:16233 ioctl 40046207 0 returned -16 [ 413.998299] binder: undelivered TRANSACTION_ERROR: 29201 03:35:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x63, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x500) [ 414.108600] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 414.121298] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:30 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0x0, 0x8, {{0x6, 0x0, 0x20, 0x1, 0x81, 0x4, {0x5, 0x2, 0x79, 0x9, 0x3, 0xfffffffffffffffa, 0x10000, 0x9, 0xa1, 0x2, 0xfffffffffffffffe, r2, r3, 0x9, 0x9}}, {0x0, 0x3}}}, 0xa0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 414.176391] binder_alloc: 16253: binder_alloc_buf size 24384 failed, no address space [ 414.198717] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:30 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) alarm(0x5e6) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 414.226843] binder: 16253:16254 transaction failed 29201/-28, size 0-24378 line 2973 [ 414.251057] binder: BINDER_SET_CONTEXT_MGR already set [ 414.267278] binder: 16253:16254 ioctl 40046207 0 returned -16 [ 414.282957] binder: undelivered TRANSACTION_ERROR: 29201 03:35:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:30 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) ftruncate(r0, 0x48d) [ 414.416986] binder_alloc: 16274: binder_alloc_buf size 24384 failed, no address space [ 414.436497] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 414.468520] binder: 16274:16276 transaction failed 29201/-28, size 0-24378 line 2973 [ 414.485850] binder: BINDER_SET_CONTEXT_MGR already set [ 414.492045] binder: 16274:16282 ioctl 40046207 0 returned -16 [ 414.499050] binder_alloc: 16274: binder_alloc_buf, no vma [ 414.504931] binder: undelivered TRANSACTION_ERROR: 29201 [ 414.511527] binder: 16274:16276 transaction failed 29189/-3, size 0-24378 line 2973 [ 414.520762] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.118018] device bridge_slave_1 left promiscuous mode [ 416.123563] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.166903] device bridge_slave_0 left promiscuous mode [ 416.172493] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.144138] ýK (unregistering): Port device team_slave_1 removed [ 418.154216] ýK (unregistering): Port device team_slave_0 removed [ 418.171680] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 418.239667] bond0 (unregistering): Released all slaves [ 418.292911] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.299427] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.306932] device bridge_slave_0 entered promiscuous mode [ 418.339454] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.345888] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.353258] device bridge_slave_1 entered promiscuous mode [ 418.381467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 418.410498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 418.512542] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 418.561558] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 418.787805] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 418.795556] team0: Port device team_slave_0 added [ 418.844257] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 418.852169] team0: Port device team_slave_1 added [ 418.902261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.950178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.997987] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 419.005131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.022144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.061338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 419.068785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.080955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.551161] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.557616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.564319] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.570756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.578901] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 420.316156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 420.751871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.848018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 420.944019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 420.950248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.958116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.054986] 8021q: adding VLAN 0 to HW filter on device team0 03:35:38 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYBLOB="31dff57ad5e5905299f0f8261b3e4820bb8797c9347a1a9e6061989d169908a2c27a753a68220a1ad20853e4e4589f90315d7da42924cbe2f008000000000000001d366369d8223be05887b04a2b423b1a017bad1f144975f529571024877dcdd7bf800000e44b23a3a3a73d610000"], &(0x7f00000002c0)=0x1) r1 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) r2 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000640)=""/161) write(r0, &(0x7f0000000200), 0xfffffffffffffef6) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, &(0x7f000000c2c0)=[{&(0x7f000000bf00)=""/139, 0x8b}, {&(0x7f000000bfc0)=""/220, 0xdc}, {&(0x7f000000c0c0)=""/93, 0x5d}, {&(0x7f000000c140)=""/193, 0xc1}, {&(0x7f000000c240)=""/115, 0x73}], 0x5, &(0x7f000000c340)=""/106, 0x6a, 0xffffffff}, 0x6}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x10000000000000f7, 0x0, 0x0, 0x7d48bddc}, 0x100000001}], 0x2, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000600)) recvmmsg(r1, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002b80)=""/108}, {&(0x7f0000002c00)=""/51}, {&(0x7f0000002c40)=""/215}, {&(0x7f0000002d40)=""/204}, {&(0x7f0000002e40)=""/197}, {&(0x7f0000002f40)=""/164}, {&(0x7f0000003000)=""/4096}, {&(0x7f0000004000)=""/181}, {&(0x7f00000040c0)=""/216}, {&(0x7f00000041c0)=""/9}], 0x0, &(0x7f00000042c0)=""/17, 0x0, 0xfffffffffffffc00}, 0xd04}, {{&(0x7f0000004300)=@ax25, 0x0, &(0x7f0000005640)=[{&(0x7f0000004380)=""/36}, {&(0x7f00000043c0)=""/249}, {&(0x7f00000044c0)=""/78}, {&(0x7f0000004540)=""/242}, {&(0x7f0000004640)=""/4096}], 0x0, &(0x7f00000056c0)=""/231, 0x0, 0xfff}, 0xc}, {{&(0x7f00000057c0)=@alg, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005840)=""/13}, {&(0x7f0000005880)=""/105}, {&(0x7f0000005900)=""/48}, {&(0x7f0000005940)=""/75}, {&(0x7f00000059c0)=""/175}], 0x0, &(0x7f0000005b00)=""/142, 0x0, 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/196}], 0x0, &(0x7f0000005d00)=""/193, 0x0, 0xde7}, 0xfffffffffffffe00}, {{&(0x7f0000005e00)=@rc, 0x0, &(0x7f0000006040)=[{&(0x7f0000005e80)=""/158}, {&(0x7f0000005f40)=""/208}], 0x0, 0x0, 0x0, 0x294000000000}, 0x80000001}, {{&(0x7f0000006080)=@nl, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006100)=""/225}, {&(0x7f0000006200)=""/208}, {&(0x7f0000006300)=""/143}], 0x0, &(0x7f0000006400)=""/136, 0x0, 0x8}, 0x7}], 0x7, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x6}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000007c0)={r4, 0xff, 0x2, [0x4, 0xfff]}, &(0x7f0000000800)=0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r9, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) dup2(r9, r6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000280)={r8, 0x81}, 0x8) setsockopt$inet_buf(r3, 0x0, 0x31, &(0x7f0000000840)="07953002f46cccade723d12d7cc66468927c54826c7113b0dd5f08e83ee7bd84b4f3b291ed16d40c6dc3ba11f5e9e2db3b1245dd65928cdd0b07e204717acf14f4a0d8fc856312cd329cbf1483e6bfd10ccbb1e3df358a7cd483c8ba422cdadf40fd457e10e25ebd6573e1ba5185cb7fab78af981e904d95acb62d604c491e120736156ba5089e307226dc3988546d1a5337f85d6b1d7351798c0a945c4b2c9b2e55683f0bc17ad63219b048b8332b6de39fd12bc065f679ac1759344f7695049813cd861388013f1fd0fb2f85e286e942e4e24d5e68af4c0da2089e3975718fdaf9112573d07c09e4c519", 0xeb) shmctl$SHM_UNLOCK(0x0, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="f600290182630300"], &(0x7f0000000340)=0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000000}) 03:35:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1900) 03:35:38 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x5900, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:38 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000100)=ANY=[@ANYBLOB="00040300000000000100000000000000030000000000000002000000008da8092c9fb44f7fb6b700000001800000000002ff00ff000000000000000000000000000000000000000000000000000000000000000000000000000099586dc5b1cdc6de8351c510690a6ae7d444aa6aab200b8b0c629e7323f5beb3d3934dea1ddd906b78"]) ftruncate(r0, 0x48a) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) 03:35:38 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:38 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 421.701761] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 421.728178] binder_alloc: 16548: binder_alloc_buf size 24384 failed, no address space [ 421.746558] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:38 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 421.797744] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 421.836592] binder: 16548:16552 transaction failed 29201/-28, size 0-24378 line 2973 [ 421.868684] binder: BINDER_SET_CONTEXT_MGR already set [ 421.875540] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 421.882773] binder: 16548:16570 ioctl 40046207 0 returned -16 03:35:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x3) 03:35:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x3, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, [], 0xff}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 421.919161] binder: undelivered TRANSACTION_ERROR: 29201 03:35:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:38 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:38 executing program 5: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:38 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x6300, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:38 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x48d) [ 422.104895] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 03:35:38 executing program 5: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 422.182789] binder_alloc: 16596: binder_alloc_buf size 24384 failed, no address space [ 422.199231] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 422.209037] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 422.224465] binder: 16596:16598 transaction failed 29201/-28, size 0-24378 line 2973 [ 422.280806] binder: BINDER_SET_CONTEXT_MGR already set [ 422.307839] binder: 16596:16605 ioctl 40046207 0 returned -16 [ 422.320454] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 422.340767] binder_alloc: 16596: binder_alloc_buf, no vma 03:35:38 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1600) [ 422.358892] binder: undelivered TRANSACTION_ERROR: 29201 [ 422.367341] binder: 16596:16598 transaction failed 29189/-3, size 0-24378 line 2973 [ 422.379763] binder: undelivered TRANSACTION_ERROR: 29189 03:35:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 422.464940] binder_alloc: 16612: binder_alloc_buf size 24384 failed, no address space [ 422.487496] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:39 executing program 5: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 422.581540] binder: 16612:16614 transaction failed 29201/-28, size 0-24378 line 2973 [ 422.630545] binder: BINDER_SET_CONTEXT_MGR already set [ 422.646819] binder: 16612:16624 ioctl 40046207 0 returned -16 [ 422.648400] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 422.662966] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 422.680467] binder_alloc: 16612: binder_alloc_buf, no vma [ 422.681577] binder: undelivered TRANSACTION_ERROR: 29201 [ 422.702893] binder: 16612:16614 transaction failed 29189/-3, size 0-24378 line 2973 [ 422.713838] binder: undelivered TRANSACTION_ERROR: 29189 03:35:39 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004055964850656700000000000000000000000000000000000000000040000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) vmsplice(r0, &(0x7f0000001200)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="b44dd1188c443b270d86f7d39c389f3f2a15cda1417be210b9582cfe6014df9dd3ee53faca8aa22360cfba013f12bf9bb01acdde6d3d0efe576d3ea17239b82b5b38deef651a3c458fe92b9a0a74042fa0bee59dc7adeead54a6bada530e7375ceba136e9af54819cf735dc2", 0x6c}, {&(0x7f00000011c0)="dd51d740e464479b2d58aaab4ff70798b38ed2f8c7bdcc946ac73c85222156271f0347f628f96f00f5025fac8b8140fd98c3dabeadc5afd8e4867f2a7da4b6a5", 0x40}], 0x3, 0x0) 03:35:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 03:35:39 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x58, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 422.906875] binder_alloc: 16636: binder_alloc_buf size 24384 failed, no address space [ 422.916163] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 422.934370] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 422.935175] binder: 16636:16639 transaction failed 29201/-28, size 0-24378 line 2973 [ 422.954761] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 423.041448] binder: BINDER_SET_CONTEXT_MGR already set [ 423.075404] binder: 16636:16652 ioctl 40046207 0 returned -16 [ 423.109814] binder_alloc: 16636: binder_alloc_buf, no vma [ 423.128622] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.136282] binder: 16636:16639 transaction failed 29189/-3, size 0-24378 line 2973 03:35:39 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000, 0x4) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) 03:35:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x200000000000001) write(r0, &(0x7f0000c34fff), 0xffffff0b) close(r0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200), 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 03:35:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xf) [ 423.156474] binder: undelivered TRANSACTION_ERROR: 29189 03:35:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:39 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xd) 03:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x3ffffffc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000140)="8e36cfdf34c488cd910dc1337d8fef", 0xf) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) clock_gettime(0x8000000000, &(0x7f0000000340)) creat(&(0x7f00000000c0)='./file0\x00', 0x40) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) [ 423.480227] binder: BINDER_SET_CONTEXT_MGR already set [ 423.497536] device bridge_slave_1 left promiscuous mode [ 423.507636] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.519850] binder: 16678:16681 ioctl 40046207 0 returned -16 03:35:40 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7a00, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 423.605758] device bridge_slave_0 left promiscuous mode [ 423.613780] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.633956] IPVS: ftp: loaded support on port[0] = 21 [ 423.670909] binder: BINDER_SET_CONTEXT_MGR already set [ 423.705218] binder: 16698:16700 ioctl 40046207 0 returned -16 [ 423.754401] team0 (unregistering): Port device team_slave_1 removed [ 423.793867] team0 (unregistering): Port device team_slave_0 removed [ 423.823017] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 423.880373] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 423.963673] bond0 (unregistering): Released all slaves [ 424.728444] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.734920] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.743496] device bridge_slave_0 entered promiscuous mode [ 424.789882] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.796715] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.804247] device bridge_slave_1 entered promiscuous mode [ 424.851740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 424.898429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 425.051293] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 425.100246] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 425.149368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 425.156451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.206710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 425.213958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.364186] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 425.372175] team0: Port device team_slave_0 added [ 425.415922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 425.423334] team0: Port device team_slave_1 added [ 425.455164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.503871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.552403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 425.559960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.569241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.593607] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 425.602463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.612009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.926048] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.932553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.939374] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.945842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.953354] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 426.046209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.943878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.039024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 427.139735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 427.145934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.154076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.247879] 8021q: adding VLAN 0 to HW filter on device team0 03:35:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="00000021c853fa9ac2dd2e6f94e3919957a276cfba1562b8da4759973da5023d80728782e5cd726059af433c3ec0e5680b3b8840b33ca53a086a78c49cd676495b5eeede2e6f92978f597b2aedd9792ef9458db57e05675c16af327da25562d4d97fac4f67e1934c739733d2060935ec6750e7514f75200794a7f5a6c06b061678f565b828a6bb6bf392993106", 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() write$FUSE_DIRENT(r0, &(0x7f0000000000)={0xb8, 0x0, 0x8, [{0x4, 0x8001, 0x8d, 0x2, "00000021c853fa9ac2dd2e6f94e3919957a276cfba1562b8da4759973da5023d80728782e5cd726059af433c3ec0e5680b3b8840b33ca53a086a78c49cd676495b5eeede2e6f92978f597b2aedd9792ef9458db57e05675c16af327da25562d4d97fac4f67e1934c739733d2060935ec6750e7514f75200794a7f5a6c06b061678f565b828a6bb6bf392993106"}]}, 0xb8) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x14) 03:35:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000001c0)='./file0/file0/../file0\x00', &(0x7f0000000340)) r1 = open(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x210000, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xe2, 0x2) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x4}}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:35:44 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x405f000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:44 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000000)={0x26}, 0x0, 0x4a) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 427.873084] net_ratelimit: 5 callbacks suppressed [ 427.873102] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 427.879506] binder: BINDER_SET_CONTEXT_MGR already set [ 427.896769] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:44 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 427.940413] binder: 16972:16978 ioctl 40046207 0 returned -16 03:35:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 03:35:44 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x336) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) rt_sigprocmask(0x0, &(0x7f0000000000)={0x8}, &(0x7f0000000040), 0x8) pwrite64(r0, &(0x7f0000000080)="6aa681ea7edfb03af3c85bc232798c3d7185900a00b52e5f1bd5a22003c01126a43dc9acc8717e832e5b47187eaa5bfaac0dafe7bf5ead71f85514b6d6ae7dc06945f2bf6b97d79a98cfb7b067f0857981fafd6de14bee3e3ee6ca6f17554b4b2df24364b7e0465cc7a2828fd3dc800fe80187c004121c2b02ee538420e2d87e53782863371e2068db5832755e2eb9058de58b4c1d654ac276c2dd45fc4a5b91f9172af96b87a503cf8be5bd3738a90b3c051da46e983740377614e82663903a", 0xc0, 0x0) ftruncate(r0, 0x48d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x5, 0x80, 0x80}) 03:35:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x0, r3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) [ 428.086662] binder: BINDER_SET_CONTEXT_MGR already set 03:35:44 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x7) setsockopt$inet6_tcp_int(r0, 0x6, 0xe, &(0x7f0000000000), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x0, 0x3c8, 0x1e8, 0x3c8, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8001, 0x81, @remote, 0x4e21}}}, {{@ip={@multicast1, @local, 0x0, 0xffffffff, 'bcsf0\x00', 'bpq0\x00', {0xff}, {}, 0x33, 0x1, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7fffffff, [0x100, 0x80000000, 0x4, 0xffff, 0x100, 0xffffffffffffffff], 0x3, 0x80, 0x7fffffff}, {0x7, [0x80, 0x2, 0x7, 0x7ff, 0xff, 0x7fff], 0x4, 0x401, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @dev={0xac, 0x14, 0x14, 0x12}, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @remote, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x2, 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) r1 = getpid() mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x100) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) [ 428.139070] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 428.153625] binder: 16998:17002 ioctl 40046207 0 returned -16 03:35:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) 03:35:44 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 428.257750] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:44 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() fcntl$addseals(r0, 0x409, 0xb) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$setflags(r0, 0x2, 0x1) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x60, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ftruncate(r0, 0x48d) [ 428.351845] binder: BINDER_SET_CONTEXT_MGR already set [ 428.360272] binder: 17029:17033 ioctl 40046207 0 returned -16 03:35:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:44 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x400) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/131) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r1 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00|u\x00\x00\x00\x00\x00\x00\x00', 0x4) clone(0x800000000002000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ftruncate(r1, 0x48d) 03:35:44 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xa00, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 428.455058] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 03:35:45 executing program 4: io_setup(0xff, &(0x7f0000000000)=0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$void(r1, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000100)="dc0503a2619f11f0f364d427b0367eec5691b3238f0c94e8c3a3bbc9db95c7f8d27597fbd0752b308276cf83275e144f4b1f5745", 0x34, 0x97ae}, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0xfffffffffffffffb, &(0x7f00000000c0)) 03:35:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 428.604076] binder: BINDER_SET_CONTEXT_MGR already set [ 428.617982] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:45 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x400000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 428.646477] binder: 17052:17060 ioctl 40046207 0 returned -16 [ 428.685685] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000100)="480000001500190a20ffff7fffffff5602113b850e1de097485e000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0xffffffffffffffdb}], 0x1) eventfd2(0x80000001, 0x80000) chdir(&(0x7f0000000000)='./file0\x00') 03:35:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 428.755073] binder: BINDER_SET_CONTEXT_MGR already set [ 428.777326] binder: 17073:17076 ioctl 40046207 0 returned -16 03:35:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x8004) 03:35:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:45 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x2000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'syzkaller1\x00', 0xe9}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x440000) ioctl$KDMKTONE(r1, 0x4b30, 0x1000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x2, 0x2]) [ 428.937938] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 428.986062] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 429.000285] binder: BINDER_SET_CONTEXT_MGR already set [ 429.006877] binder: 17092:17099 ioctl 40046207 0 returned -16 03:35:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x4) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)="7d122347504c00", 0xffffffffffffffff}, 0x30) getpgid(r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:45 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6c00, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 03:35:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x8880) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x2) 03:35:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000004300)={&(0x7f0000000180), 0xc, &(0x7f00000042c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000018001200100001006970366772657461700000f804000500143f29434bb4675b478aad"], 0x38}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20c082, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000000c0)={0x6}) 03:35:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x36) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x0, 0x101, 0x1}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r4, 0x4}}, 0x10) ftruncate(r2, 0x48d) r5 = semget(0x1, 0x4, 0x30) semop(r5, &(0x7f0000000080)=[{0x3, 0x2dab, 0x800}, {0x0, 0x6, 0x1800}, {0x1, 0x800, 0x800}], 0x3) [ 429.226854] binder: BINDER_SET_CONTEXT_MGR already set [ 429.232320] binder: 17119:17122 ioctl 40046207 0 returned -16 03:35:45 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 429.294572] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000000)) 03:35:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1b) [ 429.409749] binder: BINDER_SET_CONTEXT_MGR already set 03:35:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:45 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() finit_module(r0, &(0x7f0000000000)='@%vmnet0\x00', 0x3) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x200, 0x4}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:45 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pause() r1 = socket$inet6(0xa, 0x7, 0x80) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) r3 = msgget$private(0x0, 0x10) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) r6 = geteuid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000380)={{0x101, r4, r5, r6, r7, 0x1, 0x5}, 0x7, 0x2, 0x100000000, 0x8, 0x0, 0xfffffffffffffffb, r2, r2}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'lo\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="400000000000000000000000000000000000000000000000000000000000000000000000000000000000000040cb61cd88cfa6e94713057ca45f2476ff64d83573148cca15dcdaa9d5890ee66ad705eddeaa550794700fd2bc533f7eb69f37ff6dd0c477d3bc704f09d462b69168153c77f81435ed9ee10d811b54108524316b7c0f992c5f1726a5310bc494"]}) prctl$getreaper(0x1f, &(0x7f0000000040)) 03:35:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 429.439647] binder: 17140:17146 ioctl 40046207 0 returned -16 03:35:46 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x68, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:46 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = mmap$binder(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x8, 0x2050, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) r2 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ftruncate(r2, 0x48d) [ 429.682647] binder: BINDER_SET_CONTEXT_MGR already set 03:35:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 429.722257] binder: 17171:17178 ioctl 40046207 0 returned -16 03:35:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc) 03:35:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:35:46 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6000000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:46 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x54, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @loopback}, 0x3}, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x9}, @in6={0xa, 0x4e23, 0x222a3e9b0, @local, 0x100000}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2, 0x3}, 0x8) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x8) ftruncate(r0, 0x48d) 03:35:46 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) ftruncate(r0, 0x48d) [ 429.900607] binder: BINDER_SET_CONTEXT_MGR already set [ 429.919594] binder: 17192:17198 ioctl 40046207 0 returned -16 03:35:46 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x200000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 430.139796] binder: BINDER_SET_CONTEXT_MGR already set [ 430.154698] binder: 17219:17223 ioctl 40046207 0 returned -16 03:35:46 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) ftruncate(r0, 0x48d) 03:35:46 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4) 03:35:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) 03:35:46 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x300000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 430.467959] binder: BINDER_SET_CONTEXT_MGR already set 03:35:46 executing program 0: rt_sigprocmask(0xfffffffffffffffc, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x1) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:46 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) ftruncate(r0, 0x48d) [ 430.509664] binder: 17233:17239 ioctl 40046207 0 returned -16 03:35:47 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x48, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:47 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) getpid() 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) ftruncate(r0, 0x48d) 03:35:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) [ 430.783978] binder: BINDER_SET_CONTEXT_MGR already set 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) [ 430.830666] binder: 17268:17274 ioctl 40046207 0 returned -16 03:35:47 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000140)='ppp0vboxnet1[\x00', 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) signalfd4(r0, &(0x7f0000000080)={0x8}, 0x8, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x200, 0xe4, 0xffffffffffffffc0, r3}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast1, 0xffffffffffffffe1}, 0x1c) 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) 03:35:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:47 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x500000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3ff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='-', 0x1, 0x0, &(0x7f0000000500)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r3 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040)=0x81, 0x4) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0xa200) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ftruncate(r3, 0x4) 03:35:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x600) 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) [ 431.295473] binder: BINDER_SET_CONTEXT_MGR already set 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) [ 431.325596] binder: 17308:17318 ioctl 40046207 0 returned -16 03:35:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1e) 03:35:47 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x100000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) [ 431.506312] binder: BINDER_SET_CONTEXT_MGR already set [ 431.519180] binder: 17341:17345 ioctl 40046207 0 returned -16 03:35:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], r2, 0x2}, 0x48) 03:35:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:48 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1a) 03:35:48 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) write$input_event(r0, &(0x7f00000001c0)={{}, 0x0, 0x7, 0x9}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @mcast2, 0xc46}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x7}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x1f, @empty, 0x277}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0x2}, @in6={0xa, 0x4e21, 0x20, @remote, 0x7}], 0xbc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() rt_sigtimedwait(&(0x7f0000000100)={0x8}, &(0x7f0000000140), &(0x7f0000000180)={0x77359400}, 0x8) ftruncate(r0, 0x897) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 03:35:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 431.868674] binder: BINDER_SET_CONTEXT_MGR already set [ 431.875363] binder: 17363:17365 ioctl 40046207 0 returned -16 03:35:48 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) capget(&(0x7f0000000280)={0x399f1336, r0}, &(0x7f00000002c0)={0x9, 0xffffffffffff8001, 0x2, 0x7, 0x6, 0x100000000}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000004c0)={r2, 0x8, &(0x7f00000003c0)=[0x4, 0x3, 0x7, 0x4, 0x8001, 0x2400000000, 0x8, 0x8], &(0x7f0000000400)=[0x40, 0x401, 0xe78, 0x9, 0x0, 0x80000001, 0x7, 0x2, 0x2], 0x4, 0x3, 0x5, &(0x7f0000000440)=[0xf90, 0x3, 0xfffffffffffffffe], &(0x7f0000000480)=[0x2]}) r3 = getpid() getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="c0000000233333d8d209267cba073b05acdcc3f02856c862628bc54b4fbf14155be005886dac88e9f43d1461b300e37f827ceb2ce4c1ddae8db80af07c5b00ed340e741a9b16db1fe5bdb45156239eece12812cfab48005436d8f7ca9d2881aa0d1ad00af73c4fa6f40ab428efe75a2608ac50b55f55276a1020a4fd481b217ecfc0bfcb703cb6ea17df09313ff769dc79a21286066633f1b5f90bb78b85e7d06a59cb582b00e46a160a5263f9a020ae9f596338c3f532f0a2aa9da0"], &(0x7f0000000240)=0xc8) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ftruncate(r1, 0x48d) 03:35:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:48 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x5, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 03:35:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 432.102077] binder: BINDER_SET_CONTEXT_MGR already set [ 432.128953] binder: 17385:17388 ioctl 40046207 0 returned -16 03:35:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:48 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7400000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:48 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1c00) 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 432.537588] binder: BINDER_SET_CONTEXT_MGR already set [ 432.542940] binder: 17404:17412 ioctl 40046207 0 returned -16 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:49 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ftruncate(r0, 0x48d) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 03:35:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:49 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4c, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 433.179174] binder: BINDER_SET_CONTEXT_MGR already set [ 433.197700] net_ratelimit: 13 callbacks suppressed [ 433.197711] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 433.199801] binder: 17442:17447 ioctl 40046207 0 returned -16 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:49 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x700000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 433.362202] IPVS: ftp: loaded support on port[0] = 21 03:35:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 433.460033] binder: BINDER_SET_CONTEXT_MGR already set 03:35:49 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 433.487874] binder: 17467:17470 ioctl 40046207 0 returned -16 [ 434.097801] device bridge_slave_1 left promiscuous mode [ 434.104536] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.167040] device bridge_slave_0 left promiscuous mode [ 434.172511] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.453930] team0 (unregistering): Port device team_slave_1 removed [ 436.465119] team0 (unregistering): Port device team_slave_0 removed [ 436.478341] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 436.509743] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 436.598695] bond0 (unregistering): Released all slaves [ 437.123879] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.130984] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.139063] device bridge_slave_0 entered promiscuous mode [ 437.185408] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.191936] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.200070] device bridge_slave_1 entered promiscuous mode [ 437.248610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 437.293730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 437.435921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 437.486789] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 437.747978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 437.755477] team0: Port device team_slave_0 added [ 437.802315] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 437.809927] team0: Port device team_slave_1 added [ 437.853713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 437.886328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.897154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.920039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.963214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 437.970621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.982353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.019005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 438.026770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.034779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.409229] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.415701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.422571] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.429083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.436678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 438.716181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.146999] device bridge_slave_1 left promiscuous mode [ 439.152758] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.177032] device bridge_slave_0 left promiscuous mode [ 439.182537] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.260727] team0 (unregistering): Port device team_slave_1 removed [ 439.271365] team0 (unregistering): Port device team_slave_0 removed [ 439.284266] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 439.319948] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 439.389704] bond0 (unregistering): Released all slaves [ 439.950010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.122993] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 440.292957] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 440.299719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.316327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.480738] 8021q: adding VLAN 0 to HW filter on device team0 03:35:57 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x40) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x3}, 0x8) r2 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @empty, 0x1ff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) clone(0x20010000, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x32) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ftruncate(r2, 0x48d) 03:35:57 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:57 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4c00000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x3d62, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:57 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 441.330538] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 441.403995] binder: BINDER_SET_CONTEXT_MGR already set [ 441.413744] binder: 17748:17762 ioctl 40046207 0 returned -16 03:35:57 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:57 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xffffff7f, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:58 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) getpid() r0 = memfd_create(&(0x7f00000000c0)='wlan1\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:58 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 441.603610] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:58 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = add_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)="02225f4670b4132696c308e7d94d0050e73295be871e366c25439c2beec21f7cd30785c54c3725fb26914712a0739e61c57313c9cd51", 0x36, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhci\x00', 0x181000, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1a7) keyctl$search(0xa, r0, &(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, r1) r3 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x1200403, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0xff4) ftruncate(r3, 0x48d) r5 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="1d05cfcca61a28c3abed2c8fbd8c17f54bcf7764cafd9c31896743180bbd8d5bdb67cd782e3009c48b98ed4671bfa44dcee9e5f9e75867507b1b725bee021426c9bf1ac743720d63adb2392eb803cddbc9ba28aef1d3247a95bc4d1d78681f5af86e2fa3af9113715a265a2db301acd693c99b41d6be0c21bfcbb8d4516e99ed706e9cd95b337b7e78227b7587aea75107ebd7f740df764873c35ea54a3bb9057b022a890138be39d3ed5c29c37ae91b20ab7ce8a6d99a6c0b80fbd143", 0xbd, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r5, &(0x7f00000001c0)='ceph\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, r6) [ 441.644307] binder: BINDER_SET_CONTEXT_MGR already set 03:35:58 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 441.688657] binder: 17777:17792 ioctl 40046207 0 returned -16 03:35:58 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x300, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080), 0x1c) close(r2) [ 441.807899] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x200000000000000, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x74) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x4000000000) r5 = dup(r4) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f00000000c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xa0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000140)=0x7fffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000200)={r7, 0x8}, &(0x7f0000000240)=0x8) [ 441.846182] binder: BINDER_SET_CONTEXT_MGR already set [ 441.866966] binder: 17813:17814 ioctl 40046207 0 returned -16 03:35:58 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000000)=""/155) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ftruncate(r0, 0x48d) 03:35:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 03:35:58 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x600000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:58 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:58 executing program 0: mmap(&(0x7f0000013000/0x400000)=nil, 0x400000, 0x0, 0x31, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) [ 442.061984] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 442.084029] binder: BINDER_SET_CONTEXT_MGR already set [ 442.103056] binder: 17835:17839 ioctl 40046207 0 returned -16 03:35:58 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400080, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000300)=0x40, 0x4) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000280)={0x8, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000140)='net/psched\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$RTC_AIE_ON(r2, 0x7001) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x125002, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x9}}, 0x30) 03:35:58 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xa000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 442.138853] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 442.300334] binder: BINDER_SET_CONTEXT_MGR already set 03:35:58 executing program 0: [ 442.330820] binder: 17857:17863 ioctl 40046207 0 returned -16 [ 442.379062] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:58 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7400, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:58 executing program 0: [ 442.523883] binder: BINDER_SET_CONTEXT_MGR already set [ 442.535130] binder: 17874:17876 ioctl 40046207 0 returned -16 03:35:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x10000, 0x5, &(0x7f0000001480)=[{&(0x7f00000001c0)="86768ec6bc62cd764a5321e80c853b133036daeed77e277d323724bf9668122fa614ab7754077169e1f94a57486e4cf7971667490ee6d16822cce13a0f61f4e2d4", 0x41, 0x80000001}, {&(0x7f0000000300)="3a77a9b0b433b0bb7de7acc0191e333859d07e61ac29e4639d55b8550c7ddbca534474bcdb7b8df8dcf32061eb4c078bfb209e7ed756da19e9d9390946abe5d662e0ce30cfeb2b1679747dfc3e182c6d7e281cf00d100ce41f097965688a7c4157c973a98b158e594f2cefedf3e0c8e440152a0e9dd6b596504035390dd1be42c99bb8dff6ca1b0579b61c50a046609049145ff3a7b9aed8c8b6222b607b8df1e9f5091234841ec540307a1c94", 0xad, 0xb0}, {&(0x7f00000003c0)="1d98f7d571fd587edd5f8e55ad4f5daad8aa625a9627cf0d735c6062810268bd8bef397f648d27cc4581d0dfac9e39052c5cb6c3813b2c13c3fd8aea7456a2b1e1caa46fc6f4e6c0ab465a37382e30743f07f4b0ba6366a689de287521823a4ba1ff2d6cd15247fbc9fd77cee655b47d9f08ee9de10ada7c8131c654359ef986d9560dfafb260c2362f7de78cd5e778df54f09ecba0183b3663686d1ea06", 0x9e, 0x29}, {&(0x7f0000000480)="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", 0x1000, 0x400}, {&(0x7f0000000240)="c14f5dc836a60ff697f084e2e6a7bd47eaaad068fb6cff2e93d064c82244397bd69bc009ef4fb213502ac802cc34f236e51036ce044cfd953a73720915f19d832ebe94ab3dac21b0b3", 0x49}], 0x10020, &(0x7f0000001500)={[{@inode32='inode32'}, {@ikeep='ikeep'}, {@logbsize={'logbsize', 0x3d, [0x31]}}, {@gqnoenforce='gqnoenforce'}, {@dax='dax'}, {@dax='dax'}, {@bsdgroups='bsdgroups'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="57b96feefe414b29f20eaa38cc0abe8b60db81fa6ebb7514adf7646b5eaaf06697f1bdbb39261966183107f95c259c5b5dd21db307233059f6b33b3e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:59 executing program 0: 03:35:59 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x500, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:59 executing program 0: [ 442.981906] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 443.037131] binder: BINDER_SET_CONTEXT_MGR already set 03:35:59 executing program 5: [ 443.091995] binder: 17887:17892 ioctl 40046207 0 returned -16 03:35:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:59 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:35:59 executing program 5: 03:35:59 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xfdfdffff00000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:59 executing program 0: [ 443.308279] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:59 executing program 5: 03:35:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 443.371302] binder: BINDER_SET_CONTEXT_MGR already set [ 443.393325] binder: 17909:17913 ioctl 40046207 0 returned -16 03:35:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:35:59 executing program 0: 03:35:59 executing program 5: 03:36:00 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4800000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:00 executing program 0: 03:36:00 executing program 5: [ 443.614710] IPVS: ftp: loaded support on port[0] = 21 [ 443.620865] device bridge_slave_1 left promiscuous mode [ 443.627807] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.707472] device bridge_slave_0 left promiscuous mode [ 443.713174] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.730488] binder: BINDER_SET_CONTEXT_MGR already set [ 443.747185] binder: 17932:17936 ioctl 40046207 0 returned -16 [ 443.870093] team0 (unregistering): Port device team_slave_1 removed [ 443.881945] team0 (unregistering): Port device team_slave_0 removed [ 443.892580] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 443.960241] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 444.022959] bond0 (unregistering): Released all slaves [ 444.721044] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.727897] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.735309] device bridge_slave_0 entered promiscuous mode [ 444.781559] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.788368] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.795777] device bridge_slave_1 entered promiscuous mode [ 444.841030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 444.886585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 445.024145] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 445.072014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 445.120624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 445.127713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.174697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 445.181700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.319899] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 445.327450] team0: Port device team_slave_0 added [ 445.372273] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 445.379812] team0: Port device team_slave_1 added [ 445.425088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.472072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.518663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 445.525849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.543934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.582078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 445.589352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.597781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.901090] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.907649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.914316] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.920839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.928269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 446.086183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.901508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.993618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 447.086651] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 447.092857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.100762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.198852] 8021q: adding VLAN 0 to HW filter on device team0 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 0: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000006f80), 0x0, 0x69a3b94790f0d3d6, &(0x7f00000071c0)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001d00)) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x6000, 0x1000, 0x0, 0xfffffffffffffffd, 0xabb, 0x45fa, 0x7, 0x2, 0x80, 0x0, 0x6, 0x6}, {0x4000, 0x1000, 0x9, 0x5ee, 0x800, 0x5, 0x401, 0x7fffffff, 0x400, 0x3, 0x1, 0x73}, {0xd001, 0x6000, 0x19, 0x4, 0x9, 0xbff, 0x20, 0x44b, 0x7, 0x0, 0x20, 0x7fff}, {0x10001, 0x1000, 0xf, 0x8000, 0xfffffffffffffffb, 0x3, 0x1, 0x7, 0x7, 0x2, 0x10001, 0x60b}, {0x6000, 0x3001, 0x10, 0x3ff, 0x400000000000, 0x3, 0x2, 0x8, 0x9, 0x7, 0x5, 0x98f}, {0x6004, 0x4004, 0xa, 0x101, 0x1a50, 0xf93, 0xff, 0x4, 0x9, 0x9, 0x2, 0x3beead75}, {0xf002, 0x1d000, 0xa, 0xdb85, 0x80000001, 0x0, 0x4, 0x7f, 0x0, 0x4, 0x80000000, 0x9}, {0x6000, 0xd000, 0xe, 0xa4, 0x7, 0x0, 0x6, 0x401, 0x9, 0x0, 0xfffffffffffffffb}, {0xf000}, {0x1000}, 0x1, 0x0, 0xf003, 0x200000, 0xd, 0x100, 0xf002, [0x9, 0x10001, 0x9, 0x200]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) ptrace$peekuser(0x10, r0, 0x0) 03:36:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x1000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000700)="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") fgetxattr(r0, &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000040)=""/2, 0x2) 03:36:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) [ 447.846846] binder: BINDER_SET_CONTEXT_MGR already set [ 447.852320] binder: 18206:18215 ioctl 40046207 0 returned -16 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64=r2, @ANYRES32=r0, @ANYRESOCT=r0, @ANYPTR], 0x34f) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:04 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000004900)={&(0x7f00000048c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x8e0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x299) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001580)}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) getpgid(0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 03:36:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 448.123920] binder: BINDER_SET_CONTEXT_MGR already set 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 448.170128] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 448.187802] binder: 18237:18249 ioctl 40046207 0 returned -16 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x0, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x0, 0x0, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x74000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:04 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)="45035680b6729ac523c9c8acc0a6ef5f1009ddeee37dd59e75a7ad4f8da28503e1c080cbd23a9a577a949e6ce2a3510678bf0eb73b6f2f5930c84d5acf9f21d0de090c153914fb4be1ec1ff71f973f314f4334197d9a0473a511b8a787dc9b856e88d8f821252f87329302f7b39d2ed0071674e0984e907b673a95a6c75b51a7de55", 0x82}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f00000000c0)="a18f22f2e370f1ca89c41e4c81667fd06ecb95b5e1e6a0348325cfbd70c27932f370f5a68ffb530f06f456f114e7", 0x2e}, {&(0x7f0000000240)="282e18fb9f4662b53086d23248044cd6eec8206c33787254c456dbb0cf51efd4078b7f88152a1f0fccf1075624da43bf1d81f1c41221c759aeee6d4680a39db92f92c8c997d4e8d011393e914116810e171cae1aeb090ede42331a1974dd1b7ebfb04842c3194bb9929c1ba412", 0x6d}, {&(0x7f0000000400)="c2fb5e7ca78a0a984c861942fe126c422af959c5be9be728f635b113afd970e6e62c3b78b9e46419d35a7048e1305f0e33ff68496808b6610af97dab2275d6abd9226ea4a1d81356ecf0aa1807560a3a1f83ed5600049eb2c7ce3f52c0c418de26a1beac038a73c5dfed2efa808b3e5dfbbfeb403d3f90ec5aa32759979f94ccb9ad81d4d8053774b57513f1894013376715065e37822faa8b63dfca0c087883f45bc11af353e39085379d4712e053dc51", 0xb1}], 0x5, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x8502, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000580)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4271734fc6fa9ea1084879f6630a7f75ff3811172b8507a77154e1"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:04 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x0, 0x7, 0x0, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 448.479616] binder: BINDER_SET_CONTEXT_MGR already set [ 448.512383] binder: 18274:18280 ioctl 40046207 0 returned -16 03:36:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:05 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000004900)={&(0x7f00000048c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x8e0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x299) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001580)}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) getpgid(0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:05 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:05 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x405f, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x2}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f22e"], 0x2) accept$alg(r3, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8000000000000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000180)) 03:36:05 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 448.828278] binder: BINDER_SET_CONTEXT_MGR already set 03:36:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:05 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 448.921474] binder: 18307:18312 ioctl 40046207 0 returned -16 03:36:05 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x74, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x2) write$P9_RLOPEN(r3, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x20, 0x2, 0x4}, 0x5}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x0, 0x7, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 449.108913] binder: BINDER_SET_CONTEXT_MGR already set [ 449.150645] binder: 18332:18342 ioctl 40046207 0 returned -16 03:36:05 executing program 0 (fault-call:8 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:05 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x3, 0x0, 0x7, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:05 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7a00000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) socketpair(0x1, 0xe, 0x80000005, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB='X\f'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x7, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 449.336517] binder: BINDER_SET_CONTEXT_MGR already set 03:36:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 449.365410] FAULT_INJECTION: forcing a failure. [ 449.365410] name failslab, interval 1, probability 0, space 0, times 0 [ 449.378243] binder: 18353:18361 ioctl 40046207 0 returned -16 [ 449.432365] CPU: 1 PID: 18365 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 449.440903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.450267] Call Trace: [ 449.452880] dump_stack+0x1d3/0x2c4 [ 449.456534] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.461749] ? mark_held_locks+0x130/0x130 [ 449.461846] should_fail.cold.4+0xa/0x17 [ 449.461872] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.475286] ? print_usage_bug+0xc0/0xc0 [ 449.479355] ? d_splice_alias+0x7c9/0x11d0 [ 449.479376] ? print_usage_bug+0xc0/0xc0 [ 449.479395] ? graph_lock+0x170/0x170 [ 449.479418] ? graph_lock+0x170/0x170 [ 449.479434] ? graph_lock+0x170/0x170 [ 449.479453] ? print_usage_bug+0xc0/0xc0 [ 449.479480] ? find_held_lock+0x36/0x1c0 [ 449.479503] ? __lock_is_held+0xb5/0x140 [ 449.479536] ? ttwu_stat+0x5c0/0x5c0 [ 449.479567] __should_failslab+0x124/0x180 [ 449.519376] should_failslab+0x9/0x14 [ 449.523200] kmem_cache_alloc_trace+0x2d7/0x750 [ 449.527898] tcp_sendmsg_locked+0x2754/0x3f90 [ 449.532419] ? lock_downgrade+0x900/0x900 [ 449.536591] ? check_preemption_disabled+0x48/0x200 [ 449.541657] ? tcp_sendpage+0x60/0x60 [ 449.545487] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.551042] ? aa_label_sk_perm+0xfc/0xa50 [ 449.555304] ? find_held_lock+0x36/0x1c0 [ 449.555331] ? mark_held_locks+0xc7/0x130 [ 449.555351] ? __local_bh_enable_ip+0x160/0x260 [ 449.555375] ? __local_bh_enable_ip+0x160/0x260 [ 449.563584] ? lockdep_hardirqs_on+0x421/0x5c0 [ 449.563606] ? trace_hardirqs_on+0xbd/0x310 [ 449.563627] ? lock_release+0x970/0x970 [ 449.585841] ? lock_sock_nested+0xe2/0x120 [ 449.590103] ? trace_hardirqs_off_caller+0x300/0x300 [ 449.595819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.601383] ? check_preemption_disabled+0x48/0x200 [ 449.606422] ? lock_sock_nested+0x9a/0x120 [ 449.610686] ? lock_sock_nested+0x9a/0x120 [ 449.614945] ? __local_bh_enable_ip+0x160/0x260 [ 449.619668] tcp_sendmsg+0x2f/0x50 [ 449.623230] inet_sendmsg+0x19c/0x690 [ 449.627097] ? ipip_gro_receive+0x100/0x100 [ 449.631458] ? apparmor_socket_sendmsg+0x29/0x30 [ 449.636255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.641816] ? security_socket_sendmsg+0x94/0xc0 [ 449.641838] ? ipip_gro_receive+0x100/0x100 [ 449.641860] sock_sendmsg+0xd5/0x120 [ 449.641881] __sys_sendto+0x3d7/0x670 [ 449.641904] ? __ia32_sys_getpeername+0xb0/0xb0 [ 449.641926] ? wait_for_completion+0x8a0/0x8a0 [ 449.658518] ? __lock_is_held+0xb5/0x140 [ 449.658548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.658576] ? __sb_end_write+0xd9/0x110 [ 449.658599] ? fput+0x130/0x1a0 [ 449.658618] ? do_syscall_64+0x9a/0x820 [ 449.658635] ? do_syscall_64+0x9a/0x820 [ 449.658671] ? lockdep_hardirqs_on+0x421/0x5c0 [ 449.677683] ? trace_hardirqs_on+0xbd/0x310 [ 449.677699] ? __ia32_sys_read+0xb0/0xb0 [ 449.677729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 449.677747] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.677764] ? trace_hardirqs_off_caller+0x300/0x300 [ 449.677787] __x64_sys_sendto+0xe1/0x1a0 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x0, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:05 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:06 executing program 4: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:06 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 449.677810] do_syscall_64+0x1b9/0x820 [ 449.677824] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 449.677844] ? syscall_return_slowpath+0x5e0/0x5e0 [ 449.689151] ? trace_hardirqs_off+0x310/0x310 [ 449.689171] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 449.689202] ? recalc_sigpending_tsk+0x180/0x180 [ 449.689221] ? kasan_check_write+0x14/0x20 [ 449.689247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.689274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.689288] RIP: 0033:0x457679 [ 449.689309] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.741594] RSP: 002b:00007fd0b8b63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 449.741615] RAX: ffffffffffffffda RBX: 00007fd0b8b646d4 RCX: 0000000000457679 [ 449.741626] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 449.741644] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 449.741655] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 449.741666] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000000 03:36:06 executing program 0 (fault-call:8 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:06 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x48000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:06 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:06 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:06 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000140)="c0f159f73de971193e9b2204cdce965dac2995378024ba72bee661a0aba3eb5cdefb1a86f9dac18b9a71246d01f214eb70bcbc4f036f978843e41545e05db08bad75321c70d3ae1f1157800fd0d640864866431bc3eea1e16cae84198e52c72b9733dff78e4c9da9436dd17979e9cc4334bab213489edd17fd9f09f76608f5a6310ac02cbe7c09dcdc15c6ad85e90001358846399b2337fa93165ceee93b70f79ffbf853d9d13e", &(0x7f0000000200)=""/104}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:36:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080), 0x1c) close(r2) 03:36:06 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 449.936566] binder: BINDER_SET_CONTEXT_MGR already set [ 449.942096] binder: 18399:18402 ioctl 40046207 0 returned -16 [ 449.981037] FAULT_INJECTION: forcing a failure. [ 449.981037] name failslab, interval 1, probability 0, space 0, times 0 [ 449.992928] CPU: 0 PID: 18409 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 450.001456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.010822] Call Trace: [ 450.013433] dump_stack+0x1d3/0x2c4 [ 450.017087] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.022318] should_fail.cold.4+0xa/0x17 [ 450.026395] ? kasan_check_read+0x11/0x20 [ 450.030561] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.035699] ? ipv6_dev_get_saddr+0x576/0xfe0 [ 450.040218] ? graph_lock+0x170/0x170 [ 450.044032] ? print_usage_bug+0xc0/0xc0 [ 450.048108] ? addrconf_sysctl_stable_secret+0x920/0x920 [ 450.053627] ? print_usage_bug+0xc0/0xc0 [ 450.057725] ? graph_lock+0x170/0x170 [ 450.057748] ? find_held_lock+0x36/0x1c0 [ 450.057774] ? mark_held_locks+0xc7/0x130 [ 450.057793] ? inet_get_local_port_range+0x36a/0x520 [ 450.057807] ? inet_get_local_port_range+0x36a/0x520 03:36:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 450.057824] ? lockdep_hardirqs_on+0x421/0x5c0 [ 450.057847] __should_failslab+0x124/0x180 [ 450.088924] should_failslab+0x9/0x14 [ 450.092749] kmem_cache_alloc+0x47/0x730 [ 450.096852] ? lock_release+0x970/0x970 [ 450.100919] inet_bind_bucket_create+0x82/0x320 [ 450.105610] ? __inet_lookup_listener+0xb20/0xb20 [ 450.110471] ? kasan_check_write+0x14/0x20 [ 450.114748] ? do_raw_spin_lock+0xc1/0x200 [ 450.119041] __inet_hash_connect+0x969/0xfb0 [ 450.123476] ? inet6_lookup+0xe0/0xe0 [ 450.127304] ? inet_hash+0xb0/0xb0 [ 450.130862] ? print_usage_bug+0xc0/0xc0 [ 450.134933] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.140474] ? __siphash_aligned+0x1c3/0x330 [ 450.144897] ? secure_ipv6_port_ephemeral+0x1da/0x2e0 [ 450.150093] ? secure_tcpv6_seq+0x340/0x340 [ 450.154440] ? check_preemption_disabled+0x40/0x200 [ 450.159463] ? tcp_poll+0xd60/0xd60 [ 450.163119] ? __call_rcu.constprop.55+0x2ce/0x950 [ 450.168078] ? rcu_softirq_qs+0x20/0x20 [ 450.172075] inet6_hash_connect+0x76/0xe0 [ 450.176276] tcp_v6_connect+0x182a/0x29b0 [ 450.180462] ? tcp_v6_pre_connect+0x120/0x120 [ 450.184979] ? __kernel_text_address+0xd/0x40 [ 450.189483] ? unwind_get_return_address+0x61/0xa0 [ 450.194419] ? __save_stack_trace+0x8d/0xf0 [ 450.198762] ? save_stack+0xa9/0xd0 [ 450.202400] ? save_stack+0x43/0xd0 [ 450.206033] ? kasan_kmalloc+0xc7/0xe0 [ 450.209943] ? kmem_cache_alloc_trace+0x152/0x750 [ 450.214801] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 450.219472] ? tcp_sendmsg+0x2f/0x50 [ 450.223187] ? inet_sendmsg+0x19c/0x690 [ 450.227175] ? sock_sendmsg+0xd5/0x120 [ 450.231077] ? __sys_sendto+0x3d7/0x670 [ 450.235059] ? __x64_sys_sendto+0xe1/0x1a0 [ 450.239302] ? do_syscall_64+0x1b9/0x820 [ 450.243369] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.248755] ? graph_lock+0x170/0x170 [ 450.252580] __inet_stream_connect+0x992/0x1150 [ 450.257285] ? tcp_v6_pre_connect+0x120/0x120 [ 450.261783] ? __inet_stream_connect+0x992/0x1150 [ 450.266640] ? inet_dgram_connect+0x2e0/0x2e0 [ 450.271153] ? __lock_is_held+0xb5/0x140 [ 450.275233] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 450.279912] ? rcu_read_lock_sched_held+0x108/0x120 [ 450.284934] ? kmem_cache_alloc_trace+0x353/0x750 [ 450.289811] tcp_sendmsg_locked+0x28e6/0x3f90 [ 450.294325] ? lock_downgrade+0x900/0x900 [ 450.298567] ? check_preemption_disabled+0x48/0x200 [ 450.303598] ? tcp_sendpage+0x60/0x60 [ 450.307408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.312952] ? aa_label_sk_perm+0xfc/0xa50 [ 450.317217] ? find_held_lock+0x36/0x1c0 [ 450.321304] ? mark_held_locks+0xc7/0x130 [ 450.325458] ? __local_bh_enable_ip+0x160/0x260 [ 450.330144] ? __local_bh_enable_ip+0x160/0x260 [ 450.334847] ? lockdep_hardirqs_on+0x421/0x5c0 [ 450.339476] ? trace_hardirqs_on+0xbd/0x310 [ 450.343812] ? lock_release+0x970/0x970 [ 450.347801] ? lock_sock_nested+0xe2/0x120 [ 450.352042] ? trace_hardirqs_off_caller+0x300/0x300 [ 450.357162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.362705] ? check_preemption_disabled+0x48/0x200 [ 450.367724] ? lock_sock_nested+0x9a/0x120 [ 450.371988] ? lock_sock_nested+0x9a/0x120 [ 450.376230] ? __local_bh_enable_ip+0x160/0x260 [ 450.380910] tcp_sendmsg+0x2f/0x50 [ 450.384469] inet_sendmsg+0x19c/0x690 [ 450.388279] ? ipip_gro_receive+0x100/0x100 [ 450.392607] ? apparmor_socket_sendmsg+0x29/0x30 [ 450.397375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.402926] ? security_socket_sendmsg+0x94/0xc0 [ 450.407702] ? ipip_gro_receive+0x100/0x100 [ 450.412032] sock_sendmsg+0xd5/0x120 [ 450.415771] __sys_sendto+0x3d7/0x670 [ 450.419607] ? __ia32_sys_getpeername+0xb0/0xb0 [ 450.424284] ? wait_for_completion+0x8a0/0x8a0 [ 450.428889] ? __lock_is_held+0xb5/0x140 [ 450.432979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.438536] ? __sb_end_write+0xd9/0x110 [ 450.442631] ? fput+0x130/0x1a0 [ 450.445936] ? do_syscall_64+0x9a/0x820 [ 450.449919] ? do_syscall_64+0x9a/0x820 [ 450.453945] ? lockdep_hardirqs_on+0x421/0x5c0 [ 450.458538] ? trace_hardirqs_on+0xbd/0x310 [ 450.462862] ? __ia32_sys_read+0xb0/0xb0 [ 450.466928] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.472473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.477845] ? trace_hardirqs_off_caller+0x300/0x300 [ 450.482959] __x64_sys_sendto+0xe1/0x1a0 [ 450.487035] do_syscall_64+0x1b9/0x820 [ 450.490931] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 450.496300] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.501263] ? trace_hardirqs_off+0x310/0x310 [ 450.505766] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 450.510813] ? recalc_sigpending_tsk+0x180/0x180 [ 450.515591] ? kasan_check_write+0x14/0x20 [ 450.519838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.524696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.529907] RIP: 0033:0x457679 [ 450.533117] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.552037] RSP: 002b:00007fd0b8b63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 450.559769] RAX: ffffffffffffffda RBX: 00007fd0b8b646d4 RCX: 0000000000457679 [ 450.567083] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 450.574394] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 450.581752] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 450.589021] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000001 03:36:07 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:07 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4800, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:07 executing program 0 (fault-call:8 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 03:36:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x1, 0x3, 0xff, 0x2, 0x6, 0x8001, 0x8}, 0x20) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:07 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 450.758589] binder: BINDER_SET_CONTEXT_MGR already set [ 450.764038] binder: 18428:18435 ioctl 40046207 0 returned -16 03:36:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:07 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:07 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6800, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 450.899388] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 450.957129] FAULT_INJECTION: forcing a failure. [ 450.957129] name failslab, interval 1, probability 0, space 0, times 0 [ 450.968507] CPU: 1 PID: 18455 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 450.977042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.977050] Call Trace: [ 450.977076] dump_stack+0x1d3/0x2c4 [ 450.977100] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.977147] should_fail.cold.4+0xa/0x17 [ 450.977172] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.977204] ? __lock_is_held+0xb5/0x140 [ 450.977228] ? graph_lock+0x170/0x170 [ 450.977249] ? print_usage_bug+0xc0/0xc0 [ 450.977287] ? rcu_preempt_deferred_qs_irqrestore+0xc55/0x1010 [ 451.011318] ? print_usage_bug+0xc0/0xc0 [ 451.011335] ? graph_lock+0x170/0x170 [ 451.011358] ? find_held_lock+0x36/0x1c0 [ 451.011383] ? mark_held_locks+0xc7/0x130 [ 451.019252] ? inet_get_local_port_range+0x36a/0x520 [ 451.019269] ? inet_get_local_port_range+0x36a/0x520 [ 451.019287] ? lockdep_hardirqs_on+0x421/0x5c0 [ 451.019312] __should_failslab+0x124/0x180 [ 451.019333] should_failslab+0x9/0x14 [ 451.019349] kmem_cache_alloc+0x47/0x730 [ 451.019371] ? lock_release+0x970/0x970 [ 451.019392] inet_bind_bucket_create+0x82/0x320 [ 451.019418] ? __inet_lookup_listener+0xb20/0xb20 [ 451.041438] ? kasan_check_write+0x14/0x20 [ 451.041456] ? do_raw_spin_lock+0xc1/0x200 [ 451.041484] __inet_hash_connect+0x969/0xfb0 [ 451.041506] ? inet6_lookup+0xe0/0xe0 [ 451.041534] ? inet_hash+0xb0/0xb0 [ 451.041555] ? print_usage_bug+0xc0/0xc0 [ 451.041580] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 451.111712] ? __siphash_aligned+0x1c3/0x330 [ 451.116150] ? secure_ipv6_port_ephemeral+0x1da/0x2e0 [ 451.121358] ? secure_tcpv6_seq+0x340/0x340 [ 451.125692] ? check_preemption_disabled+0x40/0x200 [ 451.130760] ? tcp_poll+0xd60/0xd60 [ 451.134396] ? __call_rcu.constprop.55+0x2ce/0x950 [ 451.139335] ? rcu_softirq_qs+0x20/0x20 [ 451.143321] inet6_hash_connect+0x76/0xe0 [ 451.147489] tcp_v6_connect+0x182a/0x29b0 [ 451.151664] ? tcp_v6_pre_connect+0x120/0x120 [ 451.156168] ? __kernel_text_address+0xd/0x40 [ 451.160674] ? unwind_get_return_address+0x61/0xa0 [ 451.165613] ? __save_stack_trace+0x8d/0xf0 [ 451.169961] ? save_stack+0xa9/0xd0 [ 451.173592] ? save_stack+0x43/0xd0 [ 451.177224] ? kasan_kmalloc+0xc7/0xe0 [ 451.181121] ? kmem_cache_alloc_trace+0x152/0x750 [ 451.185993] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 451.190673] ? tcp_sendmsg+0x2f/0x50 [ 451.194392] ? inet_sendmsg+0x19c/0x690 [ 451.198377] ? sock_sendmsg+0xd5/0x120 [ 451.202271] ? __sys_sendto+0x3d7/0x670 [ 451.206250] ? __x64_sys_sendto+0xe1/0x1a0 [ 451.210493] ? do_syscall_64+0x1b9/0x820 [ 451.214822] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.220235] ? graph_lock+0x170/0x170 [ 451.224049] __inet_stream_connect+0x992/0x1150 [ 451.228725] ? tcp_v6_pre_connect+0x120/0x120 [ 451.233228] ? __inet_stream_connect+0x992/0x1150 [ 451.238084] ? inet_dgram_connect+0x2e0/0x2e0 [ 451.242611] ? __lock_is_held+0xb5/0x140 [ 451.246725] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 451.251403] ? rcu_read_lock_sched_held+0x108/0x120 [ 451.256433] ? kmem_cache_alloc_trace+0x353/0x750 [ 451.261302] tcp_sendmsg_locked+0x28e6/0x3f90 [ 451.265814] ? lock_downgrade+0x900/0x900 [ 451.269976] ? check_preemption_disabled+0x48/0x200 [ 451.275008] ? tcp_sendpage+0x60/0x60 [ 451.278823] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.284367] ? aa_label_sk_perm+0xfc/0xa50 [ 451.288634] ? find_held_lock+0x36/0x1c0 [ 451.292790] ? mark_held_locks+0xc7/0x130 [ 451.296952] ? __local_bh_enable_ip+0x160/0x260 [ 451.301631] ? __local_bh_enable_ip+0x160/0x260 [ 451.306334] ? lockdep_hardirqs_on+0x421/0x5c0 [ 451.310937] ? trace_hardirqs_on+0xbd/0x310 [ 451.315264] ? lock_release+0x970/0x970 [ 451.319587] ? lock_sock_nested+0xe2/0x120 [ 451.323829] ? trace_hardirqs_off_caller+0x300/0x300 [ 451.328940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.334502] ? check_preemption_disabled+0x48/0x200 [ 451.339523] ? lock_sock_nested+0x9a/0x120 [ 451.343772] ? lock_sock_nested+0x9a/0x120 [ 451.348025] ? __local_bh_enable_ip+0x160/0x260 [ 451.352707] tcp_sendmsg+0x2f/0x50 [ 451.356257] inet_sendmsg+0x19c/0x690 [ 451.360064] ? ipip_gro_receive+0x100/0x100 [ 451.364395] ? apparmor_socket_sendmsg+0x29/0x30 [ 451.369170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.374730] ? security_socket_sendmsg+0x94/0xc0 [ 451.379495] ? ipip_gro_receive+0x100/0x100 [ 451.383824] sock_sendmsg+0xd5/0x120 [ 451.387547] __sys_sendto+0x3d7/0x670 [ 451.391371] ? __ia32_sys_getpeername+0xb0/0xb0 [ 451.396052] ? wait_for_completion+0x8a0/0x8a0 [ 451.400654] ? __lock_is_held+0xb5/0x140 [ 451.404727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.410277] ? __sb_end_write+0xd9/0x110 [ 451.414350] ? fput+0x130/0x1a0 [ 451.417642] ? do_syscall_64+0x9a/0x820 [ 451.421622] ? do_syscall_64+0x9a/0x820 [ 451.425608] ? lockdep_hardirqs_on+0x421/0x5c0 [ 451.430204] ? trace_hardirqs_on+0xbd/0x310 [ 451.434528] ? __ia32_sys_read+0xb0/0xb0 [ 451.438616] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 451.444165] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.449541] ? trace_hardirqs_off_caller+0x300/0x300 [ 451.454670] __x64_sys_sendto+0xe1/0x1a0 [ 451.458742] do_syscall_64+0x1b9/0x820 [ 451.462635] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 451.468012] ? syscall_return_slowpath+0x5e0/0x5e0 [ 451.472949] ? trace_hardirqs_off+0x310/0x310 [ 451.477453] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 451.482502] ? recalc_sigpending_tsk+0x180/0x180 [ 451.487269] ? kasan_check_write+0x14/0x20 [ 451.491514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.496381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.501577] RIP: 0033:0x457679 [ 451.504773] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.523694] RSP: 002b:00007fd0b8b63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 451.531500] RAX: ffffffffffffffda RBX: 00007fd0b8b646d4 RCX: 0000000000457679 [ 451.538778] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 451.546055] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c 03:36:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:08 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}, @generic={0x80, 0x2b8, 0x4d6, 0x717a}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 451.553331] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 451.560602] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000002 [ 451.591081] binder: BINDER_SET_CONTEXT_MGR already set 03:36:08 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 451.618623] binder: 18456:18469 ioctl 40046207 0 returned -16 03:36:08 executing program 0 (fault-call:8 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:08 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x5000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:08 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400020042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xa3a, 0x109000) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 451.781146] binder: BINDER_SET_CONTEXT_MGR already set [ 451.840525] binder: 18491:18493 ioctl 40046207 0 returned -16 03:36:08 executing program 3 (fault-call:9 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:08 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:08 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6c000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 451.890944] FAULT_INJECTION: forcing a failure. [ 451.890944] name failslab, interval 1, probability 0, space 0, times 0 [ 451.943981] CPU: 0 PID: 18500 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 451.952518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.961880] Call Trace: [ 451.964494] dump_stack+0x1d3/0x2c4 [ 451.968163] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.973396] should_fail.cold.4+0xa/0x17 [ 451.977476] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.982603] ? __save_stack_trace+0x8d/0xf0 [ 451.986945] ? graph_lock+0x170/0x170 [ 451.990787] ? graph_lock+0x170/0x170 [ 451.994621] ? save_stack+0xa9/0xd0 [ 451.998264] ? save_stack+0x43/0xd0 [ 452.001902] ? kasan_kmalloc+0xc7/0xe0 [ 452.005809] ? find_held_lock+0x36/0x1c0 [ 452.009886] ? __lock_is_held+0xb5/0x140 [ 452.013960] ? graph_lock+0x170/0x170 [ 452.017764] ? ttwu_stat+0x5c0/0x5c0 [ 452.021491] ? check_preemption_disabled+0x48/0x200 [ 452.026522] __should_failslab+0x124/0x180 [ 452.030778] should_failslab+0x9/0x14 [ 452.034585] kmem_cache_alloc_node_trace+0x270/0x740 [ 452.039722] __kmalloc_node_track_caller+0x33/0x70 [ 452.044687] __kmalloc_reserve.isra.39+0x41/0xe0 [ 452.049458] __alloc_skb+0x150/0x770 [ 452.053213] ? skb_scrub_packet+0x490/0x490 [ 452.057547] ? ip6_mtu+0x39c/0x520 [ 452.061099] ? lock_downgrade+0x900/0x900 [ 452.065277] ? check_preemption_disabled+0x48/0x200 [ 452.070310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.075854] ? tcp_chrono_stop+0x25f/0x520 [ 452.080100] ? tcp_chrono_start+0x1e0/0x1e0 [ 452.084441] ? graph_lock+0x170/0x170 [ 452.088254] sk_stream_alloc_skb+0x13c/0x960 [ 452.092694] ? tcp_init_transfer+0x470/0x470 [ 452.097162] ? __lock_is_held+0xb5/0x140 [ 452.101237] tcp_connect+0x1274/0x46d0 [ 452.105154] ? tcp_push_one+0x110/0x110 [ 452.109157] ? ktime_get_with_offset+0x38b/0x460 [ 452.113928] ? pvclock_read_flags+0x160/0x160 [ 452.118430] ? secure_tcpv6_seq+0x228/0x340 [ 452.122770] ? trace_hardirqs_off_caller+0x300/0x300 [ 452.127900] ? kvm_clock_read+0x18/0x30 [ 452.131881] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 452.136900] ? ktime_get_with_offset+0x310/0x460 [ 452.141690] ? ktime_get+0x400/0x400 [ 452.145425] ? __siphash_aligned+0x1c3/0x330 [ 452.149842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.155382] ? siphash_4u64+0x25/0x3c0 [ 452.159280] ? secure_tcpv6_ts_off+0x2b3/0x430 [ 452.163866] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.169412] ? tcp_fastopen_defer_connect+0x173/0x4a0 [ 452.174616] ? tcp_fastopen_cookie_check+0x330/0x330 [ 452.179730] ? __call_rcu.constprop.55+0x2ce/0x950 [ 452.184684] ? prandom_u32_state+0x13/0x180 [ 452.189041] tcp_v6_connect+0x1c0f/0x29b0 [ 452.193215] ? tcp_v6_pre_connect+0x120/0x120 [ 452.197715] ? __kernel_text_address+0xd/0x40 [ 452.202227] ? unwind_get_return_address+0x61/0xa0 [ 452.207169] ? __save_stack_trace+0x8d/0xf0 [ 452.211512] ? save_stack+0xa9/0xd0 [ 452.215163] ? save_stack+0x43/0xd0 [ 452.218806] ? kasan_kmalloc+0xc7/0xe0 [ 452.222693] ? kmem_cache_alloc_trace+0x152/0x750 [ 452.227543] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 452.232216] ? tcp_sendmsg+0x2f/0x50 [ 452.235934] ? inet_sendmsg+0x19c/0x690 [ 452.239913] ? sock_sendmsg+0xd5/0x120 [ 452.243804] ? __sys_sendto+0x3d7/0x670 [ 452.247807] ? __x64_sys_sendto+0xe1/0x1a0 [ 452.252050] ? do_syscall_64+0x1b9/0x820 [ 452.256168] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.261550] ? graph_lock+0x170/0x170 [ 452.265359] __inet_stream_connect+0x992/0x1150 [ 452.270035] ? tcp_v6_pre_connect+0x120/0x120 [ 452.274544] ? __inet_stream_connect+0x992/0x1150 [ 452.279399] ? inet_dgram_connect+0x2e0/0x2e0 [ 452.283905] ? __lock_is_held+0xb5/0x140 [ 452.287994] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 452.292671] ? rcu_read_lock_sched_held+0x108/0x120 [ 452.297706] ? kmem_cache_alloc_trace+0x353/0x750 [ 452.302591] tcp_sendmsg_locked+0x28e6/0x3f90 [ 452.307135] ? lock_downgrade+0x900/0x900 [ 452.311300] ? check_preemption_disabled+0x48/0x200 [ 452.316338] ? tcp_sendpage+0x60/0x60 [ 452.320171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.325769] ? aa_label_sk_perm+0xfc/0xa50 [ 452.330022] ? find_held_lock+0x36/0x1c0 [ 452.334099] ? mark_held_locks+0xc7/0x130 [ 452.338282] ? __local_bh_enable_ip+0x160/0x260 [ 452.342957] ? __local_bh_enable_ip+0x160/0x260 [ 452.347662] ? lockdep_hardirqs_on+0x421/0x5c0 [ 452.352261] ? trace_hardirqs_on+0xbd/0x310 [ 452.356590] ? lock_release+0x970/0x970 [ 452.360566] ? lock_sock_nested+0xe2/0x120 [ 452.364821] ? trace_hardirqs_off_caller+0x300/0x300 [ 452.369933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.375482] ? check_preemption_disabled+0x48/0x200 [ 452.380504] ? lock_sock_nested+0x9a/0x120 [ 452.384749] ? lock_sock_nested+0x9a/0x120 [ 452.388994] ? __local_bh_enable_ip+0x160/0x260 [ 452.393702] tcp_sendmsg+0x2f/0x50 [ 452.397254] inet_sendmsg+0x19c/0x690 [ 452.401064] ? ipip_gro_receive+0x100/0x100 [ 452.405393] ? apparmor_socket_sendmsg+0x29/0x30 [ 452.410168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.415711] ? security_socket_sendmsg+0x94/0xc0 [ 452.420482] ? ipip_gro_receive+0x100/0x100 [ 452.424821] sock_sendmsg+0xd5/0x120 [ 452.428545] __sys_sendto+0x3d7/0x670 [ 452.432358] ? __ia32_sys_getpeername+0xb0/0xb0 [ 452.437038] ? wait_for_completion+0x8a0/0x8a0 [ 452.441643] ? __lock_is_held+0xb5/0x140 [ 452.445737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.451292] ? __sb_end_write+0xd9/0x110 [ 452.455373] ? fput+0x130/0x1a0 [ 452.458660] ? do_syscall_64+0x9a/0x820 [ 452.462653] ? do_syscall_64+0x9a/0x820 [ 452.466650] ? lockdep_hardirqs_on+0x421/0x5c0 [ 452.471243] ? trace_hardirqs_on+0xbd/0x310 [ 452.475571] ? __ia32_sys_read+0xb0/0xb0 [ 452.479655] ? trace_hardirqs_on_caller+0x310/0x310 [ 452.484677] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.490060] ? trace_hardirqs_off_caller+0x300/0x300 [ 452.495177] __x64_sys_sendto+0xe1/0x1a0 [ 452.499254] do_syscall_64+0x1b9/0x820 [ 452.503156] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.508527] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.513473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.518322] ? trace_hardirqs_off+0x310/0x310 [ 452.522831] ? prepare_exit_to_usermode+0x291/0x3b0 [ 452.527855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.532713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.537908] RIP: 0033:0x457679 [ 452.541119] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.560038] RSP: 002b:00007fd0b8b63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 452.567759] RAX: ffffffffffffffda RBX: 00007fd0b8b646d4 RCX: 0000000000457679 [ 452.575031] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 452.582313] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 452.589584] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 03:36:09 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x3, 0x6, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x60800, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000800)={{0x33, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e23, 0x3, 'lc\x00', 0x4, 0x6, 0x40}, {@local, 0x4e20, 0x0, 0x0, 0x800, 0x6}}, 0x44) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$xfs(&(0x7f0000000300)='xfs\x00', &(0x7f0000000340)='./file0\x00', 0x4, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9b5e9637f9d02d89541bcb9ba93dee3e8fe53cd51df517e1f2f7393ad579d21d9c5fce1d2e736bc360384413c839cd", 0x2f, 0xf3}, {&(0x7f00000003c0)="358516c8879f2b5c16dab1991f5e06329a0b67e354ecde279eeba693c5b4994935811b5650bd0f76c779a95c13e361e27e5d30e14744e31f24aab442ccf728139d415ffff110b5078b78aa6d307b7983b9563d6189ad3847bf8b20c2791c7efa4fd81a85d61db3661d9b3f8395f5f19814bd136873b1e991b5e945ba36247230d274c84bba15e6e94df3b7ef067ec48cc3de0193bbe4a2adc06085327eb4bcc5351ac474f7718b47ea", 0xa9, 0x200}, {&(0x7f0000000480)="477cddb5a1a472cc3079facb", 0xc, 0x2}, {&(0x7f00000004c0)="e569a62bffdfe22d31298c7f23ee07a8ad609b2a17647b3104f5d3750caa197dbf273b88b5e77991a6d9943634c1fdf788336f18d5af3d530d7e8284", 0x3c, 0x9b}, {&(0x7f0000000500)="019bd6e5e8cc143f88b914d4572ab6ed7e7510d6b79cdad2a6e731f47af44da3f115b5c653dc462189d33552fbd9c62857b7734a866e7522dc8bdeff3502a445241feb7a1227308b087290dc0322b732831d03a65935e72d13a1fccc36de0df6a049af4c1fe3a5d279b883f5641d3ea26d9c9c11313406076375dfe4517ab7a5ed114b16e2bd0185c92fbc53cfe51ad057f034cf850781868a96ce639b36667ae4fb7f6f4368213ee7054b48c878008438708cbe90dad55348fdd3580e9c01f2925d4c2fa50ac3396d9810bdd6ca0a8f4f7e6c7682b4f693d713a1c09137f67b", 0xe0, 0x8}, {&(0x7f0000000600)="dc19b3f4ab13098959243f20f8c086afa7cb48331a84aa01152d90a1b11937202ba31c587b1a2bbd3f677a7a3ae36fab725ed7c14470b6c0ede64fa3992bd368767ce3d66f835f3123c1e62d96b94b1681f703a653ef5aa7e356cb2236abbeb389ea16599a9d88c1d40a88e6732348ac47539011bb381afd68cca37b09d9f3414e11", 0x82}], 0x80a002, &(0x7f0000000780)={[{@swalloc='swalloc'}, {@barrier='barrier'}, {@usrquota='usrquota'}, {@uqnoenforce='uqnoenforce'}, {@swalloc='swalloc'}]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x10000, 0x0, 0x6, 0x6, 0x7, 0x80, 0x4, {0x0, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x7ff}}, 0xfeb1, 0x1, 0x1, 0x94600000, 0x1}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r5, 0x51b}, &(0x7f0000000280)=0x8) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="01f8"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 452.597300] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000003 [ 452.630724] FAULT_INJECTION: forcing a failure. [ 452.630724] name failslab, interval 1, probability 0, space 0, times 0 [ 452.654409] CPU: 0 PID: 18513 Comm: syz-executor3 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 452.662931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.672289] Call Trace: [ 452.674893] dump_stack+0x1d3/0x2c4 [ 452.678543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 452.683758] ? mark_held_locks+0x130/0x130 [ 452.687658] binder: BINDER_SET_CONTEXT_MGR already set [ 452.688026] should_fail.cold.4+0xa/0x17 [ 452.697040] binder: 18515:18524 ioctl 40046207 0 returned -16 03:36:09 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) [ 452.697362] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.708604] ? print_usage_bug+0xc0/0xc0 [ 452.708627] ? d_splice_alias+0x7c9/0x11d0 [ 452.716947] ? print_usage_bug+0xc0/0xc0 [ 452.716965] ? graph_lock+0x170/0x170 [ 452.716982] ? graph_lock+0x170/0x170 [ 452.717007] ? graph_lock+0x170/0x170 [ 452.717023] ? print_usage_bug+0xc0/0xc0 [ 452.717060] ? find_held_lock+0x36/0x1c0 [ 452.740682] ? __lock_is_held+0xb5/0x140 [ 452.744781] ? ttwu_stat+0x5c0/0x5c0 [ 452.748539] __should_failslab+0x124/0x180 [ 452.752822] should_failslab+0x9/0x14 [ 452.756649] kmem_cache_alloc_trace+0x2d7/0x750 [ 452.761351] tcp_sendmsg_locked+0x2754/0x3f90 [ 452.765884] ? lock_downgrade+0x900/0x900 [ 452.770061] ? check_preemption_disabled+0x48/0x200 [ 452.775104] ? tcp_sendpage+0x60/0x60 [ 452.778937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.778958] ? aa_label_sk_perm+0xfc/0xa50 [ 452.778987] ? find_held_lock+0x36/0x1c0 [ 452.779012] ? mark_held_locks+0xc7/0x130 [ 452.779033] ? __local_bh_enable_ip+0x160/0x260 [ 452.801703] ? __local_bh_enable_ip+0x160/0x260 [ 452.806390] ? lockdep_hardirqs_on+0x421/0x5c0 [ 452.811016] ? trace_hardirqs_on+0xbd/0x310 [ 452.815353] ? lock_release+0x970/0x970 [ 452.819339] ? lock_sock_nested+0xe2/0x120 [ 452.823607] ? trace_hardirqs_off_caller+0x300/0x300 [ 452.828808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.834373] ? check_preemption_disabled+0x48/0x200 [ 452.839411] ? lock_sock_nested+0x9a/0x120 [ 452.843658] ? lock_sock_nested+0x9a/0x120 [ 452.847901] ? __local_bh_enable_ip+0x160/0x260 [ 452.852604] tcp_sendmsg+0x2f/0x50 [ 452.856167] inet_sendmsg+0x19c/0x690 [ 452.859977] ? ipip_gro_receive+0x100/0x100 [ 452.864308] ? apparmor_socket_sendmsg+0x29/0x30 [ 452.869074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.874619] ? security_socket_sendmsg+0x94/0xc0 [ 452.879397] ? ipip_gro_receive+0x100/0x100 [ 452.883730] sock_sendmsg+0xd5/0x120 [ 452.887454] __sys_sendto+0x3d7/0x670 [ 452.891273] ? __ia32_sys_getpeername+0xb0/0xb0 [ 452.895948] ? wait_for_completion+0x8a0/0x8a0 [ 452.900548] ? __lock_is_held+0xb5/0x140 [ 452.904624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.910183] ? __sb_end_write+0xd9/0x110 [ 452.914254] ? fput+0x130/0x1a0 [ 452.917552] ? do_syscall_64+0x9a/0x820 [ 452.921542] ? do_syscall_64+0x9a/0x820 [ 452.925530] ? lockdep_hardirqs_on+0x421/0x5c0 [ 452.930130] ? trace_hardirqs_on+0xbd/0x310 [ 452.934465] ? __ia32_sys_read+0xb0/0xb0 [ 452.938554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.944119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.949500] ? trace_hardirqs_off_caller+0x300/0x300 [ 452.954618] __x64_sys_sendto+0xe1/0x1a0 [ 452.958702] do_syscall_64+0x1b9/0x820 [ 452.962601] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.967993] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.972956] ? trace_hardirqs_off+0x310/0x310 [ 452.977489] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 452.982510] ? recalc_sigpending_tsk+0x180/0x180 [ 452.987276] ? kasan_check_write+0x14/0x20 [ 452.991527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.996414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.001605] RIP: 0033:0x457679 [ 453.004822] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 453.023736] RSP: 002b:00007f0784a11c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 453.031455] RAX: ffffffffffffffda RBX: 00007f0784a126d4 RCX: 0000000000457679 [ 453.038728] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 453.045998] RBP: 000000000072bfa0 R08: 0000000020000080 R09: 000000000000001c [ 453.053275] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 453.060545] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000000 03:36:09 executing program 0 (fault-call:8 fault-nth:4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:09 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xfffffdfd, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:09 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x6, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:09 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:09 executing program 3 (fault-call:9 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:09 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x0, [], 0x0, 0x2}, 0x48) 03:36:09 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x6, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 453.259812] binder: BINDER_SET_CONTEXT_MGR already set [ 453.265194] binder: 18547:18552 ioctl 40046207 0 returned -16 [ 453.347909] FAULT_INJECTION: forcing a failure. [ 453.347909] name failslab, interval 1, probability 0, space 0, times 0 [ 453.381563] FAULT_INJECTION: forcing a failure. [ 453.381563] name failslab, interval 1, probability 0, space 0, times 0 [ 453.391786] CPU: 0 PID: 18556 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 453.401335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.410710] Call Trace: [ 453.413317] dump_stack+0x1d3/0x2c4 [ 453.416959] ? dump_stack_print_info.cold.2+0x52/0x52 [ 453.422181] should_fail.cold.4+0xa/0x17 [ 453.426282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 453.431403] ? get_page_from_freelist+0x29a4/0x5340 [ 453.436432] ? get_page_from_freelist+0x29a4/0x5340 [ 453.441462] ? lockdep_hardirqs_on+0x421/0x5c0 [ 453.446058] ? print_usage_bug+0xc0/0xc0 [ 453.450149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.455709] ? __alloc_pages_nodemask+0x568/0xdd0 [ 453.460587] ? trace_hardirqs_off_caller+0x300/0x300 [ 453.465698] ? graph_lock+0x170/0x170 [ 453.469509] ? print_usage_bug+0xc0/0xc0 [ 453.473579] ? kasan_unpoison_shadow+0x35/0x50 [ 453.478176] ? print_usage_bug+0xc0/0xc0 [ 453.482247] ? get_page_from_freelist+0x16db/0x5340 [ 453.487280] ? find_held_lock+0x36/0x1c0 [ 453.491362] ? lock_downgrade+0x900/0x900 [ 453.495519] ? check_preemption_disabled+0x48/0x200 [ 453.500551] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 453.505503] ? kasan_check_read+0x11/0x20 [ 453.509720] __should_failslab+0x124/0x180 [ 453.513971] should_failslab+0x9/0x14 [ 453.517778] kmem_cache_alloc+0x47/0x730 [ 453.521859] ? __nf_conntrack_find_get.part.42+0x1108/0x1cf0 [ 453.527666] ? print_usage_bug+0xc0/0xc0 [ 453.531765] __nf_conntrack_alloc+0x1aa/0x7c0 [ 453.536279] ? early_drop+0xbf0/0xbf0 [ 453.540100] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 453.545324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 453.550903] init_conntrack+0xfe8/0x1480 [ 453.554997] ? memcpy+0x45/0x50 [ 453.558297] ? nf_conntrack_alloc+0x50/0x50 [ 453.562652] ? check_preemption_disabled+0x48/0x200 [ 453.567695] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 453.572918] ? lock_acquire+0x1ed/0x520 [ 453.576920] ? nf_conntrack_in+0x571/0x1220 [ 453.581273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.586835] ? check_preemption_disabled+0x48/0x200 [ 453.592376] ? kasan_check_read+0x11/0x20 [ 453.596545] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 453.601839] ? ip6t_do_table+0xd65/0x1d30 [ 453.606001] nf_conntrack_in+0xbe9/0x1220 [ 453.610166] ? ip6t_do_table+0xde8/0x1d30 [ 453.614339] ? nf_conntrack_update+0xb90/0xb90 [ 453.618948] ? ip6t_error+0x40/0x40 [ 453.622582] ? check_preemption_disabled+0x48/0x200 [ 453.627636] ? graph_lock+0x170/0x170 [ 453.631480] ? check_preemption_disabled+0x48/0x200 [ 453.636516] ? ipv6_conntrack_in+0x90/0x90 [ 453.640757] ipv6_conntrack_in+0x61/0x90 [ 453.644832] ipv6_conntrack_local+0x25/0x30 [ 453.649172] nf_hook_slow+0xc2/0x1c0 [ 453.652901] ip6_xmit+0x138b/0x2410 [ 453.656535] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 453.661838] ? ip6_finish_output2+0x27a0/0x27a0 [ 453.666517] ? inet6_csk_route_socket+0x704/0x1020 [ 453.671459] ? kasan_check_write+0x14/0x20 [ 453.675705] ? inet6_csk_route_req+0x820/0x820 [ 453.680308] ? memcpy+0x45/0x50 [ 453.683607] ? ip6_append_data+0x2d0/0x2d0 [ 453.687850] ? lock_acquire+0x1ed/0x520 [ 453.691837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.697384] ? check_preemption_disabled+0x48/0x200 [ 453.702422] ? __lock_is_held+0xb5/0x140 [ 453.706507] inet6_csk_xmit+0x375/0x630 [ 453.710505] ? inet6_csk_update_pmtu+0x190/0x190 [ 453.715309] ? refcount_dec_if_one+0x180/0x180 [ 453.719899] ? ip6_mtu+0x160/0x520 [ 453.723467] __tcp_transmit_skb+0x1cbc/0x3fb0 [ 453.727987] ? find_held_lock+0x36/0x1c0 [ 453.732070] ? __tcp_select_window+0x9e0/0x9e0 [ 453.736662] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 453.741624] ? kasan_check_read+0x11/0x20 [ 453.745784] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 453.751099] ? graph_lock+0x170/0x170 [ 453.754957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.760505] ? tcp_fastopen_active_should_disable+0x269/0x340 [ 453.766403] ? tcp_fastopen_active_disable+0xf0/0xf0 [ 453.771520] ? __lock_is_held+0xb5/0x140 [ 453.775595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.781163] ? tcp_fastopen_no_cookie+0x155/0x190 [ 453.786016] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 453.791564] ? tcp_fastopen_cookie_check+0xca/0x330 [ 453.796609] ? tcp_fastopen_active_should_disable+0x340/0x340 [ 453.802518] ? tcp_rbtree_insert+0x141/0x190 [ 453.806991] tcp_connect+0x2121/0x46d0 [ 453.810906] ? tcp_push_one+0x110/0x110 [ 453.814890] ? ktime_get_with_offset+0x38b/0x460 [ 453.819660] ? pvclock_read_flags+0x160/0x160 [ 453.824172] ? secure_tcpv6_seq+0x228/0x340 [ 453.828518] ? trace_hardirqs_off_caller+0x300/0x300 [ 453.833639] ? kvm_clock_read+0x18/0x30 [ 453.837648] ? ktime_get_with_offset+0x310/0x460 [ 453.842422] ? ktime_get+0x400/0x400 [ 453.846168] ? __siphash_aligned+0x1c3/0x330 [ 453.850587] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 453.856147] ? siphash_4u64+0x25/0x3c0 [ 453.860065] ? secure_tcpv6_ts_off+0x2b3/0x430 [ 453.864656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 453.870202] ? tcp_fastopen_defer_connect+0x173/0x4a0 [ 453.875441] ? tcp_fastopen_cookie_check+0x330/0x330 [ 453.880580] ? __call_rcu.constprop.55+0x2ce/0x950 [ 453.885554] ? prandom_u32_state+0x13/0x180 [ 453.889921] tcp_v6_connect+0x1c0f/0x29b0 [ 453.894089] ? tcp_v6_pre_connect+0x120/0x120 [ 453.898598] ? __kernel_text_address+0xd/0x40 [ 453.903106] ? unwind_get_return_address+0x61/0xa0 [ 453.908061] ? __save_stack_trace+0x8d/0xf0 [ 453.912409] ? save_stack+0xa9/0xd0 [ 453.916044] ? save_stack+0x43/0xd0 [ 453.919681] ? kasan_kmalloc+0xc7/0xe0 [ 453.923571] ? kmem_cache_alloc_trace+0x152/0x750 [ 453.928427] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 453.933099] ? tcp_sendmsg+0x2f/0x50 [ 453.936847] ? inet_sendmsg+0x19c/0x690 [ 453.940856] ? sock_sendmsg+0xd5/0x120 [ 453.944748] ? __sys_sendto+0x3d7/0x670 [ 453.948730] ? __x64_sys_sendto+0xe1/0x1a0 [ 453.952972] ? do_syscall_64+0x1b9/0x820 [ 453.957059] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.962450] ? graph_lock+0x170/0x170 [ 453.966268] __inet_stream_connect+0x992/0x1150 [ 453.970948] ? tcp_v6_pre_connect+0x120/0x120 [ 453.975449] ? __inet_stream_connect+0x992/0x1150 [ 453.980308] ? inet_dgram_connect+0x2e0/0x2e0 [ 453.984812] ? __lock_is_held+0xb5/0x140 [ 453.988909] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 453.993596] ? rcu_read_lock_sched_held+0x108/0x120 [ 453.998619] ? kmem_cache_alloc_trace+0x353/0x750 [ 454.003485] tcp_sendmsg_locked+0x28e6/0x3f90 [ 454.008007] ? lock_downgrade+0x900/0x900 [ 454.012173] ? check_preemption_disabled+0x48/0x200 [ 454.017220] ? tcp_sendpage+0x60/0x60 [ 454.021036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.026582] ? aa_label_sk_perm+0xfc/0xa50 [ 454.030833] ? find_held_lock+0x36/0x1c0 [ 454.034920] ? mark_held_locks+0xc7/0x130 [ 454.039078] ? __local_bh_enable_ip+0x160/0x260 [ 454.043757] ? __local_bh_enable_ip+0x160/0x260 [ 454.048444] ? lockdep_hardirqs_on+0x421/0x5c0 [ 454.053044] ? trace_hardirqs_on+0xbd/0x310 [ 454.057378] ? lock_release+0x970/0x970 [ 454.061356] ? lock_sock_nested+0xe2/0x120 [ 454.065613] ? trace_hardirqs_off_caller+0x300/0x300 [ 454.070733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.076284] ? check_preemption_disabled+0x48/0x200 [ 454.081306] ? lock_sock_nested+0x9a/0x120 [ 454.085562] ? lock_sock_nested+0x9a/0x120 [ 454.089832] ? __local_bh_enable_ip+0x160/0x260 [ 454.094521] tcp_sendmsg+0x2f/0x50 [ 454.098074] inet_sendmsg+0x19c/0x690 [ 454.101898] ? ipip_gro_receive+0x100/0x100 [ 454.106257] ? apparmor_socket_sendmsg+0x29/0x30 [ 454.111030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.116600] ? security_socket_sendmsg+0x94/0xc0 [ 454.121364] ? ipip_gro_receive+0x100/0x100 [ 454.125697] sock_sendmsg+0xd5/0x120 [ 454.129425] __sys_sendto+0x3d7/0x670 [ 454.133243] ? __ia32_sys_getpeername+0xb0/0xb0 [ 454.137930] ? wait_for_completion+0x8a0/0x8a0 [ 454.142530] ? __lock_is_held+0xb5/0x140 [ 454.146615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.152183] ? __sb_end_write+0xd9/0x110 [ 454.156258] ? fput+0x130/0x1a0 [ 454.159552] ? do_syscall_64+0x9a/0x820 [ 454.163577] ? do_syscall_64+0x9a/0x820 [ 454.167562] ? lockdep_hardirqs_on+0x421/0x5c0 [ 454.172164] ? trace_hardirqs_on+0xbd/0x310 [ 454.176498] ? __ia32_sys_read+0xb0/0xb0 [ 454.180597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 454.186154] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.191531] ? trace_hardirqs_off_caller+0x300/0x300 [ 454.196707] __x64_sys_sendto+0xe1/0x1a0 [ 454.200818] do_syscall_64+0x1b9/0x820 [ 454.204721] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 454.210169] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.215128] ? trace_hardirqs_off+0x310/0x310 [ 454.219645] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 454.224679] ? recalc_sigpending_tsk+0x180/0x180 [ 454.229468] ? kasan_check_write+0x14/0x20 [ 454.233722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.238582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.243787] RIP: 0033:0x457679 [ 454.246992] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.265927] RSP: 002b:00007fd0b8b63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 454.273651] RAX: ffffffffffffffda RBX: 00007fd0b8b646d4 RCX: 0000000000457679 [ 454.280927] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 454.288197] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 454.295472] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 454.302747] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000004 [ 454.310050] CPU: 1 PID: 18566 Comm: syz-executor3 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 454.318556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.327910] Call Trace: [ 454.330512] dump_stack+0x1d3/0x2c4 [ 454.334173] ? dump_stack_print_info.cold.2+0x52/0x52 [ 454.339392] should_fail.cold.4+0xa/0x17 [ 454.343472] ? kasan_check_read+0x11/0x20 [ 454.347634] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.352813] ? ipv6_dev_get_saddr+0x576/0xfe0 [ 454.357335] ? graph_lock+0x170/0x170 [ 454.361155] ? print_usage_bug+0xc0/0xc0 [ 454.365234] ? addrconf_sysctl_stable_secret+0x920/0x920 [ 454.370705] ? print_usage_bug+0xc0/0xc0 [ 454.374780] ? graph_lock+0x170/0x170 [ 454.378615] ? find_held_lock+0x36/0x1c0 [ 454.382724] ? mark_held_locks+0xc7/0x130 [ 454.386913] ? inet_get_local_port_range+0x36a/0x520 [ 454.392032] ? inet_get_local_port_range+0x36a/0x520 [ 454.397184] ? lockdep_hardirqs_on+0x421/0x5c0 [ 454.401800] __should_failslab+0x124/0x180 [ 454.406065] should_failslab+0x9/0x14 [ 454.409883] kmem_cache_alloc+0x47/0x730 [ 454.413986] ? lock_release+0x970/0x970 [ 454.417996] inet_bind_bucket_create+0x82/0x320 [ 454.422688] ? __inet_lookup_listener+0xb20/0xb20 [ 454.427547] ? kasan_check_write+0x14/0x20 [ 454.431793] ? do_raw_spin_lock+0xc1/0x200 [ 454.436054] __inet_hash_connect+0x969/0xfb0 [ 454.440479] ? inet6_lookup+0xe0/0xe0 [ 454.444299] ? inet_hash+0xb0/0xb0 [ 454.447853] ? print_usage_bug+0xc0/0xc0 [ 454.451925] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 454.457470] ? __siphash_aligned+0x1c3/0x330 [ 454.461894] ? secure_ipv6_port_ephemeral+0x1da/0x2e0 [ 454.467102] ? secure_tcpv6_seq+0x340/0x340 [ 454.471450] ? check_preemption_disabled+0x40/0x200 [ 454.476490] ? tcp_poll+0xd60/0xd60 [ 454.480132] ? __call_rcu.constprop.55+0x2ce/0x950 [ 454.485085] ? rcu_softirq_qs+0x20/0x20 [ 454.489144] inet6_hash_connect+0x76/0xe0 [ 454.493306] tcp_v6_connect+0x182a/0x29b0 [ 454.497477] ? tcp_v6_pre_connect+0x120/0x120 [ 454.501980] ? __kernel_text_address+0xd/0x40 [ 454.506485] ? unwind_get_return_address+0x61/0xa0 [ 454.511424] ? __save_stack_trace+0x8d/0xf0 [ 454.515768] ? save_stack+0xa9/0xd0 [ 454.519398] ? save_stack+0x43/0xd0 [ 454.523033] ? kasan_kmalloc+0xc7/0xe0 [ 454.526946] ? kmem_cache_alloc_trace+0x152/0x750 [ 454.531800] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 454.536484] ? tcp_sendmsg+0x2f/0x50 [ 454.540207] ? inet_sendmsg+0x19c/0x690 [ 454.544198] ? sock_sendmsg+0xd5/0x120 [ 454.548107] ? __sys_sendto+0x3d7/0x670 [ 454.552117] ? __x64_sys_sendto+0xe1/0x1a0 [ 454.556359] ? do_syscall_64+0x1b9/0x820 [ 454.560436] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.565828] ? graph_lock+0x170/0x170 [ 454.569646] __inet_stream_connect+0x992/0x1150 [ 454.574325] ? tcp_v6_pre_connect+0x120/0x120 [ 454.578829] ? __inet_stream_connect+0x992/0x1150 [ 454.583688] ? inet_dgram_connect+0x2e0/0x2e0 [ 454.588187] ? __lock_is_held+0xb5/0x140 [ 454.592298] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 454.596979] ? rcu_read_lock_sched_held+0x108/0x120 [ 454.602004] ? kmem_cache_alloc_trace+0x353/0x750 [ 454.606867] tcp_sendmsg_locked+0x28e6/0x3f90 [ 454.611379] ? lock_downgrade+0x900/0x900 [ 454.615536] ? check_preemption_disabled+0x48/0x200 [ 454.620569] ? tcp_sendpage+0x60/0x60 [ 454.624379] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.629938] ? aa_label_sk_perm+0xfc/0xa50 [ 454.634193] ? find_held_lock+0x36/0x1c0 [ 454.638270] ? mark_held_locks+0xc7/0x130 [ 454.642428] ? __local_bh_enable_ip+0x160/0x260 [ 454.647102] ? __local_bh_enable_ip+0x160/0x260 [ 454.651791] ? lockdep_hardirqs_on+0x421/0x5c0 [ 454.656383] ? trace_hardirqs_on+0xbd/0x310 [ 454.660712] ? lock_release+0x970/0x970 [ 454.664696] ? lock_sock_nested+0xe2/0x120 [ 454.668942] ? trace_hardirqs_off_caller+0x300/0x300 [ 454.674074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.679617] ? check_preemption_disabled+0x48/0x200 [ 454.684651] ? lock_sock_nested+0x9a/0x120 [ 454.688890] ? lock_sock_nested+0x9a/0x120 [ 454.693155] ? __local_bh_enable_ip+0x160/0x260 [ 454.697851] tcp_sendmsg+0x2f/0x50 [ 454.701898] inet_sendmsg+0x19c/0x690 [ 454.705709] ? ipip_gro_receive+0x100/0x100 [ 454.710039] ? apparmor_socket_sendmsg+0x29/0x30 [ 454.714813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.720372] ? security_socket_sendmsg+0x94/0xc0 [ 454.725143] ? ipip_gro_receive+0x100/0x100 [ 454.729495] sock_sendmsg+0xd5/0x120 [ 454.733238] __sys_sendto+0x3d7/0x670 [ 454.737071] ? __ia32_sys_getpeername+0xb0/0xb0 [ 454.741750] ? wait_for_completion+0x8a0/0x8a0 [ 454.746345] ? __lock_is_held+0xb5/0x140 [ 454.750424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.755979] ? __sb_end_write+0xd9/0x110 [ 454.760191] ? fput+0x130/0x1a0 [ 454.763481] ? do_syscall_64+0x9a/0x820 [ 454.767464] ? do_syscall_64+0x9a/0x820 [ 454.771449] ? lockdep_hardirqs_on+0x421/0x5c0 [ 454.776046] ? trace_hardirqs_on+0xbd/0x310 [ 454.780372] ? __ia32_sys_read+0xb0/0xb0 [ 454.784452] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 454.789999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.795380] ? trace_hardirqs_off_caller+0x300/0x300 [ 454.800493] __x64_sys_sendto+0xe1/0x1a0 [ 454.804610] do_syscall_64+0x1b9/0x820 [ 454.808523] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 454.813894] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.818863] ? trace_hardirqs_off+0x310/0x310 [ 454.823374] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 454.828407] ? recalc_sigpending_tsk+0x180/0x180 [ 454.833178] ? kasan_check_write+0x14/0x20 [ 454.837426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.842285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.847479] RIP: 0033:0x457679 [ 454.850690] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.869591] RSP: 002b:00007f0784a11c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 454.877306] RAX: ffffffffffffffda RBX: 00007f0784a126d4 RCX: 0000000000457679 [ 454.884572] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 454.891841] RBP: 000000000072bfa0 R08: 0000000020000080 R09: 000000000000001c 03:36:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:10 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x1, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:10 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7a, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x0, 0xf, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 454.899118] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 454.906392] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000001 03:36:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x0, 0x0, 0x50, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:11 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1}, 0x48) [ 454.957992] binder: BINDER_SET_CONTEXT_MGR already set [ 454.963338] binder: 18572:18579 ioctl 40046207 0 returned -16 03:36:11 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 455.067877] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:11 executing program 3 (fault-call:9 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:11 executing program 4 (fault-call:4 fault-nth:0): memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x0, 0xf}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 455.190789] binder: BINDER_SET_CONTEXT_MGR already set [ 455.200368] FAULT_INJECTION: forcing a failure. [ 455.200368] name failslab, interval 1, probability 0, space 0, times 0 [ 455.241547] binder: 18600:18602 ioctl 40046207 0 returned -16 [ 455.256528] CPU: 1 PID: 18604 Comm: syz-executor4 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 455.265090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.265098] Call Trace: [ 455.265146] dump_stack+0x1d3/0x2c4 [ 455.265174] ? dump_stack_print_info.cold.2+0x52/0x52 [ 455.265209] should_fail.cold.4+0xa/0x17 [ 455.265234] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.265255] ? __lock_acquire+0x7ec/0x4ec0 [ 455.265274] ? print_usage_bug+0xc0/0xc0 [ 455.265291] ? rcu_softirq_qs+0x20/0x20 [ 455.265321] ? dput.part.25+0x241/0x790 [ 455.286127] ? graph_lock+0x170/0x170 [ 455.286156] ? mark_held_locks+0x130/0x130 [ 455.286184] ? find_held_lock+0x36/0x1c0 [ 455.323731] ? ttwu_stat+0x5c0/0x5c0 [ 455.327480] ? __lock_acquire+0x7ec/0x4ec0 [ 455.331760] __should_failslab+0x124/0x180 [ 455.336037] should_failslab+0x9/0x14 [ 455.339857] kmem_cache_alloc_node_trace+0x270/0x740 [ 455.344992] __get_vm_area_node+0x130/0x3a0 [ 455.349350] __vmalloc_node_range+0xc4/0x750 [ 455.353804] ? bpf_prog_alloc+0xe3/0x3e0 [ 455.357894] ? get_pid_task+0xd6/0x1a0 [ 455.361802] __vmalloc+0x45/0x50 [ 455.361820] ? bpf_prog_alloc+0xe3/0x3e0 [ 455.361839] bpf_prog_alloc+0xe3/0x3e0 [ 455.369264] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 455.369289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.369306] ? security_capable+0x99/0xc0 [ 455.369328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.369353] bpf_prog_load+0x435/0x1cb0 [ 455.369378] ? bpf_prog_new_fd+0x60/0x60 [ 455.369401] ? __might_fault+0x12b/0x1e0 [ 455.369422] ? lock_downgrade+0x900/0x900 [ 455.369443] ? lock_release+0x970/0x970 [ 455.369457] ? ttwu_stat+0x5c0/0x5c0 [ 455.369479] ? usercopy_warn+0x110/0x110 [ 455.369515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.369537] __x64_sys_bpf+0x36c/0x510 [ 455.383805] ? bpf_prog_get+0x20/0x20 [ 455.383853] do_syscall_64+0x1b9/0x820 [ 455.383873] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 455.383894] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.383916] ? trace_hardirqs_off+0x310/0x310 [ 455.383936] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 455.383968] ? recalc_sigpending_tsk+0x180/0x180 [ 455.383985] ? kasan_check_write+0x14/0x20 [ 455.384007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.393699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.393714] RIP: 0033:0x457679 [ 455.393731] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.393741] RSP: 002b:00007f29a7b29c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.393761] RAX: ffffffffffffffda RBX: 00007f29a7b2a6d4 RCX: 0000000000457679 [ 455.393772] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000005 [ 455.393795] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 455.393805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 455.393828] R13: 00000000004cc328 R14: 00000000004bdb29 R15: 0000000000000000 [ 455.398855] syz-executor4: vmalloc: allocation failure: 4096 bytes, mode:0x6280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 455.410862] syz-executor4 cpuset= [ 455.418693] syz4 [ 455.594920] FAULT_INJECTION: forcing a failure. [ 455.594920] name failslab, interval 1, probability 0, space 0, times 0 [ 455.604124] mems_allowed=0 [ 455.611250] CPU: 1 PID: 18604 Comm: syz-executor4 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 455.611260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.611273] Call Trace: [ 455.631748] dump_stack+0x1d3/0x2c4 [ 455.635391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 455.640603] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 455.646163] warn_alloc.cold.121+0xb7/0x1bd [ 455.650506] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 455.650526] ? __get_vm_area_node+0x130/0x3a0 [ 455.650547] ? rcu_read_lock_sched_held+0x108/0x120 [ 455.650580] ? __get_vm_area_node+0x2e5/0x3a0 [ 455.650612] __vmalloc_node_range+0x472/0x750 [ 455.659576] binder: BINDER_SET_CONTEXT_MGR already set [ 455.659960] ? get_pid_task+0xd6/0x1a0 [ 455.659990] __vmalloc+0x45/0x50 [ 455.660020] ? bpf_prog_alloc+0xe3/0x3e0 [ 455.660053] bpf_prog_alloc+0xe3/0x3e0 [ 455.671793] binder: 18623:18625 ioctl 40046207 0 returned -16 [ 455.674065] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 455.674091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.674121] ? security_capable+0x99/0xc0 [ 455.674145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.674175] bpf_prog_load+0x435/0x1cb0 [ 455.725016] ? bpf_prog_new_fd+0x60/0x60 [ 455.729105] ? __might_fault+0x12b/0x1e0 [ 455.733197] ? lock_downgrade+0x900/0x900 [ 455.737365] ? lock_release+0x970/0x970 [ 455.741364] ? ttwu_stat+0x5c0/0x5c0 [ 455.745093] ? usercopy_warn+0x110/0x110 [ 455.749230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.754786] __x64_sys_bpf+0x36c/0x510 [ 455.758694] ? bpf_prog_get+0x20/0x20 [ 455.762532] do_syscall_64+0x1b9/0x820 [ 455.762556] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 455.771807] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.771830] ? trace_hardirqs_off+0x310/0x310 [ 455.771850] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 455.771883] ? recalc_sigpending_tsk+0x180/0x180 [ 455.771901] ? kasan_check_write+0x14/0x20 [ 455.771939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.771966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.771980] RIP: 0033:0x457679 [ 455.771998] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.772016] RSP: 002b:00007f29a7b29c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.835252] RAX: ffffffffffffffda RBX: 00007f29a7b2a6d4 RCX: 0000000000457679 03:36:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000200)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f2a5"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) 03:36:12 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000009, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:12 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6c, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:12 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x20000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 455.842532] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000005 [ 455.849811] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 455.857086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 455.864370] R13: 00000000004cc328 R14: 00000000004bdb29 R15: 0000000000000000 [ 455.871686] CPU: 0 PID: 18617 Comm: syz-executor3 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 455.880222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.889584] Call Trace: [ 455.892179] dump_stack+0x1d3/0x2c4 [ 455.895826] ? dump_stack_print_info.cold.2+0x52/0x52 [ 455.901032] ? print_usage_bug+0xc0/0xc0 [ 455.905101] ? check_preemption_disabled+0x48/0x200 [ 455.910159] should_fail.cold.4+0xa/0x17 [ 455.914225] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 455.919512] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.924626] ? __lock_acquire+0x7ec/0x4ec0 [ 455.928889] ? graph_lock+0x170/0x170 [ 455.932707] ? __lock_acquire+0x7ec/0x4ec0 [ 455.936961] ? ip6_dst_check+0x471/0xad0 [ 455.941042] ? graph_lock+0x170/0x170 [ 455.944855] ? find_held_lock+0x36/0x1c0 [ 455.948955] ? __lock_is_held+0xb5/0x140 [ 455.953036] ? ttwu_stat+0x5c0/0x5c0 [ 455.956765] __should_failslab+0x124/0x180 [ 455.961005] should_failslab+0x9/0x14 [ 455.964824] kmem_cache_alloc_node+0x26e/0x730 [ 455.969409] ? graph_lock+0x170/0x170 [ 455.973225] __alloc_skb+0x114/0x770 [ 455.976946] ? skb_scrub_packet+0x490/0x490 [ 455.981281] ? ip6_mtu+0x39c/0x520 [ 455.984827] ? lock_downgrade+0x900/0x900 [ 455.988978] ? check_preemption_disabled+0x48/0x200 [ 455.994019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.999558] ? tcp_chrono_stop+0x25f/0x520 [ 456.003830] ? tcp_chrono_start+0x1e0/0x1e0 [ 456.008159] ? graph_lock+0x170/0x170 [ 456.011993] sk_stream_alloc_skb+0x13c/0x960 [ 456.016410] ? tcp_init_transfer+0x470/0x470 [ 456.020832] ? __lock_is_held+0xb5/0x140 [ 456.024911] tcp_connect+0x1274/0x46d0 [ 456.028813] ? tcp_push_one+0x110/0x110 [ 456.032820] ? ktime_get_with_offset+0x38b/0x460 [ 456.037587] ? pvclock_read_flags+0x160/0x160 [ 456.042098] ? secure_tcpv6_seq+0x228/0x340 [ 456.046469] ? trace_hardirqs_off_caller+0x300/0x300 [ 456.051599] ? kvm_clock_read+0x18/0x30 [ 456.055577] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.060595] ? ktime_get_with_offset+0x310/0x460 [ 456.065362] ? ktime_get+0x400/0x400 [ 456.069085] ? __siphash_aligned+0x1c3/0x330 [ 456.073512] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 456.079064] ? siphash_4u64+0x25/0x3c0 [ 456.082961] ? secure_tcpv6_ts_off+0x2b3/0x430 [ 456.087548] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 456.093093] ? tcp_fastopen_defer_connect+0x173/0x4a0 [ 456.098320] ? tcp_fastopen_cookie_check+0x330/0x330 [ 456.103430] ? __call_rcu.constprop.55+0x2ce/0x950 [ 456.108375] ? prandom_u32_state+0x13/0x180 [ 456.112712] tcp_v6_connect+0x1c0f/0x29b0 [ 456.116879] ? tcp_v6_pre_connect+0x120/0x120 [ 456.121381] ? __kernel_text_address+0xd/0x40 [ 456.125894] ? unwind_get_return_address+0x61/0xa0 [ 456.130853] ? __save_stack_trace+0x8d/0xf0 [ 456.135196] ? save_stack+0xa9/0xd0 [ 456.138830] ? save_stack+0x43/0xd0 [ 456.142460] ? kasan_kmalloc+0xc7/0xe0 [ 456.146351] ? kmem_cache_alloc_trace+0x152/0x750 [ 456.151197] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 456.155878] ? tcp_sendmsg+0x2f/0x50 [ 456.159607] ? inet_sendmsg+0x19c/0x690 [ 456.163584] ? sock_sendmsg+0xd5/0x120 [ 456.167480] ? __sys_sendto+0x3d7/0x670 [ 456.171458] ? __x64_sys_sendto+0xe1/0x1a0 [ 456.175696] ? do_syscall_64+0x1b9/0x820 [ 456.179782] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.185188] ? graph_lock+0x170/0x170 [ 456.189027] __inet_stream_connect+0x992/0x1150 [ 456.193699] ? tcp_v6_pre_connect+0x120/0x120 [ 456.198196] ? __inet_stream_connect+0x992/0x1150 [ 456.203053] ? inet_dgram_connect+0x2e0/0x2e0 [ 456.207553] ? __lock_is_held+0xb5/0x140 [ 456.211631] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 456.216306] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.221340] ? kmem_cache_alloc_trace+0x353/0x750 [ 456.226207] tcp_sendmsg_locked+0x28e6/0x3f90 [ 456.230730] ? lock_downgrade+0x900/0x900 [ 456.234897] ? check_preemption_disabled+0x48/0x200 [ 456.239991] ? tcp_sendpage+0x60/0x60 [ 456.243823] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 456.249368] ? aa_label_sk_perm+0xfc/0xa50 [ 456.253629] ? find_held_lock+0x36/0x1c0 [ 456.257701] ? mark_held_locks+0xc7/0x130 [ 456.261858] ? __local_bh_enable_ip+0x160/0x260 [ 456.266529] ? __local_bh_enable_ip+0x160/0x260 [ 456.271204] ? lockdep_hardirqs_on+0x421/0x5c0 [ 456.275793] ? trace_hardirqs_on+0xbd/0x310 [ 456.280127] ? lock_release+0x970/0x970 [ 456.284117] ? lock_sock_nested+0xe2/0x120 [ 456.288382] ? trace_hardirqs_off_caller+0x300/0x300 [ 456.293491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.299045] ? check_preemption_disabled+0x48/0x200 [ 456.304063] ? lock_sock_nested+0x9a/0x120 [ 456.308317] ? lock_sock_nested+0x9a/0x120 [ 456.312588] ? __local_bh_enable_ip+0x160/0x260 [ 456.317295] tcp_sendmsg+0x2f/0x50 [ 456.320845] inet_sendmsg+0x19c/0x690 [ 456.324652] ? ipip_gro_receive+0x100/0x100 [ 456.328984] ? apparmor_socket_sendmsg+0x29/0x30 [ 456.333748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.339295] ? security_socket_sendmsg+0x94/0xc0 [ 456.344057] ? ipip_gro_receive+0x100/0x100 [ 456.348387] sock_sendmsg+0xd5/0x120 [ 456.352121] __sys_sendto+0x3d7/0x670 [ 456.355940] ? __ia32_sys_getpeername+0xb0/0xb0 [ 456.360631] ? wait_for_completion+0x8a0/0x8a0 [ 456.365238] ? __lock_is_held+0xb5/0x140 [ 456.369335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.374886] ? __sb_end_write+0xd9/0x110 [ 456.378954] ? fput+0x130/0x1a0 [ 456.382241] ? do_syscall_64+0x9a/0x820 [ 456.386222] ? do_syscall_64+0x9a/0x820 [ 456.390212] ? lockdep_hardirqs_on+0x421/0x5c0 [ 456.394804] ? trace_hardirqs_on+0xbd/0x310 [ 456.399155] ? __ia32_sys_read+0xb0/0xb0 [ 456.403245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.408617] ? trace_hardirqs_off_caller+0x300/0x300 [ 456.413734] __x64_sys_sendto+0xe1/0x1a0 [ 456.417818] do_syscall_64+0x1b9/0x820 [ 456.421734] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 456.427104] ? syscall_return_slowpath+0x5e0/0x5e0 [ 456.432073] ? trace_hardirqs_off+0x310/0x310 [ 456.436573] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 456.441597] ? recalc_sigpending_tsk+0x180/0x180 [ 456.446363] ? kasan_check_write+0x14/0x20 [ 456.450639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.455496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.460694] RIP: 0033:0x457679 [ 456.463898] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.482844] RSP: 002b:00007f0784a32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 456.490571] RAX: ffffffffffffffda RBX: 00007f0784a336d4 RCX: 0000000000457679 [ 456.497841] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 456.505125] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 456.512402] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 456.519693] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000002 [ 456.531901] Mem-Info: [ 456.535737] active_anon:164485 inactive_anon:369 isolated_anon:0 [ 456.535737] active_file:4927 inactive_file:12737 isolated_file:0 03:36:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 456.535737] unevictable:0 dirty:711 writeback:0 unstable:0 [ 456.535737] slab_reclaimable:11929 slab_unreclaimable:105642 [ 456.535737] mapped:55184 shmem:379 pagetables:2726 bounce:0 [ 456.535737] free:1235380 free_pcp:850 free_cma:0 [ 456.573242] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 456.575688] Node 0 active_anon:660012kB inactive_anon:1476kB active_file:19708kB inactive_file:50948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220736kB dirty:2844kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 272384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 03:36:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 456.630728] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.669887] binder: BINDER_SET_CONTEXT_MGR already set [ 456.675336] binder: 18636:18640 ioctl 40046207 0 returned -16 [ 456.686704] lowmem_reserve[]: 0 2815 6318 6318 03:36:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x68000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 456.699904] Node 0 DMA32 free:2885836kB min:30036kB low:37544kB high:45052kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2887232kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1396kB local_pcp:1328kB free_cma:0kB [ 456.743882] lowmem_reserve[]: 0 0 3503 3503 03:36:13 executing program 3 (fault-call:9 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 456.756574] Node 0 Normal free:2039212kB min:37376kB low:46720kB high:56064kB active_anon:658028kB inactive_anon:1484kB active_file:19708kB inactive_file:50960kB unevictable:0kB writepending:2904kB present:4718592kB managed:3587504kB mlocked:0kB kernel_stack:8320kB pagetables:10988kB bounce:0kB free_pcp:1948kB local_pcp:1076kB free_cma:0kB 03:36:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 456.805617] lowmem_reserve[]: 0 0 0 0 [ 456.813579] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 456.836553] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 1*128kB (M) 3*256kB (M) 2*512kB (M) 2*1024kB (M) 3*2048kB (M) 702*4096kB (M) = 2885836kB [ 456.855099] Node 0 Normal: 353*4kB (E) 582*8kB (UME) 1828*16kB (UME) 913*32kB (UME) 350*64kB (ME) 211*128kB (UME) 308*256kB (UME) 170*512kB (U) 74*1024kB (UM) 32*2048kB (UME) 395*4096kB (UM) = 2039060kB [ 456.895215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.901610] binder: BINDER_SET_CONTEXT_MGR already set [ 456.916303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 456.928203] binder: 18650:18655 ioctl 40046207 0 returned -16 [ 456.934134] 18057 total pagecache pages [ 456.934152] 0 pages in swap cache [ 456.934163] Swap cache stats: add 0, delete 0, find 0/0 [ 456.934170] Free swap = 0kB [ 456.934176] Total swap = 0kB [ 456.934184] 1965979 pages RAM 03:36:13 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/139, 0x8b}], 0x5, &(0x7f00000005c0)=""/154, 0x9a, 0xf1bd}, 0x12021) setsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000680)=@dstopts={0x11, 0x3, [], [@enc_lim={0x4, 0x1, 0x100000000}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x800}, @pad1, @pad1]}, 0x28) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 456.934191] 0 pages HighMem/MovableOnly [ 456.934197] 343318 pages reserved [ 456.934203] 0 pages cma reserved [ 456.982298] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 457.027861] FAULT_INJECTION: forcing a failure. [ 457.027861] name failslab, interval 1, probability 0, space 0, times 0 [ 457.080027] CPU: 1 PID: 18656 Comm: syz-executor3 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 457.088590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.097984] Call Trace: [ 457.100592] dump_stack+0x1d3/0x2c4 [ 457.104251] ? dump_stack_print_info.cold.2+0x52/0x52 [ 457.109471] should_fail.cold.4+0xa/0x17 [ 457.113555] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.118687] ? __save_stack_trace+0x8d/0xf0 [ 457.123022] ? graph_lock+0x170/0x170 [ 457.126832] ? graph_lock+0x170/0x170 [ 457.130660] ? save_stack+0xa9/0xd0 [ 457.134292] ? save_stack+0x43/0xd0 [ 457.137920] ? kasan_kmalloc+0xc7/0xe0 [ 457.141977] ? find_held_lock+0x36/0x1c0 [ 457.146061] ? __lock_is_held+0xb5/0x140 [ 457.150170] ? graph_lock+0x170/0x170 [ 457.153991] ? ttwu_stat+0x5c0/0x5c0 [ 457.157711] ? check_preemption_disabled+0x48/0x200 [ 457.162739] __should_failslab+0x124/0x180 [ 457.166984] should_failslab+0x9/0x14 [ 457.170790] kmem_cache_alloc_node_trace+0x270/0x740 [ 457.175938] __kmalloc_node_track_caller+0x33/0x70 [ 457.180876] __kmalloc_reserve.isra.39+0x41/0xe0 [ 457.185648] __alloc_skb+0x150/0x770 [ 457.189373] ? skb_scrub_packet+0x490/0x490 [ 457.193705] ? ip6_mtu+0x39c/0x520 [ 457.197248] ? lock_downgrade+0x900/0x900 [ 457.201415] ? check_preemption_disabled+0x48/0x200 [ 457.206446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.211987] ? tcp_chrono_stop+0x25f/0x520 [ 457.216228] ? tcp_chrono_start+0x1e0/0x1e0 [ 457.220561] ? graph_lock+0x170/0x170 [ 457.224373] sk_stream_alloc_skb+0x13c/0x960 [ 457.228797] ? tcp_init_transfer+0x470/0x470 [ 457.233217] ? __lock_is_held+0xb5/0x140 [ 457.237309] tcp_connect+0x1274/0x46d0 [ 457.241228] ? tcp_push_one+0x110/0x110 [ 457.245212] ? ktime_get_with_offset+0x38b/0x460 [ 457.249991] ? pvclock_read_flags+0x160/0x160 [ 457.254512] ? secure_tcpv6_seq+0x228/0x340 [ 457.258855] ? trace_hardirqs_off_caller+0x300/0x300 [ 457.263976] ? kvm_clock_read+0x18/0x30 [ 457.267958] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 457.273001] ? ktime_get_with_offset+0x310/0x460 [ 457.277775] ? ktime_get+0x400/0x400 [ 457.281517] ? __siphash_aligned+0x1c3/0x330 [ 457.285953] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 457.291539] ? siphash_4u64+0x25/0x3c0 [ 457.295447] ? secure_tcpv6_ts_off+0x2b3/0x430 [ 457.300044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 457.305701] ? tcp_fastopen_defer_connect+0x173/0x4a0 [ 457.310904] ? tcp_fastopen_cookie_check+0x330/0x330 [ 457.316016] ? __call_rcu.constprop.55+0x2ce/0x950 [ 457.320964] ? prandom_u32_state+0x13/0x180 [ 457.325312] tcp_v6_connect+0x1c0f/0x29b0 [ 457.329477] ? tcp_v6_pre_connect+0x120/0x120 [ 457.333978] ? __kernel_text_address+0xd/0x40 [ 457.338483] ? unwind_get_return_address+0x61/0xa0 [ 457.343426] ? __save_stack_trace+0x8d/0xf0 [ 457.347773] ? save_stack+0xa9/0xd0 [ 457.351433] ? save_stack+0x43/0xd0 [ 457.355067] ? kasan_kmalloc+0xc7/0xe0 [ 457.358955] ? kmem_cache_alloc_trace+0x152/0x750 [ 457.363828] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 457.368512] ? tcp_sendmsg+0x2f/0x50 [ 457.372229] ? inet_sendmsg+0x19c/0x690 [ 457.376218] ? sock_sendmsg+0xd5/0x120 [ 457.380125] ? __sys_sendto+0x3d7/0x670 [ 457.384105] ? __x64_sys_sendto+0xe1/0x1a0 [ 457.388364] ? do_syscall_64+0x1b9/0x820 [ 457.392441] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.397838] ? graph_lock+0x170/0x170 [ 457.401684] __inet_stream_connect+0x992/0x1150 [ 457.406369] ? tcp_v6_pre_connect+0x120/0x120 [ 457.410868] ? __inet_stream_connect+0x992/0x1150 [ 457.415726] ? inet_dgram_connect+0x2e0/0x2e0 [ 457.420231] ? __lock_is_held+0xb5/0x140 [ 457.424309] ? tcp_sendmsg_locked+0x2754/0x3f90 [ 457.428997] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.434017] ? kmem_cache_alloc_trace+0x353/0x750 [ 457.438878] tcp_sendmsg_locked+0x28e6/0x3f90 [ 457.443392] ? lock_downgrade+0x900/0x900 [ 457.447559] ? check_preemption_disabled+0x48/0x200 [ 457.452596] ? tcp_sendpage+0x60/0x60 [ 457.456416] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.461963] ? aa_label_sk_perm+0xfc/0xa50 [ 457.466215] ? find_held_lock+0x36/0x1c0 [ 457.470293] ? mark_held_locks+0xc7/0x130 [ 457.474450] ? __local_bh_enable_ip+0x160/0x260 [ 457.479132] ? __local_bh_enable_ip+0x160/0x260 [ 457.483816] ? lockdep_hardirqs_on+0x421/0x5c0 [ 457.488417] ? trace_hardirqs_on+0xbd/0x310 [ 457.492747] ? lock_release+0x970/0x970 [ 457.496725] ? lock_sock_nested+0xe2/0x120 [ 457.500977] ? trace_hardirqs_off_caller+0x300/0x300 [ 457.506102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.511666] ? check_preemption_disabled+0x48/0x200 [ 457.516819] ? lock_sock_nested+0x9a/0x120 [ 457.521059] ? lock_sock_nested+0x9a/0x120 [ 457.525302] ? __local_bh_enable_ip+0x160/0x260 [ 457.529986] tcp_sendmsg+0x2f/0x50 [ 457.533537] inet_sendmsg+0x19c/0x690 [ 457.537349] ? ipip_gro_receive+0x100/0x100 [ 457.541705] ? apparmor_socket_sendmsg+0x29/0x30 [ 457.546470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.552014] ? security_socket_sendmsg+0x94/0xc0 [ 457.556793] ? ipip_gro_receive+0x100/0x100 [ 457.561131] sock_sendmsg+0xd5/0x120 [ 457.564856] __sys_sendto+0x3d7/0x670 [ 457.568677] ? __ia32_sys_getpeername+0xb0/0xb0 [ 457.575002] ? wait_for_completion+0x8a0/0x8a0 [ 457.579606] ? __lock_is_held+0xb5/0x140 [ 457.583688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.589240] ? __sb_end_write+0xd9/0x110 [ 457.593637] ? fput+0x130/0x1a0 [ 457.596934] ? do_syscall_64+0x9a/0x820 [ 457.600932] ? do_syscall_64+0x9a/0x820 [ 457.604917] ? lockdep_hardirqs_on+0x421/0x5c0 [ 457.609507] ? trace_hardirqs_on+0xbd/0x310 [ 457.613831] ? __ia32_sys_read+0xb0/0xb0 [ 457.617908] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 457.623454] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.628823] ? trace_hardirqs_off_caller+0x300/0x300 [ 457.633951] __x64_sys_sendto+0xe1/0x1a0 [ 457.638038] do_syscall_64+0x1b9/0x820 [ 457.641939] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 457.647321] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.652261] ? trace_hardirqs_off+0x310/0x310 [ 457.656793] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 457.661833] ? recalc_sigpending_tsk+0x180/0x180 [ 457.666600] ? kasan_check_write+0x14/0x20 [ 457.670864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.675730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.680922] RIP: 0033:0x457679 [ 457.684130] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.703524] RSP: 002b:00007f0784a32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 457.711240] RAX: ffffffffffffffda RBX: 00007f0784a336d4 RCX: 0000000000457679 [ 457.718507] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000007 [ 457.725778] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c 03:36:14 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x700, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:14 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x7, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 457.733062] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000008 [ 457.740331] R13: 00000000004d5610 R14: 00000000004c3963 R15: 0000000000000003 03:36:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 457.834687] binder: BINDER_SET_CONTEXT_MGR already set 03:36:14 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x10, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 457.878290] binder: 18681:18685 ioctl 40046207 0 returned -16 03:36:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x8, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x0, 0x0, 0xf}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 457.925578] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:14 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4c00, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:14 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x4, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 03:36:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000022, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 458.154984] binder: BINDER_SET_CONTEXT_MGR already set 03:36:14 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x14, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 458.191309] binder: 18708:18720 ioctl 40046207 0 returned -16 [ 458.223893] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:14 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xa, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 458.401240] binder: BINDER_SET_CONTEXT_MGR already set 03:36:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 458.439040] binder: 18737:18741 ioctl 40046207 0 returned -16 03:36:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000002, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:15 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6800000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:15 executing program 2: r0 = eventfd2(0x5, 0x80000) write$binfmt_aout(r0, &(0x7f00000023c0)={{0x108, 0x20, 0x100000001, 0x104, 0x204, 0xff, 0x284, 0x3}, "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", [[]]}, 0x1120) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000500)={[], 0x42c, 0xffffffff, 0x262bab4b, 0x0, 0x80, 0x100000, 0xf000}) write$binfmt_aout(r3, &(0x7f0000001380)=ANY=[@ANYBLOB="c966"], 0xab) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x59e14655, 0x4, &(0x7f0000000240)=[{&(0x7f0000000180)="ef7df9c683a5b60734653a57be4b4d8dda974b1fb2091083c31c5de7c15bf1d8d95c030f73f5d26c642dd03dea1b513eeba9e70cc3acd51fa6ddeecc8175a5060e2a42cb0db1e067006439a1f6d5e59c3b5e6ef23ab10ccd1315abb9c0a976c51ff4bd841c624777867dc6d27147576446a35f98e3d1d05d927a5a855d4a08b824897ed9edc0d34fae6cdbc8cf36408d46cf8d856bd91eb3b3d488015ca1d548449594a7175ca5775d0e512e616b09", 0xaf, 0x1d}, {&(0x7f0000000300)="3a87329e1d6078c09742b531d2fba1ee3c5c0ada8f2949393651eed5709a09d30b3389b3dd34ea37ea13dd99a2b4ead0f80696d1119ab87913d696bfcdb845fc4aee54cf16c00e74ebb41cfca5603668f251c33038c73bf6e036ce0beb0398b3b33a8f0e5935a21d21d0bbf31d87c807faf5ac85434be2ca01610ce31135171897004f66e88ee1b3d18624ef90e58b70eecb47062019e346e621b93d6f0b5dec7d18028d2efd01d61c13dd5d7e147413fd6a3655916163a625120f373c5d0935e048eda74140878eed7ca4c7fd4db7c0650f5836ff91f1", 0xd7, 0x7fffffff}, {&(0x7f00000013c0)="c769351af4205b1d043564eba2dd455108a173facc630c401ab2585c5106214e33a79925627d0564f18294989b3f47e9651b6973cde244b22d09a29b114ce05a3f9f2df785c60b589ef0453588f8b6f65c8c102d9475e648e3e671773aa3ed8c3a6b5f8eb076161a775b92d73c4a9407f060a107f498f99241084311f339db0c346fc8ef0fdfbc5120f9836a65d9fb8c3498b145a1ec88cd3ffdc4b3f429fa88f0038488dd44df2ddc9982cd81eac244ed101bde7216e79ea93b343fb8a6406186ada0814e2bc9d2c3e0e73de225129152b870c1d87c8adc6d683390678e9837305a52f8b182393d022921822d0eca6d63b085d8c2927f7338d4886773d36d5d9d54dcdaaca597ffe7c2d8cd72165d8f79010b2cf0dabd977b73279f9daeaa5867b35b34a442282c34d83774be987ea7ccf97a0a6cbae24c08511a786a6b9dd964bfa1c7bed69b683cabe3905be59b8fc61b67fc2dc65451272c75b10fa7ab69cbe48e6dce6abd2add788d89d4df1a4b9a8b9ac1f9b95c91dbfa5e8e8a1322ce8f23febe686c5990d5f73a150c942718683f4957195919f2a30ecff3056ead07c0be4c8e798b2472e11d966768dffaf28f86d4952395bdf20372585086c7e60c3341e0329e808bd253c538daa0ef0f33b349ded8488a21aa0992ebd2407bd8c5cce1c6caf77b99abac295b50183095922ddcdf9544934d3b9e0e0d33b84427616eb3176e67a44651f95cc4194dff435b28e45bfcf490ec7e20a0ff47d8cf02dba87c8e3929f1b0daaa59d1a5b311c1a7c39d08ec9507e84d3e430f73d1c7ce5ef0baa1bb4bf448cfc8ac1818c5212c03e9bdf6a058af931b75fc6c1986ebf963f9fc365c1d89e458878c18188e55f8b40b3edf5ad0dbaad7dd35d4de90f62d4df234b0fc3fff1e4e147093facdd1fd87eaf897cca1ac1e869977924b62edee67b79537cf1e24b1b8e3e94457ebbc650993d0ebe10460d307595395d00a556c345eee15840b3ab0354e964a959a1bcfd76cd448d4cb9813cdda96d62b137bfb43a27b39edb805db41a38cfd50ab3c080d5d7e2668b77f48d9a971dd507912b98695b165bdd923c129d421dc8f1d7a8914728a9289854e42ef8d2d9c7cc08d61ca09c866aa28bd62b05e07dde26cea615593183d67b6b4ce1e42dde938334c49f1021595ba6fcf44eb7760c63c829c35320f7692634dcb6781a451148ceb337fc958c598a346efae7add4ec9de2fe47a736505282636da205fccae2bb6c639ad5f676672839cf807dfb014a993770e9dfa476c3f1db6214b279f2fe8fd666bab62478bbf55a23d155b327c08ee31fe7db5821f9264957376d9e4599a54fe972631ee223db94bc18ab180e6dd69b024a006c0f8b00f3e68cc8c2fad25d4a9bdea5efa6b93b1402428e8c514abe3c03a936483ebd35246d1f87e50728002bf5843c8cbaa0d9ff3dbf12af640d9462f7304480c6a4688529716c49c2d7162560487bc5552bc300a112095b5c5073c6bcfc01413e7a1ae344a686c4249d91e5e45b02e365ae334e24f5f7b489e2d0169c9de76cee1abd94ebc0ae3fa84947f81aafda4e526e4f907941d60dd686a618b2f8ea8aeb3c28c33326ecf1bdd95a2ae32bf23eff43f5218e7b4cbb99d54dfc787e171fd7053088b85464623bf887b5b456d8eb4e8278a11fff114d3b847ae1f926e94203e2c170536598a579e958ed92a6276b1b87bafed79ccfd65fd7129a9f74b316fcd7c0e94f69968e655c56d5fde72933a71f4ef0e5db6e0fcc3a7f2a6a645d4579137355d5eabc26058600ed1afa24bf9babbf277f88adb6795ca6bbf2562d798b68b11ffc7e34a7d8b11e39b9ba8623722ee52c202cc645be6c20c7e25dbf4909e2687c81ddefb2c8cf11bb86613628f4dd55ab30f8b0bf83f9a855a66520dac5cc29ab32b2809ec26eea713224f7428339f85fd0fe6df04d613b1fa0bbe702e77af6a484a84aa8e7ae52aeeecf99771145dea4a96e2ccd6f8bf028c1087533c2c5cf506e606f7a8a2d6882b1179e387922ac2d7d070bda7eafc0b1890777c04464b755678809565e74433e19e5bc65ab8e17207b4b037d8217dc573549ec77bdadfb2890ed998ac91b337625756b298e25119069cd6497c90e83c7cfdd8b900798eab105984550fe4c10d5e51098c6017e7da7372badd3f6946910c4e64256a8c1f5065edd16e3502e9c903e55650f9d670d7d28a7863315af5c1073ca2685ae7312dba8f8efc1180ba6bc96884d65f244f66acf106a410d76fb1564bca964e63a01c2cab8edc7e794259de9e2e1eb8bafbb675a5551f49c56c1e1b176a5cde6ebcf11c14d3820d763969b581c714c3eba8b97b68e0397096b750faaf000d7f12c39234b2022515b0171e473c3ebdad1f613f4466614e96d6a33f510a8848c5326c787fe2b36a413b697eb516355da3e940530974d95efecf49cf626f470a7a1c4515a57583cc146ec32cf832778dbcba2cf89a3ed9923500707bbf44c85323ebebdd9e4ce2f909050c4382e98b8da12804a0aa026e580d5792e09fcce629cb8c2fec11ccfd127cd4f720bc6ec415dee53b0dca31eb366ca72b92c04e17c61e76e404cd6bf25fb8f6c8559f79d0ddd94ed73f8b706f8bc0b97360120e3cdb689759acc557b367fc70e54060f897c45109551714b687f67149e4017e4076c7d443cbfb7e58f0d3ab5aa908bac47aa27ecdc07ff4e9792f68d082b78f917558b2e97271d75a630cc661b16fb70d12905a546c77a1c0befb64b03672849a4aeb1a70ba156a6d6f4e74857eb761a17eb07b64b76a8765c1b84154ed638a748663d45353889d8e1f67d9e3fa38bc5c07b81fd8068fab88425ac4d471503c7f86b3ba18af33dfa03682350b899c8c38274fe64daec2ad0f098ae3051024d4f96690d3ed9d5b192a97d340528b737ffb9340e2acff36a0c203d634f99a6b745a3640efbd97c51ba4c998c71fde8ee91701afa8708feba1a3b56fefa03344537833d05768f9e8990fc67f6f81c6d1b21c9b9cf34f72cc1f8035f2d04302f28fc41d0150715aba05e525bcf95a12e7e7d4916f9d441b9e85f7bc222da01bb1455c2cd48ab0fa7b0e83e68baf233b4b1f1467d57d02501e63ddfe73e4351307bb82a461f3fa709923309d3d74a7091410b2b802a616272fbac08db914e1a39acfccfd5d1f3856d47f5be7ce2e7bbea3e45288494e7d0dcef17ec78ffe9034f4e7bd6986cbe26a3b42aead580bdcf2b98c7a3d34d31c58f49940efcc58d84adaa71581ec8153c52da4617a4bc64c84c63a095709791441a7cff38996a38922eee3c6050e5c27c1a5ac248e1744f725929debe8f2fb1cb63204f536fe98389a9ed2b26b249b934d2d37849dbe74fce4b52edf05d4f85c08a4ea0768d4d70262659e98456629223c83981d92b1c7c863be6053dafce68c7e25ebf11b916324edd336fe9ab0e68249e90a78567418f5f6bb2b1539052361f086ec7e0ea64423844e595cefcf6dd6af16761744fbe4c97674ff5247f56b4811844faa270e8659a9885586798d467111a588ab933813bde95d5e496f7c2ae0b74bbef88a4f9eb0334e345aaa3b33c1efe428558a8df1af00ec02fa4ec3db38590cfc01a91208414e7653d76658a48d31c262098f6451d790ac7b25c6fd5139bd4d92661abba0b3b00e3ac06d2c5ccc9cdf35ee5b627a9dc1de4aeb7e24e763b76d2dee7e53ecb6486112239fa30bab4f95d23a776b0a22d527d7fa0152724956fb3d410e80c48520b9af946fd9c296b722ce81dba8266276e16132d828122958dd459bf3c6aa6233d8199794c9ba7e519ac9b489e3b042b3d7ea37ae4320756dea8cbfe746154b3a49345ee5906e1c498a96b2fd7e280bf5366af4f9e31fe0a2ce96ab09143fe6bc05381d549866c6021769746720699941905de7f617d16110979c44cdc1d92f6f2eba8a1df92c255bc6cfa4843a72dafc52629c30283d83e052c227c96ec305b6bc6fa65b41be4bd17c3d993f1eba12565f280cda0c6eccbcec83efc2a445f5715f797983e535a70d3ca87a3448365f569460c30abba9699b8e5dfd7e59f3ae92a99cb4714907519ff91bdb478a2fdf6fd4dc505872bf63a0e9d6c106cf4455fc7c3c58e782a53777fb5cb78dd4cd484c5ac2069ee8ed033e871558187e32485059a86641354fd4ce0501d4b338bed0f5d1c402898fe570b0558f00b3221c4be18689565c49d76ea3a56e2a7d5c42fa0069283933deec76c03392fe86d4818a7193cfb05a23055b633bec285cd1dda3a51d59121a3a24e5ebee088506cb45576c778ff897dc991b4a1a0ff3b9e6b7cfea9a43f390405a1cab4744dd4bc85ef62956af526b9efeec9a56690623ad383a79b60fb69cc78ad0d0202765a8c577639aace5a299207e7f7245971728d6612e52cfa8e8f5adc6edf2cb3533cad3f969ad8bef0bfe3d7d984ec4e3e78b7008f39b95a4ea774d81615e9bfbc5ed4fcc7e55c2ac43a8fdfff02602f2662558a6d50278a2035538bc63850a6176722d887d57861b2f32fbb58ae2747670bb921cf4279b44278b28980641fcf48027a0ee063208f563a5943b35068390066cbe44f172b8808aa8ce932e69e0e77daa41e262b3b0fe9812f574a4988fb56da7ad36f76cd2c6a8d86d4c5d39a9d7dfef0734107bbfb4eedcd4b9767fb5a39268b70ef92f57af3d3cb8520706d7d9f639ce32f1191ef82984fe5da3a641fa415c73d3532d944aa9358a7ea1bb3002731b6294f440b1d4634f038d8de739958f85125fb8f4f893dcb96b828e160f8a65d80105d15c0c59c6e221d221b4c170b96e3daef5bc102720333cc15deb10ebac554f75bfb00a3bff2b369853de9b353ae3a76122dd7ecf865016c9bcdca9f2b50a6a4d17347bf125e88be0caa02d8496bfa98cdf12b74a25ebdc6550183f71f4c9ae41af9ec34fb671937a38005dd73b0a567f5ddb0f584dd564f8db1edc4497d6b113416daf10680d4d060a29c6977452788a2ebc76b69c8000f9b22baee8cdebdaf58751143907dd28421a633a7d8b18add729e13fc13e7ec1446acc0eb556b48402ef7fb8ad0b871326f5ac750257537cc8335b42582c0771751ed7383f8116ddfd45e7fc45a5cc3ae6e2dda8595e45f8063a129ac4ee9e74e8787bf0bf9b5acb69cb2f83f02bb95286cda82602434b8fd1f06ba000ea073c3e7e69f89fbb82cc34d74b6c6393be32285bb454170f5a8d89ee75bfc1d8c7b50668730501de005b0bfccfc32068a7ce963b0174c01a8b6c99a0e7dd64e6d2ae78d395d5614e69b9133a6a02c348636875b314fb26fd64d2a2dc4442adc703f2f4d8d3fb22c58ad6d5d4208752014ad5541ede11426aef7d8615b910b266a1c9b18b148a3d0aa1daf6e1b5d8a6e997368adb27a21ea35f08ce1c23953bc52f762e841757bba52b06b30a31d6a366d3b9f74aed5c142114f97674a7004355d91b4290d593f2ac9835de7ce359da6b217c160eae8ca6e72e4dd56a17ada41d1318981f8bb4874866790881fac688a0c257ea682d1e82275268c49823dfc12ce30c598da5821c3c117e81ea0f64c985e864e0e5bf643afc2f561f616c9615991e3cd3e48bb6c83272ee82caa04a2210dc5442eea2099586f05f13fff463a0dad4295dac4a8cd9991c903df6ad41a44708a5d02c95068fcf8c18aed04a9222f78424c560c300a87c4cda9152e78042d9fd9c46d2740935056decf9b253ef0da217139131c7d0c74cd53d95ba91aa359bf1819451b99920fdb42db90899fffd91c5fd", 0x1000, 0xfffffffffffffff8}, {&(0x7f0000000400)="b76cdf734cac58a9ae2ee1ee92c5fcaa648e198a2378cacb95152732f3ebd3283ae324b86951a3df266b576d08442522639bf299f55b6b1a2e42bc965992c124d5267e50b582465533fb5a0940a0f53da3eac1bb04076207c2b776e37537ac54584451d0ea494009010602a7d970b9dab1dc2d6790d1f75e83b81dffe550da2c9b065eb13ce1d3041fb08ce4140d2b782994646438c185c4ccbede61a4ef525a", 0xa0, 0x1}], 0x30080, &(0x7f00000004c0)='GPL#\x00') 03:36:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000005, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 458.954580] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 458.979276] binder: BINDER_SET_CONTEXT_MGR already set [ 458.997520] binder: 18753:18760 ioctl 40046207 0 returned -16 03:36:15 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x2000000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000018, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 459.207605] binder: BINDER_SET_CONTEXT_MGR already set [ 459.212958] binder: 18771:18776 ioctl 40046207 0 returned -16 [ 459.247078] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 459.279200] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:16 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x8, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'wlan1cgroup&-GPLmtrustednodev\x00'}, &(0x7f0000000180)=""/74, 0x4a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0xa04000, &(0x7f0000000300)='/dev/kvm\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000002, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000014, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:16 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 459.761104] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 459.777355] binder: BINDER_SET_CONTEXT_MGR already set [ 459.799688] binder: 18791:18795 ioctl 40046207 0 returned -16 [ 459.815414] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:16 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xfdfdffff, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fa1f0e230c5c911c1777e7ee20b2c01307842e7fb7a10097c0bb44cdb19ed04ee1db167678435325197302ccb8ece79c20ee89b02ec41299c04df6032c2c567b895513362d93353a1a214757657b514d2698332723a2a90dfa972c9b9b7c7e8ab1c1f45fe1f264cb1c017022e3fe9760a1889e098ef17009c57dbcfc3ce264480294374b3b7137737700b246765c8e195550d29b1453f3f3e2c7e50b0dedac59a8a9284c65e953b748032754a37bbcb0da352409180cb527aa09848e0bc068ba7bcb4d312df9113348989371321a19967107c85f178deadf053d6d8995ab666cd899ae0a5511385137f05f2c796df98316ea00e1fbe9a063be40fad0a6f3a8d97413408ace94a846aaecbcddd9eaa1d8c32c9436a38007ce566155"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xf8a5d90db86d280e) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 03:36:16 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000009, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 460.014356] binder: BINDER_SET_CONTEXT_MGR already set [ 460.078042] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 460.097332] IPVS: ftp: loaded support on port[0] = 21 [ 460.115243] binder: 18803:18806 ioctl 40046207 0 returned -16 03:36:16 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xa00000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 460.163844] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000014, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x10002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0b1e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x3000, 0x107000, 0x3, 0x23, 0x1fc0000000000}) [ 460.277603] device bridge_slave_1 left promiscuous mode [ 460.294168] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.324277] IPVS: ftp: loaded support on port[0] = 21 [ 460.332200] binder: BINDER_SET_CONTEXT_MGR already set [ 460.360448] binder: 18823:18827 ioctl 40046207 0 returned -16 [ 460.379987] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 460.397251] device bridge_slave_0 left promiscuous mode [ 460.406285] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.514700] team0 (unregistering): Port device team_slave_1 removed [ 460.525560] team0 (unregistering): Port device team_slave_0 removed [ 460.538265] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 460.570534] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 460.635087] bond0 (unregistering): Released all slaves [ 461.889678] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.896344] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.904058] device bridge_slave_0 entered promiscuous mode [ 461.982987] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.996518] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.004260] device bridge_slave_1 entered promiscuous mode [ 462.086872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 462.106273] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.112751] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.128018] device bridge_slave_0 entered promiscuous mode [ 462.164729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 462.255798] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.275018] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.282968] device bridge_slave_1 entered promiscuous mode [ 462.349993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 462.359280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 462.425036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 462.459795] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 462.613597] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 462.691037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 462.738591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 462.745475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 462.758582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 462.766314] team0: Port device team_slave_0 added [ 462.792083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 463.061908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.074526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 463.082665] team0: Port device team_slave_1 added [ 463.274338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 463.283799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.294471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.448221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 463.455670] team0: Port device team_slave_0 added [ 463.461161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 463.469572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.486152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.633861] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 463.642335] team0: Port device team_slave_1 added [ 463.648070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 463.655749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.672536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.830910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.839627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 463.847939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.858819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.002331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 464.010754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.037256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.181351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 464.188738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.198990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.344698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 464.359778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.371680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.581752] device bridge_slave_1 left promiscuous mode [ 464.587624] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.636984] device bridge_slave_0 left promiscuous mode [ 464.642500] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.815042] team0 (unregistering): Port device team_slave_1 removed [ 466.825555] team0 (unregistering): Port device team_slave_0 removed [ 466.836883] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.889894] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.949253] bond0 (unregistering): Released all slaves [ 467.305951] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.312396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.319155] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.325527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.334332] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 467.609338] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.615758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.622697] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.629100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.666918] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 468.076711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.084580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.678021] device bridge_slave_1 left promiscuous mode [ 469.683732] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.726927] device bridge_slave_0 left promiscuous mode [ 469.732462] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.887945] team0 (unregistering): Port device team_slave_1 removed [ 469.899705] team0 (unregistering): Port device team_slave_0 removed [ 469.910632] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 469.950472] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 470.032749] bond0 (unregistering): Released all slaves [ 470.262479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.609833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 470.727732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.934611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 470.941194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.963041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.066758] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 471.275955] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.386850] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 471.393300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.402593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.687580] 8021q: adding VLAN 0 to HW filter on device team0 03:36:28 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0xe, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000005, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:28 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x60000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x12101, 0x0) accept$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="33ff0a1087a514197bc13a3d0d7938a11fa4bad2e390b469c122449dedf0d8b86199cba788771469450f5c67e975d5ad4c4dfe48acdb2b4f0c430b"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000008, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 472.557709] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 472.574018] binder: BINDER_SET_CONTEXT_MGR already set [ 472.596239] binder: 19341:19352 ioctl 40046207 0 returned -16 [ 472.604209] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:29 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0xf, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:29 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x600, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:29 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2080, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0x5c, &(0x7f0000000180)=""/92}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x50000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x140) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x2000003e, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x2000000d, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:29 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x6, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="baa9"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 472.951886] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 472.971642] binder: BINDER_SET_CONTEXT_MGR already set [ 472.993284] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:29 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0xa, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @generic={0x9, 0x80000000, 0x3c8c, 0xfffffffffffffff7}, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.049041] binder: 19384:19396 ioctl 40046207 0 returned -16 03:36:29 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x2, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x2000000d, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.181098] binder: 19420:19422 unknown command 16456 03:36:29 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x12, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.209236] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ff003044494392da1d3dc5c0eeb1dbcf2b57290700000059cb8d24cdccb8e1a2a493454528ac05bc1c1ff231c1b9b21b6ad741d462313aafd6c13a5dd917e0a221dfb3bcfc7d59da494512b9ffbd7b171a26d5ecb555abb4468e246afbaf8c3fbcc2fde417f1c0377c4c70dc645a4b1e6396b9625f5482f09e697fd062abf2328cb8c8dda5a8fce636ddc735a27beb88acee42dcebcf2dbcbd8f289dae1ef5b5d1056dacedb4a42a6ba55ab19bcd502c8da887ff98b519f5f8dc6d786a3b451ecfcb595adef067ca651c6f1d64f45cf72043dc7ba7f2655daf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x0, 0x1, 0x5, 0xfffffffffffff355, 0x4}, {0xf, 0x1, 0x4, 0x9, 0x100}]}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.249754] binder: 19420:19422 ioctl c0306201 20007000 returned -22 [ 473.285718] binder: BINDER_SET_CONTEXT_MGR already set 03:36:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:29 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.336242] binder: 19420:19440 ioctl 40046207 0 returned -16 03:36:29 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x9, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:29 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x6c00000000000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x2, 0x4e22}, 0x1c) close(r2) 03:36:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map={0x18, 0x2}, @ldst], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.495961] binder: BINDER_SET_CONTEXT_MGR already set [ 473.503164] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0xb, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.563796] binder: 19469:19471 ioctl 40046207 0 returned -16 03:36:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0xffffff7f00000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) prctl$setname(0xf, &(0x7f0000000140)='/dev/kvm\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.727065] binder: BINDER_SET_CONTEXT_MGR already set 03:36:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000018, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0xd, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x3fffffff, 0x4e22}, 0x1c) close(r2) [ 473.767530] binder: 19497:19504 ioctl 40046207 0 returned -16 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x3, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x4c000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x900c0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xe, 0x4e22}, 0x1c) close(r2) 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 473.957911] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 473.980977] binder: BINDER_SET_CONTEXT_MGR already set 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x11, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 474.013687] binder: 19527:19531 ioctl 40046207 0 returned -16 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x13, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x2, 0x4e22}, 0x1c) close(r2) 03:36:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x405f0000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:30 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000140)={0x6, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r4, 0x40, 0x1000, "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"}, 0x1008) 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x5, 0x4e22}, 0x1c) close(r2) 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0xc, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x0, [], 0x0, 0x2}, 0x48) [ 474.290219] binder: BINDER_SET_CONTEXT_MGR already set 03:36:30 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1}, 0x48) [ 474.354176] binder: 19571:19578 ioctl 40046207 0 returned -16 03:36:30 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x60, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x6, 0x4e22}, 0x1c) close(r2) 03:36:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1}, 0x48) [ 474.495570] binder: BINDER_SET_CONTEXT_MGR already set [ 474.541814] binder: 19600:19604 ioctl 40046207 0 returned -16 03:36:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xc, 0x4e22}, 0x1c) close(r2) 03:36:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x401, 0xa00) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r3}, 0xffffffa9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r4, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="f2c4715ae9c56059047a99"], 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:36:31 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:36:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xc, 0x4e22}, 0x1c) close(r2) 03:36:31 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x5f40, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:31 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 474.696750] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="4b0e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 474.791205] binder: BINDER_SET_CONTEXT_MGR already set [ 474.804060] binder: 19634:19642 ioctl 40046207 0 returned -16 03:36:31 executing program 5 (fault-call:3 fault-nth:0): clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:31 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:31 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 474.919479] FAULT_INJECTION: forcing a failure. [ 474.919479] name failslab, interval 1, probability 0, space 0, times 0 [ 474.957580] CPU: 0 PID: 19654 Comm: syz-executor5 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 474.966095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.975477] Call Trace: [ 474.978101] dump_stack+0x1d3/0x2c4 [ 474.981782] ? dump_stack_print_info.cold.2+0x52/0x52 [ 474.987008] should_fail.cold.4+0xa/0x17 [ 474.991090] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 474.996229] ? __lock_acquire+0x7ec/0x4ec0 [ 475.000482] ? print_usage_bug+0xc0/0xc0 [ 475.004563] ? rcu_softirq_qs+0x20/0x20 [ 475.008549] ? dput.part.25+0x241/0x790 [ 475.012567] ? graph_lock+0x170/0x170 [ 475.016433] ? mark_held_locks+0x130/0x130 [ 475.020682] ? find_held_lock+0x36/0x1c0 [ 475.024768] ? ttwu_stat+0x5c0/0x5c0 [ 475.028494] ? __lock_acquire+0x7ec/0x4ec0 [ 475.032742] __should_failslab+0x124/0x180 [ 475.036996] should_failslab+0x9/0x14 [ 475.040808] kmem_cache_alloc_node_trace+0x270/0x740 [ 475.045930] __get_vm_area_node+0x130/0x3a0 [ 475.050266] __vmalloc_node_range+0xc4/0x750 [ 475.054692] ? bpf_prog_alloc+0xe3/0x3e0 [ 475.058760] ? get_pid_task+0xd6/0x1a0 [ 475.062663] __vmalloc+0x45/0x50 [ 475.066036] ? bpf_prog_alloc+0xe3/0x3e0 [ 475.070106] bpf_prog_alloc+0xe3/0x3e0 [ 475.074019] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 475.078879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.084428] ? security_capable+0x99/0xc0 [ 475.088603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.094165] bpf_prog_load+0x435/0x1cb0 [ 475.098166] ? bpf_prog_new_fd+0x60/0x60 [ 475.102245] ? __might_fault+0x12b/0x1e0 [ 475.106314] ? lock_downgrade+0x900/0x900 [ 475.110479] ? lock_release+0x970/0x970 [ 475.114456] ? ttwu_stat+0x5c0/0x5c0 [ 475.118191] ? usercopy_warn+0x110/0x110 [ 475.122311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 475.127857] __x64_sys_bpf+0x36c/0x510 [ 475.131756] ? bpf_prog_get+0x20/0x20 [ 475.135584] do_syscall_64+0x1b9/0x820 [ 475.139480] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 475.144850] ? syscall_return_slowpath+0x5e0/0x5e0 [ 475.149786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.154640] ? trace_hardirqs_off+0x310/0x310 [ 475.159161] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 475.164191] ? prepare_exit_to_usermode+0x291/0x3b0 [ 475.169224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.174085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.179287] RIP: 0033:0x457679 [ 475.182489] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.201495] RSP: 002b:00007f8dc7ad1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.209239] RAX: ffffffffffffffda RBX: 00007f8dc7ad26d4 RCX: 0000000000457679 03:36:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x12, 0x4e22}, 0x1c) close(r2) 03:36:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x3, 0x4e22}, 0x1c) close(r2) [ 475.216513] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000005 [ 475.223786] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 475.231060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 475.238346] R13: 00000000004cc328 R14: 00000000004bdb29 R15: 0000000000000000 [ 475.268306] binder: 19659:19666 unknown command 64 [ 475.275854] binder: 19659:19666 ioctl c0306201 20007000 returned -22 [ 475.301545] binder: BINDER_SET_CONTEXT_MGR already set [ 475.309093] binder: 19659:19672 ioctl 40046207 0 returned -16 03:36:31 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:31 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x7a000000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 475.315402] binder: 19659:19666 unknown command 64 [ 475.321274] binder: 19659:19666 ioctl c0306201 20007000 returned -22 [ 475.349251] syz-executor5: vmalloc: allocation failure: 4096 bytes, mode:0x6280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 475.372782] syz-executor5 cpuset=syz5 mems_allowed=0 [ 475.386289] CPU: 1 PID: 19654 Comm: syz-executor5 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 475.394865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.404222] Call Trace: [ 475.406841] dump_stack+0x1d3/0x2c4 [ 475.410513] ? dump_stack_print_info.cold.2+0x52/0x52 [ 475.412917] binder: BINDER_SET_CONTEXT_MGR already set [ 475.415723] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 475.415748] warn_alloc.cold.121+0xb7/0x1bd [ 475.415771] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 475.415790] ? __get_vm_area_node+0x130/0x3a0 [ 475.415810] ? rcu_read_lock_sched_held+0x108/0x120 [ 475.415842] ? __get_vm_area_node+0x2e5/0x3a0 [ 475.415869] __vmalloc_node_range+0x472/0x750 [ 475.428004] binder: 19677:19679 ioctl 40046207 0 returned -16 [ 475.431018] ? get_pid_task+0xd6/0x1a0 [ 475.431046] __vmalloc+0x45/0x50 [ 475.431064] ? bpf_prog_alloc+0xe3/0x3e0 [ 475.431081] bpf_prog_alloc+0xe3/0x3e0 [ 475.431100] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 475.431135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.431153] ? security_capable+0x99/0xc0 [ 475.431187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.495588] bpf_prog_load+0x435/0x1cb0 [ 475.499576] ? bpf_prog_new_fd+0x60/0x60 [ 475.503655] ? __might_fault+0x12b/0x1e0 [ 475.507724] ? lock_downgrade+0x900/0x900 [ 475.511890] ? lock_release+0x970/0x970 [ 475.515868] ? ttwu_stat+0x5c0/0x5c0 [ 475.519594] ? usercopy_warn+0x110/0x110 [ 475.523685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 475.529235] __x64_sys_bpf+0x36c/0x510 [ 475.533144] ? bpf_prog_get+0x20/0x20 [ 475.536979] do_syscall_64+0x1b9/0x820 [ 475.540875] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 475.546272] ? syscall_return_slowpath+0x5e0/0x5e0 [ 475.551223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.556097] ? trace_hardirqs_off+0x310/0x310 [ 475.560621] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 475.565670] ? prepare_exit_to_usermode+0x291/0x3b0 [ 475.570784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.575648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.580843] RIP: 0033:0x457679 [ 475.584054] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.603266] RSP: 002b:00007f8dc7ad1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.610980] RAX: ffffffffffffffda RBX: 00007f8dc7ad26d4 RCX: 0000000000457679 03:36:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xb, 0x4e22}, 0x1c) close(r2) [ 475.618278] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000005 [ 475.625551] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 475.632841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 475.640131] R13: 00000000004cc328 R14: 00000000004bdb29 R15: 0000000000000000 03:36:32 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x2000, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="f20e263793ea84857029359c89868c0732ee0d01934a7221d7395451a9e0ae6b0b0708e76f185407b069baf1a16bc399ce6801658eb45bf7ae0b01aae29bcbc6057660c6d13231cb785ef9a58badf3d9342721ad1a75548767687b54512f3db6acbbad3b"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0xf, 0x80005, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x8, 0x4) 03:36:32 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x3, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 475.726523] binder: BINDER_SET_CONTEXT_MGR already set [ 475.737894] binder: 19688:19691 ioctl 40046207 0 returned -16 03:36:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xfffffffd, 0x4e22}, 0x1c) close(r2) [ 475.772370] Mem-Info: [ 475.775111] active_anon:147222 inactive_anon:369 isolated_anon:0 [ 475.775111] active_file:4940 inactive_file:13228 isolated_file:0 [ 475.775111] unevictable:0 dirty:360 writeback:0 unstable:0 [ 475.775111] slab_reclaimable:12042 slab_unreclaimable:102895 [ 475.775111] mapped:55211 shmem:379 pagetables:2110 bounce:0 [ 475.775111] free:1255660 free_pcp:891 free_cma:0 [ 475.819846] Node 0 active_anon:584776kB inactive_anon:1476kB active_file:19760kB inactive_file:52912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220844kB dirty:1440kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.895326] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.955138] lowmem_reserve[]: 0 2815 6318 6318 [ 475.964611] Node 0 DMA32 free:2885836kB min:30036kB low:37544kB high:45052kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2887232kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1396kB local_pcp:68kB free_cma:0kB [ 475.995553] lowmem_reserve[]: 0 0 3503 3503 [ 476.002044] Node 0 Normal free:2124160kB min:37376kB low:46720kB high:56064kB active_anon:584832kB inactive_anon:1476kB active_file:19760kB inactive_file:52912kB unevictable:0kB writepending:1440kB present:4718592kB managed:3587504kB mlocked:0kB kernel_stack:7968kB pagetables:8292kB bounce:0kB free_pcp:2536kB local_pcp:1332kB free_cma:0kB [ 476.033332] lowmem_reserve[]: 0 0 0 0 [ 476.037299] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 476.051319] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 1*128kB (M) 3*256kB (M) 2*512kB (M) 2*1024kB (M) 3*2048kB (M) 702*4096kB (M) = 2885836kB [ 476.067034] Node 0 Normal: 302*4kB (E) 411*8kB (UME) 2815*16kB (UME) 1129*32kB (UME) 353*64kB (UME) 131*128kB (UME) 310*256kB (UME) 171*512kB (U) 74*1024kB (UM) 32*2048kB (UME) 413*4096kB (UM) = 2124896kB [ 476.086097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.095071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 03:36:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xfffffffd, 0x4e22}, 0x1c) close(r2) 03:36:32 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:32 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40406301}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 476.103874] 18549 total pagecache pages [ 476.108024] 0 pages in swap cache [ 476.111542] Swap cache stats: add 0, delete 0, find 0/0 [ 476.117101] Free swap = 0kB [ 476.120193] Total swap = 0kB [ 476.123262] 1965979 pages RAM [ 476.126481] 0 pages HighMem/MovableOnly [ 476.130554] 343318 pages reserved [ 476.134154] 0 pages cma reserved [ 476.177828] binder: 19712:19714 got reply transaction with no transaction stack [ 476.198646] binder: 19712:19714 transaction failed 29201/-71, size 0-24378 line 2741 03:36:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:32 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 476.223798] binder: BINDER_SET_CONTEXT_MGR already set [ 476.229551] binder: 19712:19722 ioctl 40046207 0 returned -16 [ 476.235917] binder: 19712:19714 got reply transaction with no transaction stack [ 476.247303] binder: undelivered TRANSACTION_ERROR: 29201 [ 476.253971] binder: 19712:19714 transaction failed 29201/-71, size 0-24378 line 2741 [ 476.263378] binder: undelivered TRANSACTION_ERROR: 29201 03:36:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e03}, 0x1c) close(r2) 03:36:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x4, 0x4e22}, 0x1c) close(r2) 03:36:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f20e"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000013c0)={0x0, 0x0, 0x2080}) 03:36:32 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:32 executing program 5: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) 03:36:32 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xf00, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) 03:36:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x7fffffff) r1 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)='ppp0\x00', 0x0) r2 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)="1cf8424679277a5a80d700717517f731c3d83fa6f0148fefdee94f90222c820fbf0675412488054f6c532ead74ffd9", 0x2f, 0xfffffffffffffffc) keyctl$negate(0xd, r1, 0x10000, r2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) [ 476.459834] binder: BC_ATTEMPT_ACQUIRE not supported [ 476.477003] binder: 19749:19750 ioctl c0306201 20007000 returned -22 [ 476.491029] binder: BINDER_SET_CONTEXT_MGR already set [ 476.498907] binder: 19749:19753 ioctl 40046207 0 returned -16 03:36:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0x8, 0x4e22}, 0x1c) close(r2) [ 476.555227] kasan: CONFIG_KASAN_INLINE enabled [ 476.560630] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 476.568091] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 476.574368] CPU: 1 PID: 19752 Comm: syz-executor2 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 476.579889] kobject: 'loop0' (0000000088ee4f8b): kobject_uevent_env [ 476.582868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.582891] RIP: 0010:finish_task_switch+0x3a4/0x900 03:36:33 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)=[{&(0x7f0000006000)=':_', 0x2}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x4048630a}], 0x0, 0x0, &(0x7f0000002000)}) [ 476.582908] Code: 3d 04 00 00 4d 8b bc 24 50 03 00 00 4d 85 ff 0f 84 ab fe ff ff 49 bc 00 00 00 00 00 fc ff df 49 8d 7f 10 48 89 f9 48 c1 e9 03 <42> 80 3c 21 00 0f 85 da 03 00 00 49 8b 4f 10 48 89 ce 48 c1 ee 03 [ 476.582924] RSP: 0018:ffff88018e8ce990 EFLAGS: 00010a06 [ 476.604831] kobject: 'loop0' (0000000088ee4f8b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 476.622724] RAX: 0000000000000000 RBX: ffff8801dad2cc40 RCX: 1bd5a00000000022 [ 476.622734] RDX: 0000000000000534 RSI: ffffffff810f018e RDI: dead000000000110 03:36:33 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000100)=@raw=[@map, @ldst={0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x1, [], 0x0, 0x2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) [ 476.622744] RBP: ffff88018e8cea78 R08: ffff8801c1a0e080 R09: fffff52001cf8446 [ 476.622753] R10: fffff52001cf8446 R11: ffffc9000e7c2237 R12: dffffc0000000000 [ 476.622763] R13: ffff880171d86040 R14: 0000000000000000 R15: dead000000000100 [ 476.622777] FS: 00007fda52c53700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 476.622788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.622797] CR2: 00000000004ddbeb CR3: 00000001c109d000 CR4: 00000000001426e0 [ 476.622807] Call Trace: [ 476.622829] ? __switch_to_asm+0x34/0x70 03:36:33 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) 03:36:33 executing program 4: memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x1200, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x41000, 0x1, [], 0x0, 0x2}, 0x48) [ 476.622848] ? preempt_notifier_register+0x200/0x200 [ 476.622862] ? __switch_to_asm+0x34/0x70 [ 476.622878] ? __switch_to_asm+0x34/0x70 [ 476.622892] ? __switch_to_asm+0x40/0x70 [ 476.622907] ? __switch_to_asm+0x34/0x70 [ 476.622922] ? __switch_to_asm+0x40/0x70 [ 476.622936] ? __switch_to_asm+0x34/0x70 [ 476.622951] ? __switch_to_asm+0x40/0x70 [ 476.622965] ? __switch_to_asm+0x34/0x70 [ 476.622980] ? __switch_to_asm+0x34/0x70 [ 476.623000] ? __switch_to_asm+0x40/0x70 [ 476.654893] binder: 19772:19773 unknown command 1078485770 [ 476.659710] ? __switch_to_asm+0x34/0x70 [ 476.659726] ? __switch_to_asm+0x40/0x70 [ 476.659741] ? __switch_to_asm+0x34/0x70 [ 476.659756] ? __switch_to_asm+0x40/0x70 [ 476.659773] __schedule+0x874/0x1ed0 [ 476.659791] ? find_held_lock+0x36/0x1c0 [ 476.659814] ? __sched_text_start+0x8/0x8 [ 476.671750] kobject: 'loop1' (000000003bdf85ca): kobject_uevent_env [ 476.674460] ? __lock_is_held+0xb5/0x140 [ 476.674480] ? find_held_lock+0x36/0x1c0 [ 476.674500] ? mark_held_locks+0xc7/0x130 [ 476.674523] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 476.710528] binder: 19772:19773 ioctl c0306201 20007000 returned -22 [ 476.711998] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 476.712019] ? lockdep_hardirqs_on+0x421/0x5c0 [ 476.712038] ? preempt_schedule+0x4d/0x60 [ 476.727509] kobject: 'loop1' (000000003bdf85ca): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 476.728271] preempt_schedule_common+0x1f/0xd0 [ 476.737060] binder: BINDER_SET_CONTEXT_MGR already set [ 476.740444] preempt_schedule+0x4d/0x60 [ 476.740463] ___preempt_schedule+0x16/0x18 [ 476.740484] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 476.740503] __call_srcu+0x88d/0x12a0 [ 476.740520] ? lockdep_hardirqs_on+0x421/0x5c0 [ 476.740542] ? do_raw_spin_trylock+0x130/0x1c0 [ 476.767785] kobject: 'loop5' (00000000680f7c98): kobject_uevent_env [ 476.770513] ? srcu_offline_cpu+0x120/0x120 [ 476.770531] ? kasan_check_write+0x14/0x20 [ 476.770553] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 476.770572] ? __debug_object_init+0x57d/0x1290 [ 476.770593] ? check_preemption_disabled+0x48/0x200 [ 476.776169] binder: 19772:19781 ioctl 40046207 0 returned -16 [ 476.778388] ? debug_object_free+0x690/0x690 [ 476.778405] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 476.778429] ? rcu_softirq_qs+0x20/0x20 [ 476.778444] ? rcu_softirq_qs+0x20/0x20 [ 476.778459] ? unwind_dump+0x190/0x190 [ 476.778480] ? __lock_is_held+0xb5/0x140 [ 476.788845] kobject: 'loop5' (00000000680f7c98): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 476.789032] ? __lockdep_init_map+0x105/0x590 [ 476.802808] binder: 19772:19773 unknown command 1078485770 [ 476.806377] ? __init_waitqueue_head+0x9e/0x150 [ 476.806392] ? init_wait_entry+0x1c0/0x1c0 [ 476.806418] __synchronize_srcu+0x201/0x2d0 [ 476.806436] ? call_srcu+0x10/0x10 [ 476.806453] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.806469] ? graph_lock+0x170/0x170 [ 476.806487] ? rcu_unexpedite_gp+0x20/0x20 [ 476.806514] synchronize_srcu_expedited+0x18/0x20 [ 476.814837] kobject: 'loop4' (00000000272ac02b): kobject_uevent_env [ 476.818098] install_new_memslots+0x20a/0x4b0 [ 476.818127] ? kvm_dying_cpu+0x50/0x50 [ 476.818145] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 476.818162] ? kasan_unpoison_shadow+0x35/0x50 [ 476.818182] ? __lock_is_held+0xb5/0x140 [ 476.818204] __kvm_set_memory_region+0x1ae0/0x2c60 [ 476.818227] ? kvm_vcpu_compat_ioctl+0x4a0/0x4a0 [ 476.818248] ? ttwu_stat+0x5c0/0x5c0 [ 476.831744] binder: 19772:19773 ioctl c0306201 20007000 returned -22 [ 476.836400] ? do_raw_spin_unlock+0xa7/0x2f0 [ 476.836415] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 476.836433] ? lock_acquire+0x1ed/0x520 [ 476.836451] ? graph_lock+0x170/0x170 [ 476.836466] ? __might_sleep+0x95/0x190 [ 476.836486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.836502] ? futex_wait_queue_me+0x55d/0x840 [ 476.836523] ? find_held_lock+0x36/0x1c0 [ 476.836547] ? __might_fault+0x12b/0x1e0 [ 476.841446] kobject: 'loop4' (00000000272ac02b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 476.846420] ? lock_downgrade+0x900/0x900 [ 476.846443] ? __lock_acquire+0x7ec/0x4ec0 [ 476.846474] kvm_set_memory_region+0x2e/0x50 [ 476.846493] kvm_vm_ioctl+0x652/0x1d60 [ 476.846508] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 476.846522] ? futex_wake+0x304/0x760 [ 476.846540] ? kvm_set_memory_region+0x50/0x50 [ 476.846565] ? kvm_dev_ioctl+0x18a/0x1ae0 [ 476.864183] kobject: 'loop5' (00000000680f7c98): kobject_uevent_env [ 476.868049] ? is_bpf_text_address+0xac/0x170 [ 476.868072] ? graph_lock+0x170/0x170 [ 476.868087] ? do_futex+0x249/0x26d0 [ 476.868104] ? rcu_softirq_qs+0x20/0x20 [ 476.868130] ? unwind_dump+0x190/0x190 [ 476.868152] ? find_held_lock+0x36/0x1c0 [ 476.868174] ? __fget+0x4aa/0x740 [ 476.868195] ? lock_downgrade+0x900/0x900 [ 476.888346] kobject: 'loop5' (00000000680f7c98): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 476.892810] ? check_preemption_disabled+0x48/0x200 [ 476.892828] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 476.892856] ? kasan_check_read+0x11/0x20 [ 476.892872] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 476.892887] ? rcu_softirq_qs+0x20/0x20 [ 476.892918] ? __fget+0x4d1/0x740 [ 477.193704] ? ksys_dup3+0x680/0x680 [ 477.197434] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.202897] ? kasan_check_write+0x14/0x20 [ 477.207149] ? trace_hardirqs_off+0xb8/0x310 [ 477.211572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.217131] ? kvm_set_memory_region+0x50/0x50 [ 477.221727] do_vfs_ioctl+0x1de/0x1720 [ 477.225658] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 477.231208] ? ioctl_preallocate+0x300/0x300 [ 477.235624] ? __fget_light+0x2e9/0x430 [ 477.239615] ? fget_raw+0x20/0x20 [ 477.243085] ? putname+0xf2/0x130 [ 477.246566] ? rcu_read_lock_sched_held+0x108/0x120 [ 477.251589] ? kmem_cache_free+0x24f/0x290 [ 477.255834] ? __x64_sys_futex+0x47f/0x6a0 [ 477.260079] ? do_syscall_64+0x9a/0x820 [ 477.264074] ? do_syscall_64+0x9a/0x820 [ 477.268059] ? lockdep_hardirqs_on+0x421/0x5c0 [ 477.272661] ? security_file_ioctl+0x94/0xc0 [ 477.277096] ksys_ioctl+0xa9/0xd0 [ 477.280578] __x64_sys_ioctl+0x73/0xb0 [ 477.284481] do_syscall_64+0x1b9/0x820 [ 477.288379] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 477.293753] ? syscall_return_slowpath+0x5e0/0x5e0 [ 477.298692] ? trace_hardirqs_off+0x310/0x310 [ 477.303206] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 477.308236] ? recalc_sigpending_tsk+0x180/0x180 [ 477.313018] ? kasan_check_write+0x14/0x20 [ 477.317269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.322134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.327342] RIP: 0033:0x457679 [ 477.330565] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.349469] RSP: 002b:00007fda52c52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.357186] RAX: ffffffffffffffda RBX: 00007fda52c536d4 RCX: 0000000000457679 [ 477.364463] RDX: 00000000200002c0 RSI: 000000004020ae46 RDI: 0000000000000007 [ 477.371738] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 477.379177] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 477.386450] R13: 00000000004d0330 R14: 00000000004c85c8 R15: 0000000000000000 [ 477.394035] Modules linked in: [ 477.397321] ---[ end trace 70a79af30515db7e ]--- [ 477.402099] RIP: 0010:finish_task_switch+0x3a4/0x900 [ 477.407261] Code: 3d 04 00 00 4d 8b bc 24 50 03 00 00 4d 85 ff 0f 84 ab fe ff ff 49 bc 00 00 00 00 00 fc ff df 49 8d 7f 10 48 89 f9 48 c1 e9 03 <42> 80 3c 21 00 0f 85 da 03 00 00 49 8b 4f 10 48 89 ce 48 c1 ee 03 [ 477.426201] RSP: 0018:ffff88018e8ce990 EFLAGS: 00010a06 [ 477.431575] RAX: 0000000000000000 RBX: ffff8801dad2cc40 RCX: 1bd5a00000000022 [ 477.438889] RDX: 0000000000000534 RSI: ffffffff810f018e RDI: dead000000000110 [ 477.446408] RBP: ffff88018e8cea78 R08: ffff8801c1a0e080 R09: fffff52001cf8446 [ 477.453687] R10: fffff52001cf8446 R11: ffffc9000e7c2237 R12: dffffc0000000000 [ 477.461007] R13: ffff880171d86040 R14: 0000000000000000 R15: dead000000000100 [ 477.468313] FS: 00007fda52c53700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 477.476562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.482461] CR2: 00000000004ddbeb CR3: 00000001c109d000 CR4: 00000000001426e0 [ 477.489763] Kernel panic - not syncing: Fatal exception [ 477.496055] Kernel Offset: disabled [ 477.499720] Rebooting in 86400 seconds..